Which IPs are attack my site?

u1983

Registered
Oct 8, 2008
4
0
51
Hi everyone,
my site getting ddos some day now
and here is what i get from netstat command

Code:
[email protected] [~]# netstat -plan|grep :80|awk {'print $5'}|cut -d: -f 1|sort|uniq -c|sort -nk 1
1 101.226.74.168
1 103.22.181.247
1 103.29.132.53
1 108.61.89.152
1 113.105.65.111
1 114.175.60.188
1 114.26.191.231
1 116.82.57.13
1 119.30.246.115
1 121.22.72.61
1 122.22.231.41
1 136.0.16.108
1 173.213.97.214
1 176.31.140.103
1 176.31.213.98
1 178.154.243.91
1 178.18.17.208
1 178.18.17.250
1 180.242.89.135
1 182.249.241.112
1 184.106.170.71
1 188.165.121.250
1 190.121.135.131
1 192.210.197.120
1 192.227.139.106
1 192.95.14.4
1 192.95.35.201
1 194.132.32.42
1 198.154.114.100
1 198.27.79.149
1 198.46.139.19
1 198.98.118.234
1 201.77.202.68
1 202.102.48.205
1 204.12.235.10
1 208.117.11.213
1 208.68.37.137
1 211.157.104.100
1 216.230.230.57
1 218.2.129.53
1 219.67.66.216
1 220.194.47.221
1 220.24.126.221
1 23.27.236.171
1 37.58.52.15
1 37.59.213.209
1 37.59.48.180
1 37.59.88.125
1 46.105.20.6
1 46.105.32.211
1 46.117.40.26
1 46.120.242.81
1 46.4.91.197
1 5.135.43.154
1 5.199.166.250
1 54.225.4.186
1 58.215.50.150
1 60.247.77.251
1 61.136.68.76
1 61.187.186.150
1 65.126.16.155
1 66.35.68.145
1 72.29.4.111
1 74.120.13.132
1 84.94.169.171
1 87.69.40.142
1 88.73.121.15
1 91.213.8.84
1 93.174.90.30
2 0.0.0.0
2 114.214.163.63
2 116.255.241.111
2 119.184.214.18
2 123.157.208.8
2 176.31.233.107
2 178.18.17.211
2 183.81.58.58
2 190.102.17.240
2 192.110.163.22
2 192.211.50.146
2 192.227.137.47
2 196.216.48.67
2 198.2.193.100
2 199.15.248.179
2 199.30.136.117
2 23.27.19.113
2 31.172.30.2
2 37.46.197.58
2 46.165.221.166
2 5.135.81.16
2 5.9.228.120
2 59.90.11.34
2 64.120.142.140
2 69.197.132.68
2 74.221.211.12
2 85.130.209.34
2 88.190.236.64
3 111.193.178.211
3 111.232.220.87
3 123.180.238.0
3 173.193.200.199
3 180.242.65.211
3 190.102.30.19
3 190.149.209.46
3 198.245.70.92
3 199.193.248.133
3 206.222.11.110
3 209.90.238.251
3 212.5.187.34
3 218.30.103.155
3 61.138.27.5
3 91.121.100.200
4 121.107.132.227
4 122.192.166.70
4 124.49.12.37
4 125.15.215.94
4 193.239.220.148
4 199.45.9.180
4 200.28.4.131
4 203.171.231.36
4 212.8.33.154
4 217.169.128.70
4 5.9.251.153
4 91.228.53.28
4 94.228.229.27
5 125.34.212.103
5 184.154.85.252
5 190.102.17.180
5 219.65.189.240
5 46.105.107.64
5 5.190.113.226
5 5.39.122.199
5 58.56.5.99
5 66.35.68.146
5 94.247.25.162
6 117.36.197.164
6 201.247.103.161
6 24.130.123.235
6 60.13.222.66
6 96.127.208.235
7 125.179.245.27
7 176.34.211.30
7 190.5.199.173
7 83.228.101.154
8 54.232.23.48
8 59.137.221.188
8 60.190.189.214
8 77.236.209.236
8 82.209.195.5
9 144.76.28.92
9 221.11.8.90
9 221.232.247.27
9 50.57.170.105
10 110.53.48.54
10 119.62.72.202
10 219.148.47.124
10 60.12.193.42
11 59.11.237.151
11 94.242.251.110
11 95.181.33.22
12 119.254.66.7
12 202.55.195.39
12 218.22.64.244
12 222.55.8.41
12 50.57.171.227
13 183.92.246.1
13 94.247.25.164
14 50.57.179.82
14 64.178.172.154
16 188.165.208.11
16 219.223.252.150
16 61.155.95.28
16 62.122.187.18
17 109.73.14.54
17 212.160.138.237
17 217.219.85.229
17 89.44.124.11
18 190.9.128.96
18 202.116.160.89
18 221.206.123.77
19 222.57.81.198
19 59.108.47.58
20 217.28.216.130
21 202.108.251.214
22 175.181.45.63
22 190.102.3.152
22 210.128.54.210
22 218.249.86.131
23 109.86.201.180
23 115.182.10.144
23 220.161.144.67
23 58.211.195.86
23 61.155.159.9
24 113.161.70.62
24 94.152.186.242
25 176.8.90.125
25 210.36.93.32
26 125.88.128.196
26 218.28.111.102
27 125.39.80.22
132 xx.xx.xx.xx
3380 xx.xx.xx.yy

my question is the top connecting on my server is 3380 xx.xx.xx.yy and 132 xx.xx.xx.xx
but the ip xx.xx.xx.xx and xx.xx.xx.yy is my server IPs

what i have to do?
pls help me

thank you.

thank you.