turktiger

Registered
May 7, 2013
1
0
1
cPanel Access Level
Root Administrator
Is this an attack ? And do you have a solution ?

Code:
      6 81.214.151.68
      6 81.215.63.134
      6 88.224.48.120
      6 88.227.121.208
      6 88.227.145.218
      6 88.227.95.118
      6 88.231.110.64
      6 88.233.189.26
      6 92.45.170.165
      6 92.45.39.66
      6 95.9.155.150
      7 217.131.232.215
      7 31.211.146.221
      7 37.49.126.112
      7 46.1.104.74
      7 46.197.167.172
      7 46.2.49.217
      7 78.161.143.117
      7 78.163.92.85
      7 78.169.64.184
      7 78.171.104.237
      7 81.213.119.91
      7 85.105.212.162
      7 85.106.137.251
      7 88.234.87.205
      7 88.241.210.6
      7 94.122.170.28
      7 94.122.178.46
      7 94.123.43.152
      7 95.10.16.60
      7 95.9.249.19
      8 176.42.227.43
      8 212.253.31.147
      8 31.223.68.50
      8 78.161.43.99
      8 78.179.213.28
      8 85.107.168.232
      8 88.249.124.237
      8 88.252.140.160
      8 88.254.113.50
      8 91.91.132.37
      8 94.121.198.111
      8 95.70.245.242
      9 176.43.21.233
      9 37.123.36.62
      9 62.234.122.15
      9 78.172.45.224
      9 78.173.187.67
      9 85.100.6.28
      9 85.107.56.251
      9 85.108.1.95
      9 88.236.242.236
     10 176.42.107.29
     10 81.213.248.150
     10 85.105.1.72
     10 85.106.139.7
     10 88.226.102.96
     10 88.234.151.212
     10 95.173.237.24
     10 95.8.216.90
     11 176.40.203.174
     11 78.160.61.214
     11 78.171.152.117
     11 94.122.70.227
     11 95.14.102.115
     12 176.43.196.69
     12 212.252.13.231
     12 46.253.7.106
     12 78.165.4.100
     12 78.165.45.67
     12 78.166.114.100
     12 78.173.128.248
     12 85.97.130.247
     12 88.227.47.24
     12 88.234.21.146
     12 88.244.155.125
     12 94.121.233.169
     13 78.173.44.78
     13 78.181.28.28
     13 78.187.158.220
     13 78.191.125.240
     13 85.108.218.180
     13 94.120.213.9
     13 94.123.33.78
     13 95.5.58.170
     14 176.33.170.49
     14 176.42.187.166
     14 176.43.15.32
     14 195.174.85.125
     14 78.176.128.201
     14 88.230.164.198
     15 212.156.59.202
     15 78.180.19.100
     15 85.102.161.163
     15 85.104.158.0
     15 88.229.51.242
     16 178.6.146.25
     16 31.171.69.121
     16 31.200.60.241
     16 78.169.220.69
     16 88.229.156.247
     16 88.251.211.208
     17 78.190.53.47
     18 85.108.236.68
     19 85.107.126.193
     20 46.197.13.4
     20 78.166.215.30
     20 88.246.155.7
     20 95.14.37.150
     21 78.166.254.86
     21 78.178.223.59
     21 81.8.74.66
     21 88.236.87.231
     22 62.29.110.18
     23 78.181.235.188
     23 88.241.204.114
     24 78.176.8.236
     24 78.182.61.186
     25 78.175.115.250
     28 85.110.81.252
     32 78.160.103.242
     33 78.161.4.137
     35 95.6.98.132
     38 88.227.208.39
     39 78.179.142.215
     56 78.175.190.47
     59 95.15.39.249
     65 78.177.111.38
     66 88.246.201.101
     71 178.33.37.19
[B]   4968 PRIMARY SERVER IP [/B]
And second problem when i looked to daily process log , netstat -nlu using % 76 of cpu :S ?

- - - Updated - - -

ek.png

Cpu log ? ....
 

24x7server

Well-Known Member
Apr 17, 2013
1,907
95
78
India
cPanel Access Level
Root Administrator
Hello,

I think you have installed Nginx as reverse proxy on your server and due to you are getting server IP in that netstat command

Please installed CSF firewall on your server and setup it