The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

DDOS attack

Discussion in 'Security' started by globcom, Nov 30, 2012.

  1. globcom

    globcom Active Member

    Joined:
    May 24, 2008
    Messages:
    43
    Likes Received:
    1
    Trophy Points:
    8
    Hello,

    in var/log/messages

    There are many lines like this :

    Code:
    Nov 30 09:29:18 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:20 ici last message repeated 9 times
    Nov 30 09:29:23 ici kernel: net_ratelimit: 12 callbacks suppressed
    Nov 30 09:29:23 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:25 ici last message repeated 9 times
    Nov 30 09:29:28 ici kernel: net_ratelimit: 9 callbacks suppressed
    Nov 30 09:29:28 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:29 ici last message repeated 9 times
    Nov 30 09:29:34 ici kernel: net_ratelimit: 18 callbacks suppressed
    Nov 30 09:29:34 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:36 ici last message repeated 9 times
    Nov 30 09:29:39 ici kernel: net_ratelimit: 14 callbacks suppressed
    Nov 30 09:29:39 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:41 ici last message repeated 9 times
    Nov 30 09:29:44 ici kernel: net_ratelimit: 10 callbacks suppressed
    Nov 30 09:29:44 ici kernel: TCP: Possible SYN flooding on port 2222. Sending cookies.
    Nov 30 09:29:48 ici last message repeated 9 times

    It's not clear for me if is a bad config or DDOS attack.

    How to correct this ?


    Regards,
    Eric
     
Loading...

Share This Page