How to tell if the server was down because of DDoS of another reason?

Question

my server was down for a couple of hours during the night. i see in the cpu load monitoring in the amazon AWS console that it was 100% load. also, the network in jumped (but no that dramatically) so how do i know if it was a DDoS or something else?

the server is ubuntu running apache.

Most services on Linux generate usage and/or error log files in the /var/log directory. — HBruijn, Feb 27 '14 at 07:24

score 0 · Answer 1 · edited Apr 13 '17 at 12:14

0

You will need to check your logs to see if there are any relevant messages from around the time of the spike.

You should consider installing a monitoring solution that will gather statistics about your system activity and help you diagnose issues.

edited Apr 13 '17 at 12:14

Community

1

answered Feb 27 '14 at 07:23

user9517

114,104
20
206
289

i checked the error log, and there is nothing relevant. I checked the access log and it seems like pretty regular requests, and not that many until log ended... – Moshe Shaham Feb 27 '14 at 07:49

How to tell if the server was down because of DDoS of another reason?

1 Answers1