Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

my server was down for a couple of hours during the night. i see in the cpu load monitoring in the amazon AWS console that it was 100% load. also, the network in jumped (but no that dramatically) so how do i know if it was a DDoS or something else?

the server is ubuntu running apache.

share|improve this question
By checking your log files and detailed monitoring. – HBruijn Feb 27 '14 at 7:15
can you elaborate? i'm new to this. what logs? – Moshe Shaham Feb 27 '14 at 7:21
Most services on Linux generate usage and/or error log files in the /var/log directory. – HBruijn Feb 27 '14 at 7:24

You will need to check your logs to see if there are any relevant messages from around the time of the spike.

You should consider installing a monitoring solution that will gather statistics about your system activity and help you diagnose issues.

share|improve this answer
i checked the error log, and there is nothing relevant. I checked the access log and it seems like pretty regular requests, and not that many until log ended... – Moshe Shaham Feb 27 '14 at 7:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.