Portal Home > Knowledgebase > Articles Database > Server hacked? Apache slow down A LOT
Server hacked? Apache slow down A LOT
| Posted by carlatf, 04-27-2010, 01:43 PM |
| Hi,
Since the 14th of this month I have according to my Webalizer logs the triple visitors in my site, from 10000 visits to 30000.
The only thing that is raised are the visits, not sites, of bandwidh.
I have Apache2/Php/Mysql on Debian. I have no firewall I'm installing APF right now.
My site is unaccesible the CPU load is high.
Chkrootkit shows no infections.
I run rkhunter and I found:
File properties checks...
Required commands check failed
Files checked: 127
Suspect files: 25
Rootkit checks...
Rootkits checked : 110
Possible rootkits: 0
Applications checks...
Applications checked: 6
Suspect applications: 5
Top shows:
top - 21:30:51 up 3 days, 38 min, 1 user, load average: 12.43, 11.89, 8.73
Tasks: 147 total, 11 running, 130 sleeping, 4 stopped, 2 zombie
Cpu(s): 81.7%us, 14.5%sy, 3.3%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.5%si, 0.0%st
Mem: 2010968k total, 1745232k used, 265736k free, 443456k buffers
Swap: 2650684k total, 60788k used, 2589896k free, 348220k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2040 mysql 20 0 153m 65m 4216 S 57 3.3 1359:30 mysqld
14983 www-data 20 0 39272 18m 5348 R 16 0.9 0:08.88 apache2
9357 www-data 20 0 45172 24m 5556 R 13 1.2 0:13.08 apache2
19157 www-data 20 0 45148 23m 5252 S 7 1.2 0:07.02 apache2
19227 www-data 20 0 45408 24m 5372 S 7 1.2 0:09.46 apache2
30778 munin 30 10 19092 12m 4740 R 7 0.6 0:00.92 munin-graph
19588 www-data 20 0 38768 17m 5404 S 6 0.9 0:07.64 apache2
1466 www-data 20 0 39268 18m 5732 S 5 1.0 0:19.94 apache2
19216 www-data 20 0 39272 18m 5284 S 5 0.9 0:07.10 apache2
24137 www-data 20 0 39532 19m 5800 R 5 1.0 0:26.88 apache2
27605 www-data 20 0 38988 17m 4976 S 5 0.9 0:02.92 apache2
32114 www-data 20 0 39008 18m 5784 S 5 0.9 0:18.34 apache2
14363 www-data 20 0 38784 18m 5508 S 4 0.9 0:10.40 apache2
30856 www-data 20 0 31688 9.9m 4216 S 4 0.5 0:00.92 apache2
30908 www-data 20 0 31688 9.9m 4184 S 4 0.5 0:01.10 apache2
27868 www-data 20 0 39320 18m 5608 S 3 1.0 0:16.82 apache2
18918 www-data 20 0 41320 20m 5696 R 3 1.1 0:08.88 apache2
18973 www-data 20 0 38768 17m 5380 S 3 0.9 0:07.56 apache2
23779 www-data 20 0 41336 20m 5592 R 3 1.1 0:16.52 apache2
1467 www-data 20 0 39288 18m 5608 S 2 1.0 0:16.20 apache2
2245 www-data 20 0 41372 20m 5404 S 2 1.0 0:17.12 apache2
9362 www-data 20 0 32784 12m 5656 S 2 0.6 0:15.22 apache2
10163 www-data 20 0 38288 18m 5988 S 2 0.9 0:31.78 apache2
Any ideas if this is a security problem or something related to Apache?
|
| Posted by ServerSitters_Paul, 04-27-2010, 02:44 PM |
| For starters I would restart mysql. Then I would run a netstat to see what IP's are connecting to the box. It's probably some sort of DOS attack. However, it's a bit difficult to provide anything else without more to review.
|
| Posted by carlatf, 04-27-2010, 03:45 PM |
| I've restarted the server and Mysql and nothing.
Stopping Apache stops the problem.
