https://wiki.tecnicorioja.com/index.php?action=history&feed=atom&title=Ddos-attack Ddos-attack - Historial de revisiones 2026-07-23T20:37:13Z Historial de revisiones de esta página en la wiki MediaWiki 1.43.0 https://wiki.tecnicorioja.com/index.php?title=Ddos-attack&diff=15&oldid=prev Dcerdera: Página creada con «Categoría: Linux Detección del ataque ==='''SSH'''=== <pre> journalctl --since "24 hour ago" | grep -i "Failed password for invalid user" | awk '{print $13}' | sort -n | uniq </pre> <pre> journalctl --since "24 hour ago" | grep -i "Failed password for root " | awk '{print $11}' | sort -n | uniq </pre> ==='''MYSQL'''=== '''En plesk''': <pre> watch -n 0.5 'mysql -uadmin -p`cat /etc/psa/.psa.shadow` -e "show processlist;"' </pre> ==='''WEB'''=== ==='''Postfi…» 2025-01-29T21:42:54Z <p>Página creada con «<a href="/index.php?title=Categor%C3%ADa:Linux&amp;action=edit&amp;redlink=1" class="new" title="Categoría:Linux (la página no existe)">Categoría: Linux</a> Detección del ataque ===&#039;&#039;&#039;SSH&#039;&#039;&#039;=== &lt;pre&gt; journalctl --since &quot;24 hour ago&quot; | grep -i &quot;Failed password for invalid user&quot; | awk &#039;{print $13}&#039; | sort -n | uniq &lt;/pre&gt; &lt;pre&gt; journalctl --since &quot;24 hour ago&quot; | grep -i &quot;Failed password for root &quot; | awk &#039;{print $11}&#039; | sort -n | uniq &lt;/pre&gt; ===&#039;&#039;&#039;MYSQL&#039;&#039;&#039;=== &#039;&#039;&#039;En plesk&#039;&#039;&#039;: &lt;pre&gt; watch -n 0.5 &#039;mysql -uadmin -p`cat /etc/psa/.psa.shadow` -e &quot;show processlist;&quot;&#039; &lt;/pre&gt; ===&#039;&#039;&#039;WEB&#039;&#039;&#039;=== ===&#039;&#039;&#039;Postfi…»</p> <p><b>Página nueva</b></p><div>[[Categoría: Linux]]<br /> Detección del ataque<br /> <br /> ===&#039;&#039;&#039;SSH&#039;&#039;&#039;===<br /> &lt;pre&gt;<br /> journalctl --since &quot;24 hour ago&quot; | grep -i &quot;Failed password for invalid user&quot; | awk &#039;{print $13}&#039; | sort -n | uniq &lt;/pre&gt;<br /> <br /> &lt;pre&gt; journalctl --since &quot;24 hour ago&quot; | grep -i &quot;Failed password for root &quot; | awk &#039;{print $11}&#039; | sort -n | uniq &lt;/pre&gt;<br /> <br /> ===&#039;&#039;&#039;MYSQL&#039;&#039;&#039;===<br /> &#039;&#039;&#039;En plesk&#039;&#039;&#039;:<br /> &lt;pre&gt; watch -n 0.5 &#039;mysql -uadmin -p`cat /etc/psa/.psa.shadow` -e &quot;show processlist;&quot;&#039; &lt;/pre&gt;<br /> <br /> ===&#039;&#039;&#039;WEB&#039;&#039;&#039;===<br /> <br /> <br /> ===&#039;&#039;&#039;Postfix&#039;&#039;&#039; ===<br /> Intentos fallidos de login<br /> &lt;pre&gt;journalctl --since &quot;4 hour ago&quot; | grep &quot;SASL LOGIN authentication failed:&quot; | awk &#039;{print $7}&#039;| cut -d [ -f2 | cut -d ] -f1 | sort -n | uniq -c | sort -n | awk &#039;{print $2}&#039;&lt;/pre&gt;</div> Dcerdera