How to find cause of high PPS on cpanel server?

postcd

• February 01, 2015 13:46

Hello, linux centos cpanel virtual private server got like 200 000 pps during 5 seconds (Nodewatch told this), i would like to ask how on cpanel server i can discover if/which website/user account was source/destination of this. I know cpanel server do not have common access log, i mean all domains has their own logs,s o its too much logs. Maybe it was an attack on whole VPS IP, but just want to ask above question on what to look in case of such high PPS. thx

• 

  cPanelMichael

  • February 02, 2015 15:32

  Hello :) It's likely easier to detect this type of attack from the network level. You can review your Apache domlogs, but it's likely not going to help pinpoint the source of the attack. You can search for "PPS attack ddos" on a search engine and you will get several results and threads on how to best mitigate such an attack. Thank you.

  0

Please sign in to leave a comment.