Netstat shows:
root@ithaki:/etc/apf# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 ithaki.localdomain:www 125-99-193-190.cab:1670 SYN_RECV
tcp 0 0 ithaki.localdomain:www dsl-187-144-159-1:50428 SYN_RECV
tcp 0 0 ithaki.localdomai:39884 ithaki.localdomain:www TIME_WAIT
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:51991 ESTABLISHED
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:52321 ESTABLISHED
tcp 0 0 ithaki.localdomai:39962 ithaki.localdomain:www TIME_WAIT
tcp 0 0 ithaki.localdomai:40082 ithaki.localdomain:www TIME_WAIT
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:51979 ESTABLISHED
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:51988 ESTABLISHED
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:51898 ESTABLISHED
tcp 0 268 ithaki.localdomainsh 95.143.193.145:55938 ESTABLISHED
tcp 0 0 ithaki.localdomai:39922 ithaki.localdomain:www TIME_WAIT
tcp 0 0 ithaki.localdomai:40042 ithaki.localdomain:www TIME_WAIT
tcp 0 0 ithaki.localdoma:webmin g155034.upc-g.che:52312 ESTABLISHED
tcp 0 0 ithaki.localdomainsh tor-gw.wkwtor.viv:33311 ESTABLISHED
tcp 0 0 ithaki.localdomai:40007 ithaki.localdomain:www TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51384 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40018 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39877 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50004 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49980 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50005 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www crawl-2c.cuil.com:49578 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39992 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39940 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40095 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39999 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49986 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39893 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40090 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39979 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39991 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40084 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40075 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40029 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39956 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40031 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40078 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39925 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40056 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:39032 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40026 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40044 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-173-34-219.sp:42548 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40094 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-172-218-7.spe:43012 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39943 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:58034 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39871 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:48814 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40041 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:29700 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51392 ESTABLISHED
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39989 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-223-212.sp:38970 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39926 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www b3090806.crawl.ya:56961 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40033 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39862 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50001 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39887 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:33014 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 125-99-193-190.cab:1669 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39986 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39900 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39983 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39912 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39921 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40046 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49977 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39995 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40051 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40092 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39888 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40088 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39860 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39881 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40050 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40085 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39980 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40035 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50002 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40060 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39920 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39960 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host13.201-252-10:53459 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:62981 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:1059 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:57166 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40073 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39894 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39866 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39891 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40038 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-172-218-7.spe:56354 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40008 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.spe:1629 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www 199-10-19-190.fibe:2126 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40009 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51381 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39973 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39965 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40001 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49994 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39977 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39950 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:36022 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40006 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39945 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:1890 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39996 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39869 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39972 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39981 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49998 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39867 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39911 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:64311 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39978 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39968 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39951 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40053 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39873 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40047 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39892 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51378 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 188-135-193-190.ca:2110 ESTABLISHED
tcp6 0 0 ithaki.localdomain:www 190-172-218-7.spe:35709 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40080 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:1034 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-173-34-219.sp:50267 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2251 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40089 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59967 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39984 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50000 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39935 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:29807 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40017 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39915 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39963 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39924 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40037 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:1897 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2253 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39859 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:39023 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40013 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39928 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39966 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39917 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49984 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40054 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50009 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39870 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2254 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40010 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40025 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39858 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39930 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:61231 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39897 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40005 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49978 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39967 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39919 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39953 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40023 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59966 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39937 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40059 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-172-218-7.spe:60747 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40061 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39890 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39934 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39964 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40019 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-51-21-107.spe:21527 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2257 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40062 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39901 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:62095 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40086 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40055 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40058 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2261 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39914 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:59197 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59974 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39976 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39942 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40036 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39941 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39927 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50008 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39931 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39898 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 199-10-19-190.fibe:2154 ESTABLISHED
