Hello I received a warning via my provider about a DDOS attack. How do you know who had the attack, what site, what it directory, is there an order to check this? Thank you for your help Mz
Take a look at your log files, there you find IP addresses of the server systems that contacted your server and also which website was attacked if the target was a website. But what you try to achieve makes no sense, so don't waste your time, you will not find out who attacked you.
Didn't you have a command or tool to detect viruses or files that have been added to what I've written before?
Is your server being attacked or does your server attacks other servers via DDOS? I understand the first post that your server has been attacked and in this case, there are no files or viruses added to your server as a DDOS attack means that many external systems send more network traffic to your server than your server can handle.
If your server is not being attacked but it attacks other systems, then you can use these tools to scan it: https://www.howtoforge.com/tutorial/how-to-scan-linux-for-malware-and-rootkits/
