Status
Not open for further replies.

DoctorX

Active Member
1,625
2010
161
3,335
Hello,

is this ddos?
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n


the result:

1 1.55.177.24
1 173.168.63.157
1 182.177.213.19
1 182.177.221.58
1 184.107.150.100
1 213.238.106.248
1 66.249.72.104
1 67.19.154.130
1 85.254.63.36
1 Address
1 servers)
2 127.0.0.1
2 188.173.84.131
2 218.200.108.62
2 62.201.217.34
2 67.195.112.225
2 79.113.1.75
2 79.115.178.226
2 91.121.135.215
2 93.87.189.123
3 109.93.28.212
3 193.226.132.218
3 83.168.89.197
5 113.167.150.151
5 68.32.185.125
5 77.103.177.75
6 77.1.25.99
8 109.70.67.138
13 109.224.9.12


?
 
9 comments
no its not

if you got DDoSed keep in mind you won't able to login to SSH and enter that command ever.

Not so true, often a DDoS only affects HTTP, leaving SSH accessible. It does have to be pretty big to stop all access to ssh.
 
if you would get ddossed proper then your server would go offline. :) also SSH too...

but if your server is lagging... then it's possible that some other site is crawling you or someone is just lagging your site with some bot.
 
Status
Not open for further replies.
Back
Top