www.cPanel.vn

If you are seeing many “? ..reading..” when your are clicking on Apache status in WHM and your Apache server is slow, there is a chance that your http server is under a dos attach.
You can check this out by:

1. Log on your server as root
2. Type the fallowing command

netstat -plan|grep :80|awk {’print $5′}|cut -d: -f 1|sort|uniq -c|sort -n


You will see a list of IP’s with the number of connections each once has to your server.

3. If any IP’s have more then 100 connections then there is a chance that this is your attacker. Go ahead and block this IP using APF if you have it installed or CSF

                    apf -d IP
                    or
                    csf -d IP

Hope it helps !