When the website undergone attack can be installed on the server CSF.
CSF will allow us to see that line of code IP attack site and then block the IP in the firewall.
netstat -n | grep ':80' | awk -F' ' '{print $5}' | awk -F':' '{print
$1}' | sort | uniq -c | sort -n