{"version":"1.0","type":"rich","title":"Bash stuff for fighting a weak DOS attack","description":"This example demonstrates a set of bash one-liners for diagnosing and mitigating a weak SYN flood attack on a web server, focusing on analyzing TCP connection states and per-IP connection counts. It shows the sequence of commands used to inspect active port 80 connections via `netstat` and `awk`, increase file descriptor limits with `ulimit`, restart the web server, and identify attacking machines by tallying source IPs. The final step employs `iptables` with the `connlimit` module to reject new connections beyond a threshold, while the code also references `whois` for geolocation. No data visualization libraries are used; the output is purely text-based command-line analysis.","provider_name":"VizHub AI Studio","provider_url":"https://next.vizhub.com","html":"<iframe src=\"https://next.vizhub.com/viz/gist-1324978?mode=embed\" width=\"960\" height=\"500\" scrolling=\"no\" frameborder=\"1\"></iframe>","width":960,"height":500,"cache_age":3600}