设为首页
收藏本站
用户名
Email
自动登录
找回密码
密码
登录
注册
快捷导航
平台
Portal
论坛
BBS
文库
项目
群组
Group
我的博客
Space
搜索
搜索
热搜:
shell
linux
mysql
本版
用户
LinuxSir.cn,穿越时空的Linuxsir!
»
论坛
›
运维技术 —— LinuxSir.cn
›
网络技术\网络安全讨论
›
请问,这是被人DDOS了吗?
返回列表
查看:
2167
|
回复:
8
请问,这是被人DDOS了吗?
[复制链接]
aw8
aw8
当前离线
积分
80
IP卡
狗仔卡
发表于 2004-7-20 14:01:20
|
显示全部楼层
|
阅读模式
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 xxx.xxx.xxx.xxx:http 122.29.40.67:5144 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 190.116.54.31:45395 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 157.25.38.12:50537 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 143.62.127.42:44107 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 47.71.180.14:53017 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 208.105.45.40:49786 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 123.121.182.68:58385 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 70.17.208.60:65345 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 117.115.195.108:45342 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 90.99.249.42:59910 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 45.0.137.13:47636 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 74.34.43.53:27418 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 112.67.13.93:29463 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 9.62.52.41:11265 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 120.127.95.80:5140 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 97.94.193.105:52562 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 122.115.49.20:8710 SYN_RECV
[root@localhost root]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 xxx.xxx.xxx.xxx:http 39.87.189.104:51564 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 98.1.132.43:62270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 149.21.149.72:31270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 141.101.174.37:3692 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http biochem03.tiho-ha:44306 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 130.94.7.84:35335 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 11.63.106.38:19249 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 82.75.170.45:34836 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.92.189.4:53305 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http h-67-102-155-31.n:57666 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 43.83.2.41:9584 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 56.83.236.33:56958 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 104.95.35.84:27946 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 61.28.109.26:12899 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 215.59.76.81:37224 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 189.16.206.110:6428 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 47.58.38.39:14373 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 139.125.163.33:31493 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 157.71.254.45:14904 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 218.79.97.4:33656 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 196.34.1.86:55911 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 162.12.81.12:37741 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 137.66.213.26:10273 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 141.127.106.118:41281 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 109.125.96.27:19246 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 202.18.122.49:49245 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 162.115.242.5:12038 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 133.87.252.69:23328 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 87.22.3.124:32337 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 165.4.30.10:59726 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 203.122.117.28:42605 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 1Cust5165.an4.bos:48731 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.61.48.36:13575 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 156.57.158.98:15985 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 88.84.243.17:65030 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 6.27.29.61:32347 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 36.40.171.17:53884 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 77.9.37.76:9746 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 134.31.118.104:49503 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 89.23.97.103:9333 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 183.32.76.10:43872 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 200.19.103.71:35691 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 152.62.237.21:2378 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 132.116.223.88:9033 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 18.36.41.77:5722 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 210.22.216.3:21075 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 105.114.129.126:37463 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 1.90.148.77:63319 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 2.43.60.38:17491 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 12.27.252.42:58883 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 4.82.195.70:33653 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 124.111.130.94:38013 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.70.234.120:56608 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 50.83.172.4:60165 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 211.83.95.121:49231 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 120.83.28.89:5458 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 29.33.0.41:5928 SYN_RECV
回复
使用道具
举报
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
显身卡
aw8
aw8
当前离线
积分
80
IP卡
狗仔卡
楼主
|
发表于 2004-7-20 14:29:25
|
显示全部楼层
[root@localhost root]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 xxx.xxx.xxx.xxx:http 122.29.40.67:5144 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 190.116.54.31:45395 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 157.25.38.12:50537 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 143.62.127.42:44107 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 47.71.180.14:53017 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 208.105.45.40:49786 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 123.121.182.68:58385 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 70.17.208.60:65345 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 117.115.195.108:45342 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 90.99.249.42:59910 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 45.0.137.13:47636 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 74.34.43.53:27418 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 112.67.13.93:29463 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 9.62.52.41:11265 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 120.127.95.80:5140 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 97.94.193.105:52562 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 122.115.49.20:8710 SYN_RECV
