IP sending most packets?

[NationWebHost]

Hello,

I am not a SSH expert, although I am aware there is a command that allows you to see what IPs are sending the most packets.

The reason I can access SSH is because the dedicated server is on two lines, one of which is being DDoSeD.

Does someone know the command to stop it ?

Thanks a lot!

NationWebHost Reviewed by NationWebHost on 4th Jun 2010. IP sending most packets? Hello, I am not a SSH expert, although I am aware there is a command that allows you to see what IPs are sending the most packets. The reason I can access SSH is because the dedicated server is on two lines, one of which is being DDoSeD. Does someone know the command to stop it :)? Thanks a lot! Rating: 5

[Lifetalk]

Do a

netstat -n

Then, check for the IP addresses that are hitting you the most. If there's multiple, check for the states such as TIME_WAIT or SYN_RECEIVE or SYN_SENT, etc .. basically.. anything that seems suspicious.

If you want to block an IP, use these commands:

iptables -I INPUT -s IPADDRESS -j DROP

then

iptables save
iptables restart

[NationWebHost]

Thank you so much !