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59968 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40052 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40028 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39908 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51385 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40083 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40022 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 199-10-19-190.fibe:2138 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-51-21-107.spe:47953 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59970 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39969 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39988 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50007 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40002 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40065 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39959 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40072 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40093 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40093 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49987 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-223-212.sp:29697 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40024 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40032 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39923 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39990 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40045 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39872 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www cpe-163.59.55.190.:4284 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39985 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40069 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40068 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40030 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39861 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39975 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39874 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39865 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40097 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49985 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40040 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49981 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 199-10-19-190.fibe:2110 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40049 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51389 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39916 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39938 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39958 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50010 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39904 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-173-34-219.sp:51621 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51386 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39905 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49976 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59965 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www cpe-163.59.55.190.:4288 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40067 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39903 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39882 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40011 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www b3090806.crawl.ya:57955 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www cpe-163.59.55.190.:4278 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 199-10-19-190.fibe:2089 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39910 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39875 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39907 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40087 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spe:44063 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39918 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 158-247-136-186.f:51379 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 215-14-245-190.fib:4490 ESTABLISHED
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39957 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39952 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40048 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39876 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39948 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39947 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49975 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40043 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39994 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2256 TIME_WAIT
tcp6 0 3690 ithaki.localdomain:www 84.126.229.67.dyn.:1187 FIN_WAIT1
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39946 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40074 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39899 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40064 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59971 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39939 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2260 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:64306 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40020 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-172-218-7.spe:53693 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:62101 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40079 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-51-21-107.spe:29638 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49997 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39970 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49996 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49996 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39933 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39944 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39987 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-223-212.sp:42241 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39885 TIME_WAIT
tcp6 0 1 ithaki.localdomain:www 190-51-21-107.spe:62484 CLOSING
tcp6 0 0 ithaki.localdomain:www cpe-163.59.55.190.:4290 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40091 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49989 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39857 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40096 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:4800 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-173-34-219.sp:38025 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www cpe-110.195.55.19:64940 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39896 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39998 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39993 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40076 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39864 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:36041 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40003 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40012 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49995 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39936 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:59961 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39895 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40004 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50003 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2258 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40057 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59972 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39954 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39932 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40039 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:42276 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:49979 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59969 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39879 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www adsl190-29-211-18:50006 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39949 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-51-21-107.spe:61522 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39913 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39982 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39868 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40016 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:59973 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39929 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40027 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40000 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-173-34-219.sp:65524 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39961 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40014 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:60031 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.spe:1623 FIN_WAIT2
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39889 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40081 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39886 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39955 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39878 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40021 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40077 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40066 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39974 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40015 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40034 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-187-62.spee:1899 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40070 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39902 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2252 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39971 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:33134 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 201-254-103-22.sp:57973 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39997 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40071 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www cpe-163.59.55.190.:4280 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39909 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39883 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39880 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:40063 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www ithaki.localdomai:39856 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www host193.190-138-64:2255 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-208-12.spe:42282 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-51-21-107.spe:17898 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-223-212.sp:33001 TIME_WAIT
tcp6 0 0 ithaki.localdomain:www 190-49-223-212.sp:35952 TIME_WAIT
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 14 [ ] DGRAM 4919 /dev/log
unix 2 [ ] DGRAM 2429 @/org/kernel/udev/udevd
unix 3 [ ] STREAM CONNECTED 51018949 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 51018948
unix 3 [ ] STREAM CONNECTED 51018912 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 51018911
unix 3 [ ] STREAM CONNECTED 51018910 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 51018909
unix 3 [ ] STREAM CONNECTED 51018801 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 51018800
unix 2 [ ] DGRAM 49247265
unix 2 [ ] DGRAM 47228214
unix 2 [ ] DGRAM 42219186
unix 2 [ ] DGRAM 6203
unix 2 [ ] DGRAM 6144
unix 2 [ ] DGRAM 5414
unix 2 [ ] DGRAM 5387
unix 2 [ ] DGRAM 5352
unix 2 [ ] DGRAM 5110
unix 2 [ ] DGRAM 4975
unix 2 [ ] DGRAM 4952
unix 2 [ ] DGRAM 4931
|
| Posted by carlatf, 04-27-2010, 04:16 PM |
| To try to mitigate this, I've disabled Keepalive inside Apache
Netstat shows:
netstat -nlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:929 0.0.0.0:* LISTEN 2449/famd
tcp 0 0 0.0.0.0:50536 0.0.0.0:* LISTEN 1770/rpc.statd
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 2040/mysqld
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 2581/tcpserver
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1759/portmap
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 2552/perl
tcp 0 0 0.0.0.0:4949 0.0.0.0:* LISTEN 12873/munin-node
tcp 0 0 209.17.191.247:53 0.0.0.0:* LISTEN 1948/named
tcp 0 0 209.17.191.246:53 0.0.0.0:* LISTEN 1948/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1948/named
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1963/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2430/exim4
tcp6 0 0 :::993 :::* LISTEN 2168/couriertcpd
tcp6 0 0 :::143 :::* LISTEN 2156/couriertcpd
tcp6 0 0 :::80 :::* LISTEN 10388/apache2
tcp6 0 0 :::8181 :::* LISTEN 10388/apache2
tcp6 0 0 :::53 :::* LISTEN 1948/named
tcp6 0 0 :::22 :::* LISTEN 1963/sshd
tcp6 0 0 :::443 :::* LISTEN 10388/apache2
udp 0 0 0.0.0.0:40579 0.0.0.0:* 1770/rpc.statd
udp 0 0 0.0.0.0:10000 0.0.0.0:* 2552/perl
udp 0 0 0.0.0.0:34715 0.0.0.0:* 32321/host
udp 0 0 0.0.0.0:674 0.0.0.0:* 1770/rpc.statd
udp 0 0 0.0.0.0:35124 0.0.0.0:* 32321/host
udp 0 0 209.17.191.247:53 0.0.0.0:* 1948/named
udp 0 0 209.17.191.246:53 0.0.0.0:* 1948/named
udp 0 0 127.0.0.1:53 0.0.0.0:* 1948/named
udp 0 0 0.0.0.0:111 0.0.0.0:* 1759/portmap
udp 0 0 0.0.0.0:111 0.0.0.0:* 1759/portmap
udp6 0 0 :::53 :::* 1948/named
raw 0 0 0.0.0.0:1 0.0.0.0:* 7 32308/fping
Active UNIX domain sockets (only servers)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 5112 2040/mysqld /var/run/mysqld/mysqld.sock
unix 2 [ ACC ] STREAM LISTENING 5357 2135/authdaemond /var/run/courier/authdaemon/socket.tmp
unix 2 [ ACC ] STREAM LISTENING 4950 1933/acpid /var/run/acpid.socket
|
| Posted by ServerSitters_Paul, 04-28-2010, 07:11 AM |
| That should help. I would disable KeepAlive and lower the timeout so the processes cleanup faster.
