Sometimes apache's getting beat up, either by accident or on purpose. Who's doing it? What IP addresses are hitting web ports, and how heavily?
netstat -pant | sed -e 's/::ffff://g' | awk -F' *|:' ' $5 ~ /80|443/ {print $6 } ' | sort | uniq -c | sort -n
The resulting list will show which IPs are hitting the websites the hardest at the bottom of the list.
No comments:
Post a Comment