[root@localhost root]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 xxx.xxx.xxx.xxx:http 39.87.189.104:51564 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 98.1.132.43:62270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 149.21.149.72:31270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 141.101.174.37:3692 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http biochem03.tiho-ha:44306 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 130.94.7.84:35335 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 11.63.106.38:19249 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 82.75.170.45:34836 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.92.189.4:53305 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http h-67-102-155-31.n:57666 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 43.83.2.41:9584 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 56.83.236.33:56958 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 104.95.35.84:27946 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 61.28.109.26:12899 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 215.59.76.81:37224 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 189.16.206.110:6428 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 47.58.38.39:14373 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 139.125.163.33:31493 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 157.71.254.45:14904 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 218.79.97.4:33656 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 196.34.1.86:55911 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 162.12.81.12:37741 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 137.66.213.26:10273 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 141.127.106.118:41281 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 109.125.96.27:19246 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 202.18.122.49:49245 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 162.115.242.5:12038 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 133.87.252.69:23328 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 87.22.3.124:32337 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 165.4.30.10:59726 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 203.122.117.28:42605 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 1Cust5165.an4.bos:48731 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.61.48.36:13575 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 156.57.158.98:15985 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 88.84.243.17:65030 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 6.27.29.61:32347 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 36.40.171.17:53884 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 77.9.37.76:9746 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 134.31.118.104:49503 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 89.23.97.103:9333 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 183.32.76.10:43872 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 200.19.103.71:35691 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 152.62.237.21:2378 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 132.116.223.88:9033 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 18.36.41.77:5722 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 210.22.216.3:21075 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 105.114.129.126:37463 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 1.90.148.77:63319 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 2.43.60.38:17491 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 12.27.252.42:58883 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 4.82.195.70:33653 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 124.111.130.94:38013 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 14.70.234.120:56608 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 50.83.172.4:60165 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 211.83.95.121:49231 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 120.83.28.89:5458 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 29.33.0.41:5928 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 131.49.235.106:16472 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 29.1.63.126:17460 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 13.110.98.80:5738 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 200.12.254.98:28184 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http adsl-9-149-15.mia:33407 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 72.127.200.52:44119 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http cpc4-nmkt1-4-0-cu:47965 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 192.124.14.3:51275 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 111.79.206.105:40232 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 33.90.32.124:12578 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 84.27.217.53:37891 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 208.34.204.37:23667 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 85.65.93.86:24180 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 4.1.163.80:41824 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 45.27.186.126:39007 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 158.40.248.91:23679 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 71.7.117.119:3967 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 116.3.34.22:29443 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 90.20.75.69:14148 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 99.45.117.43:11023 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 181.82.204.16:8494 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 125.73.6.91:18708 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 56.69.57.21:17697 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 119.0.156.72:54592 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 73.32.146.13:60203 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 208.49.216.75:13938 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 180.62.68.78:61016 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 195.44.216.5:28267 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 27.76.13.111:31870 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 177.73.76.13:63096 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 132.51.225.75:9731 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 216.44.54.69:60755 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 206.6.110.65:57919 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 80.78.80.2:1904 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http d211-31-103-32.ds:58966 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 82.62.165.103:52828 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 7.66.223.115:55922 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 38.56.159.16:36703 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 90.91.197.59:45069 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 178.91.38.63:35384 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 113.114.173.73:48414 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 172.81.137.10:15104 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 198.86.187.67:4926 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 148.45.17.124:46886 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 185.50.35.26:42321 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 23.11.31.70:1286 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 16.39.33.88:24680 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 164.25.4.116:64369 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 62.90.37.34:29529 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 47.18.109.125:9280 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 28.27.15.6:2382 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 79.107.141.67:63579 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 214.101.219.73:17195 SYN_RECV