What do you get when you run:
netstat -an
|
| Posted by carlatf, 04-28-2010, 10:52 AM |
| I installed mod security... No changes
netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:929 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:50536 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 209.17.191.246:80 190.174.134.145:60927 SYN_RECV
tcp 0 0 209.17.191.246:80 190.247.39.191:2917 SYN_RECV
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:4949 0.0.0.0:* LISTEN
tcp 0 0 209.17.191.247:53 0.0.0.0:* LISTEN
tcp 0 0 209.17.191.246:53 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp 0 0 209.17.191.246:40917 209.17.191.246:80 ESTABLISHED
tcp 0 720 209.17.191.246:22 95.48.188.28:54126 ESTABLISHED
tcp 0 232 209.17.191.246:22 95.143.193.145:56248 ESTABLISHED
tcp 0 0 209.17.191.246:22 95.48.188.28:46539 TIME_WAIT
tcp6 0 0 :::993 :::* LISTEN
tcp6 0 0 :::143 :::* LISTEN
tcp6 0 0 :::80 :::* LISTEN
tcp6 0 0 :::8181 :::* LISTEN
tcp6 0 0 :::53 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 :::443 :::* LISTEN
tcp6 0 0 209.17.191.246:80 190.216.30.178:2871 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40602 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40416 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40437 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40720 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40794 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3251 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2837 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2891 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2845 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40855 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27704 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3299 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40682 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2895 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40521 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40494 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40646 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40910 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2985 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.195.115.166:51991 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40745 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40788 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2723 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40419 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40479 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2823 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.195.115.166:52617 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40480 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27029 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40451 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40541 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2873 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40447 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3123 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3270 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40604 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40596 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40622 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40820 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40624 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2960 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40640 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40512 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40871 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40633 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40620 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40694 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40725 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40889 TIME_WAIT
tcp6 0 0 209.17.191.246:80 200.127.170.157:63229 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40895 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40836 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40806 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:47430 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40445 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40411 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40589 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40870 TIME_WAIT
tcp6 0 0 209.17.191.246:80 207.46.204.241:15202 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40441 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40504 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40482 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40551 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3172 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2835 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40626 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3058 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40407 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3256 TIME_WAIT
tcp6 0 11680 209.17.191.246:80 190.216.30.178:3296 ESTABLISHED
tcp6 0 0 209.17.191.246:80 209.17.191.246:40839 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40884 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2747 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:33549 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40460 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2817 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2827 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3291 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3342 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40653 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40829 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40657 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2877 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40704 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27597 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40906 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40627 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.107.104.251:52083 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2795 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26494 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40804 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40760 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40420 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3173 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40591 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40734 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40453 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3131 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40516 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40576 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40473 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40684 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40520 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2841 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40716 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40498 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:28147 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.195.115.166:56948 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3092 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40649 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40726 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40575 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40443 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:45338 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2875 ESTABLISHED
tcp6 0 0 209.17.191.246:80 209.17.191.246:40699 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3066 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40643 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40741 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40535 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2737 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2749 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2869 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40491 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40533 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2833 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40560 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40548 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40685 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2879 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40426 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40598 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40572 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2777 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40412 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40636 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40742 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40462 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40492 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40828 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40593 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40803 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2903 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3188 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2893 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40501 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40429 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40588 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40728 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40885 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40559 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40891 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40686 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40484 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40497 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40893 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26561 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40847 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40562 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3075 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40709 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2899 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2829 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40631 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40608 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40805 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:51562 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2773 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40890 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3219 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2815 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40693 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27030 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40642 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3065 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:47660 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40545 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40582 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40418 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40808 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40755 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40409 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40581 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.209.15:24718 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3265 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40842 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40851 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2901 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40819 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40569 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2897 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40667 TIME_WAIT
