1

Today, my data center suspended my VPS for DDoS attack reasons. They say one of my clients, that has WordPress website, started a DDOS attack to another websites using xmlrpc. But I don't know which of my customers abused!

Please tell me how I can find which of my clients started the DDoS attack, because I must terminate then from my VPS.

Also please tell me how I can prevention from same issue if it happens again.

My VPS have CPanel and WHM and SSH access, OS is Centos.

|improve this question
  • the logs should tell you where the traffic came from. – schroeder♦ Jan 7 '16 at 4:27
  • So how i view all logs of my websites? @schroeder – Ebad ghafoory Jan 7 '16 at 10:03
  • That's a question for SuperUser, and it depends on the technology you are using. – schroeder♦ Jan 7 '16 at 15:32
  • @schroeder I'm using WHM and i have root access – Ebad ghafoory Jan 9 '16 at 13:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.