[root@localhost root]# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 xxx.xxx.xxx.xxx:http ip-129-15-113-35.:59701 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 51.96.82.114:1142 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 179.2.220.97:7953 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 151.106.52.28:60220 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 82.58.210.18:40756 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 80-26-232-96.adsl:53006 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 132.81.43.83:64083 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 15.54.252.93:62319 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 3.101.229.118:55592 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http nothing.sbcdns.co:42049 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 142.119.174.30:13691 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http pool011.Max1.GEIS-:9325 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 157.14.84.115:50553 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 123.66.227.65:35610 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 174.26.168.116:6266 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 1.115.245.26:34846 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 150.58.161.22:22337 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 64.68.95.18:4693 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 117.29.37.23:24629 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 195.103.228.16:8831 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 134.81.140.93:15152 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http host82-15-164-25.:58378 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 90.65.231.18:33120 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 13.85.191.65:45829 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 193.63.193.13:24445 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 70.127.24.28:27969 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 221.12.63.25:41030 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 43.1.163.43:59217 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 64-42-81-90.atgi.:30989 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 188.75.90.26:38455 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 92.11.231.39:57183 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 174.59.196.49:27154 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 118.113.29.22:26750 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 135.36.98.27:35403 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 204.32.230.68:8304 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 41.54.164.94:33146 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 153.29.97.76:64076 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 60.11.39.43:25727 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 154.127.32.62:60727 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 145.68.172.89:17217 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 132.31.88.116:46369 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 34.78.97.2:301 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 36.43.132.55:34332 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 78.31.39.18:17414 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 175.8.2.64:39768 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 223.109.193.72:17496 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 213.13.225.67:20495 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 75.108.39.1:6204 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 6.115.24.79:7190 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 215.43.66.104:56611 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 29.79.150.96:61027 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 161.49.92.66:63583 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 155.40.149.41:1826 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 201.25.16.31:53052 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 77.120.178.99:37723 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 3.44.31.71:4168 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 162.102.14.49:45179 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http dsc05-mpi-ca-204-:32349 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 149.87.60.72:44585 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 89.88.131.46:51287 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http pcp09373230pcs.wal:8769 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 51.44.166.22:56900 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 70.57.13.85:2841 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 100.85.2.70:16255 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 18.99.186.27:58118 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 117.43.54.110:25427 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 141.113.188.20:3439 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 223.15.147.111:20053 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 192.86.34.33:58695 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 182.23.9.78:63270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 175.86.7.28:58169 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 41.33.112.89:32614 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 96.11.65.91:14449 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 189.104.118.12:40448 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 173.102.23.80:63559 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 103.100.81.73:20862 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 165.100.79.16:53093 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http host82-19-245-8.n:44324 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 114.29.102.99:31270 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 131.64.11.86:42253 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 198.76.133.64:5485 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 163.59.131.18:6440 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 147.14.161.99:18734 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 122.119.193.110:53578 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 173.27.245.90:32094 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 158.10.183.55:5688 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http sdrc.com:46144 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 177.4.123.6:60955 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 174.4.73.105:40744 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 201.3.174.53:16208 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 85.51.58.14:3939 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 37.93.13.83:20553 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 57.96.69.45:17716 SYN_RECV
tcp 0 0 xxx.xxx.xxx.xxx:http 96.75.226.92:50193 SYN_RECV
回复
支持
反对
使用道具
举报
显身卡
dancingpig
dancingpig
当前离线
积分
1525
IP卡
狗仔卡
发表于 2004-7-20 15:40:58
|
显示全部楼层
81定
你如果是提供http服务
应该是会有很多流量
主要是看比平时流量是不是大很多
ddos的情况是流量暴涨,而且严重可能使你的主机不能响应服务
回复
支持
反对
使用道具
举报
显身卡
aw8
aw8
当前离线
积分
80
IP卡
狗仔卡
楼主
|
发表于 2004-7-20 16:17:16
|
显示全部楼层
就是这个现象.所有服务停止响应.服务器假死.
分两波,一波是全部是10.168.*的IP,持续两个多小时,再另一波就是上面贴出来的,全部是国外的假IP地址.
回复
支持
反对
使用道具
举报
显身卡
aw8
aw8
当前离线
积分
80
IP卡
狗仔卡
楼主
|
发表于 2004-7-20 16:18:25
|
显示全部楼层
还有像这种DDOS攻击的话,有没有或能捉信攻击者?
回复
支持
反对
使用道具
举报
显身卡
xuanliang
xuanliang
当前离线
积分
14
IP卡
狗仔卡
发表于 2004-7-22 11:44:07
|
显示全部楼层
需要电信配合,检查边界路由才能查出.
回复
支持
反对
使用道具
举报
显身卡
Snoopy
Snoopy
当前离线
积分
7263
IP卡
狗仔卡
发表于 2004-7-23 01:41:09
|
显示全部楼层
看样子是从一台机出来的,只是随机伪装那些地址,
平时访问量大吗?如果真的是DDOS的话,这工程有多庞大可想到 ? 不排除可能性
回复
支持
反对
使用道具
举报
显身卡
Remmbea
Remmbea
当前离线
积分
24
IP卡
狗仔卡
发表于 2004-7-23 08:49:25
|
显示全部楼层
iptables禁止他网段的IP,主要还是第3方软件找个好些的分析
回复
支持
反对
使用道具
举报
显身卡
包子
包子
当前离线
积分
511
IP卡
狗仔卡
发表于 2004-7-29 23:09:33
|
显示全部楼层
恭喜……
被D一般只有享受强奸……没什么好说的……
呵呵
回复
支持
反对
使用道具
举报
显身卡
返回列表
高级模式
B
Color
Image
Link
Quote
Code
Smilies
您需要登录后才可以回帖
登录
|
注册
本版积分规则
发表回复
回帖后跳转到最后一页
Copyright © 2002-2023
LinuxSir.cn
(http://www.linuxsir.cn/) 版权所有 All Rights Reserved.
Powered by
RedflagLinux!
技术支持:
中科红旗
|
京ICP备19024520号
快速回复
返回顶部
返回列表