tcp6 0 0 209.17.191.246:80 201.252.19.160:14794 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40603 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40861 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2731 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40727 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40825 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3190 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.209.15:31790 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40835 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40436 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40777 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40796 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40897 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40887 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40487 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40570 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40529 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40776 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40464 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40740 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.107.104.251:52084 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40508 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40621 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2771 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40485 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40751 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:25633 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40913 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40765 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40779 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2807 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40710 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2781 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40574 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:28083 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40714 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40814 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40597 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2847 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40665 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40427 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40802 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.209.15:21019 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40628 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40872 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2775 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40612 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2821 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2841 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2725 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40527 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.174.134.145:30806 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40821 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40674 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26143 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2851 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27564 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26534 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40681 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3060 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40439 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40616 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40610 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40481 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40634 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2833 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40592 TIME_WAIT
tcp6 0 0 209.17.191.246:80 200.127.170.157:63298 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40675 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40785 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40413 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2763 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40550 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40405 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40456 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40845 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40695 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40688 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40708 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3272 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3124 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40769 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40866 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40623 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2919 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40600 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40859 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40563 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:28131 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40846 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40446 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3064 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40670 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40435 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2831 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40567 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40841 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40722 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40883 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2997 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2819 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.174.134.145:60927 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40632 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40784 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40554 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40912 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40766 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40786 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40717 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.174.134.145:42438 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40744 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40526 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40432 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40770 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40753 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3147 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40408 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40531 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40538 TIME_WAIT
tcp6 0 0 209.17.191.246:80 201.252.19.160:14792 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40911 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40625 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2787 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2783 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40423 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40840 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40767 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40792 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40856 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40601 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40863 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40552 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40830 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40798 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40683 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40700 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40606 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40606 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40867 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40406 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2761 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40732 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40862 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40761 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40874 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40810 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40454 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.218.116.162:44411 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2759 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40844 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40507 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40557 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27023 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40899 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40583 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40833 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2739 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40705 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40477 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40650 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40461 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40809 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40463 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40673 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40532 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40444 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40542 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40706 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40677 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40807 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40790 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26982 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40536 TIME_WAIT
tcp6 0 0 209.17.191.246:80 201.252.19.160:14793 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.209.15:28185 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2907 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40577 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40496 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40539 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2785 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40468 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40534 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.107.104.251:52072 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3059 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40880 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3205 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2797 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40721 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40654 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40799 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40849 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40669 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40782 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2973 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40500 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40486 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40676 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40679 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40635 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40838 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40651 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2853 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40430 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40655 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40645 TIME_WAIT
