Re: respuesta ante un ddos

[troxlinux <xserverlinux@gmail.com>]

mirad mi puerto 80 y 25

[root@nq ~]# netstat -an | grep 25
tcp        0      0 127.0.0.1:10025             0.0.0.0:*                   LISTEN
tcp        0      0 ::     ::ffff:114.250.7.171:22510  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:58.251.146.218:12458 ESTABLISHED
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:62.75.181.134:60259  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:62.75.181.134:60225  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22102  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:51167 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22488  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:91.207.7.170:52528   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:176.103.210.25:52983 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:91.207.7.110:53253   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62530    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22210  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22016  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:90.206.21.199:64253  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:109.241.200.17:56257 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:91.207.7.170:52539   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:49.213.16.230:35225  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62527    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22154  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:3051  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:188.43.52.113:62539  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22421  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:23.239.99.163:2527   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22478  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:21988  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:128.73.148.137:61725 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:46.118.124.71:58253  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:128.73.148.137:58256 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22224  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22330  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:176.103.210.25:53915 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22472  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:65.95.185.157:54725  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22528  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:88.198.255.240:58482 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22383  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22218  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:128.73.148.137:57525 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:198.27.67.125:64001  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22051  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22482  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.97.136:2502  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22238  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22123  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:2719  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22452  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:98.126.107.251:1258  FIN_WAIT2
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22069  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:66.117.9.229:62508   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22139  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22229  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:128.73.148.137:62524 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22077  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:23.239.99.163:2500   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:51151 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22271  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:109.86.15.95:59258   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:21970  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62535    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:54.216.247.120:34525 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:125.33.123.251:14787 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62531    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:128.73.148.137:54251 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22233  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22173  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22312  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:2774  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:65.95.185.157:54625  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:91.207.7.170:62507   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:98.126.107.251:4719  FIN_WAIT2
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22361  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22301  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62526    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22251  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:5.254.133.230:62614  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22393  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22387  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22059  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22063  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3253 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22258  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22143  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:49856 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22214  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3225 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62529    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22494  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22082  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22441  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3251 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22350  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22033  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:188.43.52.113:25861  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:142.91.245.140:2576  FIN_WAIT2
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22356  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:198.27.67.125:64027  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:111.73.45.172:59253  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3425 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:176.103.210.25:52729 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.124.130:2550 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:3047  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:216.152.252.19:50031 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:23.239.103.138:3256  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22097  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62532    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:182.50.142.250:63356 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22468  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22277  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:109.241.200.17:64425 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22191  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22370  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:49983 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22169  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:198.27.67.202:52225  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:2750  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:49877 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22041  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22434  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22308  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:4625 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22112  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:198.27.67.125:61886  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:193.238.75.253:49962 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22516  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:173.254.197.113:4471 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22178  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22317  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62528    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.97.138:4255  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:95.67.253.124:54541  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:198.27.67.125:61874  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22345  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22396  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22429  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3257 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22107  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:66.117.9.229:62532   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:46.118.124.71:62551  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22255  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22184  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:58.251.146.218:7243  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62533    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22337  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3255 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22522  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:93.174.93.72:49225   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22464  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:192.200.125.10:2757  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:222.146.176.206:3259 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22458  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.217.105.251:5580 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22132  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22161  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22264  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:182.50.142.250:60773 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:1.171.191.6:62534    TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22181  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:94.102.49.219:51825  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:188.43.52.113:52554  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22372  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22045  TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:66.45.252.42:49854   TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:199.15.233.134:50257 TIME_WAIT
tcp        0      0 ::ffff:50.116.39.75:80      ::ffff:114.250.7.171:22445  TIME_WAIT

El 17 de diciembre de 2013, 6:07, Diego H. Cancelo <diego@cancelo.com.ar> escribió:

El día 16 de diciembre de 2013, 19:54, troxlinux
<xserverlinux@gmail.com> escribió:

> hola foro , tengo un firewall instalado a mano con iptables y desde hace
> unos días de repente veo que con un tío se me conecta y me hace muchas
> conexiones al  webserver de mi servidor y me lo bota a veces pasa hasta 1
> hora , hace poco se me peqo al 25 de mi servidor y me hizo lo mismo.
>
> abra alguna forma de tener a estos tipos asi sin cerrar el puerto? , este
> servidor lo tengo en linode

Buenas.
¿No consideraste usar Fail2Ban?


Saludos.
Diego.

=======================================================
"Diego H. Cancelo" diego[at]cancelo[dot]com[dot]ar
*GNU/Linux User # 491743* | Huella digital:
03CA 8BAC 823A 80A1 D2FD  E74F 50AB 79D7 8F1A 0DF7
GnuPG: 2048D/8F1A0DF7 | Clave GPG: solicitar por mail
http://www.bootsector.com.ar | http://www.lugro.org.ar
=======================================================
Usá Software Libre.

--
To UNSUBSCRIBE, email to debian-user-spanish-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: [🔎] CAE1OxfatF1cT+CLpqv4CbyS-eyXyy6txn25mN6Hc4tSvTBbLtg@mail.gmail.com" target="_blank">http://lists.debian.org/[🔎] CAE1OxfatF1cT+CLpqv4CbyS-eyXyy6txn25mN6Hc4tSvTBbLtg@mail.gmail.com

--
rickygm

http://gnuforever.homelinux.com