The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

What is this ?

Discussion in 'Security' started by turktiger, Nov 2, 2013.

  1. turktiger

    turktiger Registered

    Joined:
    May 7, 2013
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Is this an attack ? And do you have a solution ?

    Code:
          6 81.214.151.68
          6 81.215.63.134
          6 88.224.48.120
          6 88.227.121.208
          6 88.227.145.218
          6 88.227.95.118
          6 88.231.110.64
          6 88.233.189.26
          6 92.45.170.165
          6 92.45.39.66
          6 95.9.155.150
          7 217.131.232.215
          7 31.211.146.221
          7 37.49.126.112
          7 46.1.104.74
          7 46.197.167.172
          7 46.2.49.217
          7 78.161.143.117
          7 78.163.92.85
          7 78.169.64.184
          7 78.171.104.237
          7 81.213.119.91
          7 85.105.212.162
          7 85.106.137.251
          7 88.234.87.205
          7 88.241.210.6
          7 94.122.170.28
          7 94.122.178.46
          7 94.123.43.152
          7 95.10.16.60
          7 95.9.249.19
          8 176.42.227.43
          8 212.253.31.147
          8 31.223.68.50
          8 78.161.43.99
          8 78.179.213.28
          8 85.107.168.232
          8 88.249.124.237
          8 88.252.140.160
          8 88.254.113.50
          8 91.91.132.37
          8 94.121.198.111
          8 95.70.245.242
          9 176.43.21.233
          9 37.123.36.62
          9 62.234.122.15
          9 78.172.45.224
          9 78.173.187.67
          9 85.100.6.28
          9 85.107.56.251
          9 85.108.1.95
          9 88.236.242.236
         10 176.42.107.29
         10 81.213.248.150
         10 85.105.1.72
         10 85.106.139.7
         10 88.226.102.96
         10 88.234.151.212
         10 95.173.237.24
         10 95.8.216.90
         11 176.40.203.174
         11 78.160.61.214
         11 78.171.152.117
         11 94.122.70.227
         11 95.14.102.115
         12 176.43.196.69
         12 212.252.13.231
         12 46.253.7.106
         12 78.165.4.100
         12 78.165.45.67
         12 78.166.114.100
         12 78.173.128.248
         12 85.97.130.247
         12 88.227.47.24
         12 88.234.21.146
         12 88.244.155.125
         12 94.121.233.169
         13 78.173.44.78
         13 78.181.28.28
         13 78.187.158.220
         13 78.191.125.240
         13 85.108.218.180
         13 94.120.213.9
         13 94.123.33.78
         13 95.5.58.170
         14 176.33.170.49
         14 176.42.187.166
         14 176.43.15.32
         14 195.174.85.125
         14 78.176.128.201
         14 88.230.164.198
         15 212.156.59.202
         15 78.180.19.100
         15 85.102.161.163
         15 85.104.158.0
         15 88.229.51.242
         16 178.6.146.25
         16 31.171.69.121
         16 31.200.60.241
         16 78.169.220.69
         16 88.229.156.247
         16 88.251.211.208
         17 78.190.53.47
         18 85.108.236.68
         19 85.107.126.193
         20 46.197.13.4
         20 78.166.215.30
         20 88.246.155.7
         20 95.14.37.150
         21 78.166.254.86
         21 78.178.223.59
         21 81.8.74.66
         21 88.236.87.231
         22 62.29.110.18
         23 78.181.235.188
         23 88.241.204.114
         24 78.176.8.236
         24 78.182.61.186
         25 78.175.115.250
         28 85.110.81.252
         32 78.160.103.242
         33 78.161.4.137
         35 95.6.98.132
         38 88.227.208.39
         39 78.179.142.215
         56 78.175.190.47
         59 95.15.39.249
         65 78.177.111.38
         66 88.246.201.101
         71 178.33.37.19
    [B]   4968 PRIMARY SERVER IP [/B]
    And second problem when i looked to daily process log , netstat -nlu using % 76 of cpu :S ?

    - - - Updated - - -

    ek.png

    Cpu log ? ....
     
  2. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,146
    Likes Received:
    34
    Trophy Points:
    48
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello,

    I think you have installed Nginx as reverse proxy on your server and due to you are getting server IP in that netstat command

    Please installed CSF firewall on your server and setup it
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator

Share This Page