tcp6 0 0 209.17.191.246:80 174.129.117.129:60018 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2769 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40489 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40824 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40662 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40613 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40599 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40505 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2729 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40663 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40663 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40522 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40564 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2719 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2765 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40584 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40547 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40774 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40629 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40816 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2887 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2751 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40772 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.209.15:30606 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40813 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40510 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3311 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40860 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:25762 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40614 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40514 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40528 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40431 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40719 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40758 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40518 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40509 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40495 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40739 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40476 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40459 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40877 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2863 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40556 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40553 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40903 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2743 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2793 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40793 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40917 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2849 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40724 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2905 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40410 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40748 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40896 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2789 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2909 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40898 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40618 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40815 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40736 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40815 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40736 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40638 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40579 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40689 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40818 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2735 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40540 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:43482 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40907 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40715 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2913 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40857 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40585 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40565 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40586 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40404 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.195.115.166:54272 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40672 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2791 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40822 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40434 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40702 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40467 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2803 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40400 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40470 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40558 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40609 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:41691 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40422 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3180 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:44446 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40517 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40449 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2839 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40920 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40503 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40707 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40452 TIME_WAIT
tcp6 0 0 209.17.191.246:80 67.195.115.166:55707 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27871 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40908 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40781 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40879 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40611 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2885 TIME_WAIT
tcp6 0 0 209.17.191.246:80 66.249.67.74:58767 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40515 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2741 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40511 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40457 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40637 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40658 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40696 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40852 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40730 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2721 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40738 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40762 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40759 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40858 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3239 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26997 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40773 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3310 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40680 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40823 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40894 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40660 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40605 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2867 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40771 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40417 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40916 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40403 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40888 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2856 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40854 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:23291 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40868 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40712 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:49067 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2911 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40904 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40490 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40757 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40493 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40875 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26545 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40506 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:50796 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40780 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3288 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40546 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3014 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40659 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40853 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40834 TIME_WAIT
tcp6 0 0 209.17.191.246:80 200.127.170.157:63293 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40472 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2986 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40440 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40566 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40587 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40789 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40797 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40865 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40735 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40615 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3289 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:26566 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40428 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:2835 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40544 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.216.30.178:3316 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40671 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40831 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40876 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2865 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40652 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40475 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40743 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40619 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40812 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40401 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.50.221.56:27580 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40873 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2825 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40648 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40590 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2799 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40733 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40750 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40718 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40749 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40701 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2857 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2813 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40666 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40843 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40713 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40523 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40775 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40914 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40641 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40763 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40827 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40698 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40711 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.174.134.145:27357 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40909 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40630 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2881 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40791 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40692 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40881 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40768 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40783 TIME_WAIT
tcp6 0 0 209.17.191.246:80 190.247.39.191:2915 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40537 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40778 TIME_WAIT
tcp6 0 0 209.17.191.246:80 209.17.191.246:40900 TIME_WAIT
tcp6 0 0 209.17.191.246:80 201.252.19.160:14796 TIME_WAIT
udp 0 0 0.0.0.0:40579 0.0.0.0:*
udp 0 0 0.0.0.0:10000 0.0.0.0:*
udp 0 0 0.0.0.0:674 0.0.0.0:*
udp 0 0 209.17.191.247:53 0.0.0.0:*
udp 0 0 209.17.191.246:53 0.0.0.0:*
udp 0 0 127.0.0.1:53 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
udp6 0 0 :::53 :::*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 5112 /var/run/mysqld/mysqld.sock
unix 2 [ ACC ] STREAM LISTENING 5357 /var/run/courier/authdaemon/socket.tmp
unix 12 [ ] DGRAM 4919 /dev/log
unix 2 [ ] DGRAM 2429 @/org/kernel/udev/udevd
unix 2 [ ACC ] STREAM LISTENING 4950 /var/run/acpid.socket
unix 3 [ ] STREAM CONNECTED 60556750 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 60556749
unix 3 [ ] STREAM CONNECTED 60556748 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 60556747
unix 3 [ ] STREAM CONNECTED 60556719 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 60556718
unix 3 [ ] STREAM CONNECTED 60556712 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 60556711
unix 3 [ ] STREAM CONNECTED 60556088
unix 3 [ ] STREAM CONNECTED 60556087
unix 3 [ ] STREAM CONNECTED 60555424 /var/run/mysqld/mysqld.sock
unix 3 [ ] STREAM CONNECTED 60555423
unix 2 [ ] DGRAM 60547354
unix 2 [ ] DGRAM 42219186
unix 2 [ ] DGRAM 6203
unix 2 [ ] DGRAM 5414
unix 2 [ ] DGRAM 5387
unix 2 [ ] DGRAM 5352
unix 2 [ ] DGRAM 5110
unix 2 [ ] DGRAM 4975
unix 2 [ ] DGRAM 4952
unix 2 [ ] DGRAM 4931
|
| Posted by khunj, 04-28-2010, 11:01 AM |
| Most source and destination IPs are the same : 209.17.191.246
Why does your server connect to itself on port 80 ?
|
| Posted by carlatf, 04-28-2010, 11:04 AM |
| Most source and destination IPs are the same : 209.17.191.246
--- Why does your server connect to itself on port 80 ?
Don't have a clue!
Could this be a problem in Apache's config file?
|
| Posted by ServerSitters_Paul, 04-28-2010, 11:08 AM |
| I would check on the following IP's that have a lot of connections to the server:
27 190.50.221.56
46 190.216.30.178
80 190.247.39.191
Number on the left is how many connections each IP has to port 80/apache on your server.
Make sure you check to see what your own IP is prior to blocking any of these so you don't lock yourself out of your server. Most of the connections are from the server connecting to itself which is usually caused by a website on the server that's using absolute URL's instead of relative URL's to display images, style sheets, etc... within the same site or other sites on that server.
|
| Posted by khunj, 04-28-2010, 12:10 PM |
| I think it is the right time to read you Apache logs and see what is going on
|
| Posted by carlatf, 04-28-2010, 03:18 PM |
| Hi,
I checked the error and access log file and I don't see anything unusual.
I installed Apache's mod security.
I blocked the ips:
27 190.50.221.56
46 190.216.30.178
I just installed the CSF firewall and no changes...
The server is still going extra slow
|
| Posted by SafeSrv, 04-29-2010, 09:55 AM |
| What do you get when you run this?
Have you tried APF in conjuction with DDoS Deflate ?
DD
|
| Posted by SafeSrv, 04-29-2010, 10:03 AM |
| Also you using any certain mod_sec rule sets ?
|
| Posted by carlatf, 04-29-2010, 12:02 PM |
| Hi Everyone!!
Thank you very much for all the feedback and energy I'm getting to try to solve this!! =)
I just installed the CSF firewall, no changes, I allowed the ports:
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
1 188.92.72.171
1 190.79.139.24
1 66.165.246.31
1 67.195.114.22
1 67.218.116.162
1 93.34.242.63
1 Address
1 servers)
2 186.137.79.69
2 189.136.87.107
2 201.161.61.17
2 66.249.67.74
4 190.50.209.15
4 201.227.81.84
6 67.195.115.166
8 208.115.111.248
9 186.18.218.31
9 190.231.119.209
10 186.125.93.72
12 186.56.133.129
27 200.65.74.79
27 201.252.14.237
31 190.48.141.140
47 209.85.211.8
671 209.17.191.246-- my server
Have you tried APF in conjuction with DDoS Deflate ?
No, I haven't I'm using CSF with lfd - Login Failure Daemon...
I'm going to check if there's DDos Deflate for CSF...
Also you using any certain mod_sec rule sets ?
I'm using the default ones...
# Turn the filtering engine On or Off
SecFilterEngine On
# The audit engine works independently and
# can be turned On of Off on the per-server or
# on the per-directory basis
SecAuditEngine RelevantOnly
# Make sure that URL encoding is valid
SecFilterCheckURLEncoding On
# Unicode encoding check
SecFilterCheckUnicodeEncoding On
# Only allow bytes from this range
SecFilterForceByteRange 1 255
# Cookie format checks.
SecFilterCheckCookieFormat On
# The name of the audit log file
SecAuditLog /var/log/apache2/modsec_audit.log
# Should mod_security inspect POST payloads
SecFilterScanPOST On
# Default action set
SecFilterDefaultAction "deny,log,status:406"
# Simple example filter
# SecFilter 111
# Prevent path traversal (..) attacks
# SecFilter "\.\./"
# Weaker XSS protection but allows common HTML tags
# SecFilter "<( |\n)*script"
# Prevent XSS atacks (HTML/Javascript injection)
# SecFilter "<(.|\n)+>"
# Very crude filters to prevent SQL injection attacks
# SecFilter "delete[[pace:]]+from"
# SecFilter "insert[[pace:]]+into"
# SecFilter "select.+from"
# Require HTTP_USER_AGENT and HTTP_HOST headers
SecFilterSelective "HTTP_USER_AGENT|HTTP_HOST" "^$"
# Only accept request encodings we know how to handle
# we exclude GET requests from this because some (automated)
# clients supply "text/html" as Content-Type
SecFilterSelective REQUEST_METHOD "!^GET$" chain
SecFilterSelective HTTP_Content-Type "!(^$|^application/x-www-form-urlencoded$|^multipart/form-data)"
# Require Content-Length to be provided with
# every POST request
SecFilterSelective REQUEST_METHOD "^POST$" chain
SecFilterSelective HTTP_Content-Length "^$"
# Don't accept transfer encodings we know we don't handle
# (and you don't need it anyway)
SecFilterSelective HTTP_Transfer-Encoding "!^$"
# Some common application-related rules from
# http://modsecrules.monkeydev.org/rules.php?safety=safe
#Nuke Bookmarks XSS
SecFilterSelective THE_REQUEST "/modules\.php\?name=Bookmarks\&file=(del_cat\&catname|del_mark\&markname|edit_cat\&catname|edit_cat\&catcomment|marks\&catname|uploadbookmarks\&categor y)=(<[[pace:]]*script|(http|https|ftp)\:/)"
#Nuke Bookmarks Marks.php SQL Injection Vulnerability
SecFilterSelective THE_REQUEST "modules\.php\?name=Bookmarks\&file=marks\&catname=.*\&category=.*/\*\*/(union|select|delete|insert)"
#PHPNuke general XSS attempt
#/modules.php?name=News&file=article&sid=1&optionbox=
SecFilterSelective THE_REQUEST "/modules\.php\?*name=<[[pace:]]*script"
# PHPNuke SQL injection attempt
SecFilterSelective THE_REQUEST "/modules\.php\?*name=Search*instory="
#phpnuke sql insertion
SecFilterSelective THE_REQUEST "/modules\.php*name=Forums.*file=viewtopic*/forum=.*\'/"
# WEB-PHP phpbb quick-reply.php arbitrary command attempt
SecFilterSelective THE_REQUEST "/quick-reply\.php" chain
SecFilter "phpbb_root_path="
#Topic Calendar Mod for phpBB Cross-Site Scripting Attack
SecFilterSelective THE_REQUEST "/calendar_scheduler\.php\?start=(<[[pace:]]*script|(http|https|ftp)\:/)"
# phpMyAdmin: Safe
#phpMyAdmin Export.PHP File Disclosure Vulnerability
SecFilterSelective SCRIPT_FILENAME "export\.php$" chain
SecFilterSelective ARG_what "\.\."
#phpMyAdmin path vln
SecFilterSelective REQUEST_URI "/css/phpmyadmin\.css\.php\?GLOBALS\[cfg\]\[ThemePath\]=/etc"
|
| Posted by SafeSrv, 04-29-2010, 01:57 PM |
| Ahh hang on you mean its your own server IP that's making these connections.
Try this..
Install htop
or
Then run..
Show me what you got.. ( Post a screenshot )
|
| Posted by Steven, 04-29-2010, 09:34 PM |
| Are you doing any includes in your code such as:
include('http://yourdomain.com/header.php');
?
Your server is connecting to itself, which generally is caused by a script problem.
|
| Posted by carlatf, 04-29-2010, 10:04 PM |
| Hi,
The problem is that I've the same sites and justfrom the 14th I've been experiencing this high load...
I will post a screenshot right now of the HTOP
|
| Posted by carlatf, 04-30-2010, 10:51 AM |
| Here's the HTOP results.
Htop is a really nice and visual top utility, I didn't know it.
I also send you the CPU results of the week, I started to collect data with a webmin utility.
Attached Thumbnails
Last edited by carlatf; 04-30-2010 at 11:01 AM.
|
| Posted by SafeSrv, 04-30-2010, 02:51 PM |
| Mysql is eating up your CPU - are you able to stop and restart mysql ? have you checked for any unusually large databases too ?
|
| Posted by carlatf, 04-30-2010, 03:46 PM |
| Hi,
I restarted mysql and it's the same...
|
| Posted by carlatf, 05-03-2010, 01:27 AM |
| These are some webalizer stats for the site...
I will upgrade my server from Intel Duo to Quad core to see if I can mitigate this...
Month Daily Avg Monthly Totals Hits Files Pages Visits Sites kB F kB In kB Out Visits Pages Files Hits
May 2010 659713 610918 493091 16795 3392 23259178 0 0 50386 1479274 1832756 1979141 Apr 2010 807399 706777 460900 22075 42481 211696653 0 0 662269 13827000 21203330 24221997 Mar 2010 378284 281531 158667 10027 39785 73781320 0 0 310838 4918704 8727490 11726815 Feb 2010 386827 283705 157016 9813 33494 58608611 0 0 274770 4396474 7943761 10831176 Jan 2010 395660 295157 175038 9384 33106 61037057 0 0 290916 5426196 9149881 12265468
Attached Thumbnails
|
Add to Favourites 
Print this Article
Also Read
Shared Hosting
Shared Hosting
