Advertisement
Guest User

Untitled

a guest
Jan 17th, 2018
176
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.52 KB | None | 0 0
  1. We're contacting you to let you know about a recent spike in network activity that we detected on your DV w/SSDs (CentOS 6) - Level 1 with primary domain j7xh-wynn.accessdomain.com. As a proactive measure, Media Temple's automated abuse prevention mechanism has stopped your server. This support request includes important information for you to review and next steps.
  2.  
  3. AFFECTED SERVICE:
  4. Your primary domain: j7xh-wynn.accessdomain.com
  5. Your service: DV w/SSDs (CentOS 6) - Level 1
  6. Your service ID#: 1441251
  7.  
  8. RESOURCE INFO:
  9. Packets per second limit: 45000
  10. Packets per second detected: 57922.52485999999771593139
  11. Bytes per second limit: 100000000
  12. Bytes per second detected: 2486845.86739999987185001373
  13.  
  14. WHY IS MY SERVER DOWN?
  15. Your DV w/SSDs (CentOS 6) - Level 1 was surpassing the limits defined above for packets per second (pps) or bytes per second (bps), traffic patterns that could result from a compromised server or DDoS target. So, to keep your service secure and avoid unnecessary bandwidth overages to your account, we've automatically stopped your container.
  16.  
  17. WHAT DO I DO NOW?
  18. To help you determine the cause of this event, we have captured a process list as well as a snapshot of the network connections that were present during the time of the usage spike. This information has been saved inside the /root/ directory on your server. We will also include these lists at the end of this notification for you to review.
  19.  
  20. For full details on next steps, please review this Knowledge Base article:
  21. https://mediatemple.net/community/products/dv/204404134/
  22.  
  23. CAPTURED DATA:
  24.  
  25. Please review the captured data provided below. If you do not see the words "END CAPTURED DATA" at the end of this message, then the output has been truncated. You can review the full output in files we have placed in the /root/ directory on your server.
  26.  
  27. BEGIN CAPTURED DATA
  28.  
  29. Process list snapshot:
  30. USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
  31. root 102622 0.0 0.0 0 0 ? S 10:07 0:00 [kthreadd/141517]
  32. root 102623 0.0 0.0 0 0 ? S 10:07 0:00 \_ [khelper/141517]
  33. root 102621 0.1 0.0 19232 1532 ? Ss 10:07 0:00 init
  34. root 103025 0.0 0.0 10644 596 ? S<s 10:07 0:00 \_ /sbin/udevd -d
  35. root 103504 0.1 0.0 108560 1924 ? Ss 10:07 0:00 \_ /bin/bash /etc/rc.d/rc 3
  36. root 103863 1.2 0.0 249080 1468 ? Sl 10:07 0:02 \_ /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
  37. dbus 103880 0.0 0.0 21436 888 ? Ss 10:07 0:00 \_ dbus-daemon --system
  38. nscd 103893 1.0 0.0 830956 1580 ? Ssl 10:07 0:01 \_ /usr/sbin/nscd
  39. 494 104615 27.4 0.1 5255352 246676 ? Sl 10:07 0:43 \_ /usr/lib/jvm/jre-1.8.0/bin/java -server -Xms512m -Xmx512m -XX:NewRatio=3 -XX:SurvivorRatio=4 -XX:TargetSurvivorRatio=90 -XX:MaxTenuringThreshold=8 -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:ConcGCThreads=4 -XX:ParallelGCThreads=4 -XX:+CMSScavengeBeforeRemark -XX:PretenureSizeThreshold=64m -XX:+UseCMSInitiatingOccupancyOnly -XX:CMSInitiatingOccupancyFraction=50 -XX:CMSMaxAbortablePrecleanTime=6000 -XX:+CMSParallelRemarkEnabled -XX:+ParallelRefProcEnabled -XX:-OmitStackTraceInFastThrow -verbose:gc -XX:+PrintHeapAtGC -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintGCTimeStamps -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -Xloggc:/home/cpanelsolr/server/logs/solr_gc.log -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=9 -XX:GCLogFileSize=20M -Dsolr.log.dir=/home/cpanelsolr/server/logs -Djetty.port=8984 -DSTOP.PORT=7984 -DSTOP.KEY=solrrocks -Dhost=127.0.0.1 -Duser.timezone=UTC -Djetty.home=/home/cpanelsolr/server -Dsolr.solr.home=/home/cpanelsolr/server/solr -Dsolr.install.dir=/home/cpanelsolr -Xss256k -Dsolr.autoSoftCommit.maxTime=3000 -Dsolr.log.muteconsole -XX:OnOutOfMemoryError=/home/cpanelsolr/bin/oom_solr.sh 8984 /home/cpanelsolr/server/logs -jar start.jar --module=http
  40. nobody 105154 0.0 0.0 56740 2208 ? Ss 10:07 0:00 \_ proftpd: (accepting connections)
  41. root 105187 0.0 0.0 64368 1156 ? Ss 10:07 0:00 \_ /usr/sbin/sshd
  42. root 105201 0.0 0.0 20036 688 ? Ss 10:07 0:00 \_ xinetd -stayalive -pidfile /var/run/xinetd.pid
  43. root 105213 0.3 0.0 106412 1580 ? S 10:07 0:00 \_ /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/j7xh-wynn.accessdomain.com.pid
  44. mysql 105414 4.5 0.0 739788 54092 ? Sl 10:07 0:06 | \_ /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=j7xh-wynn.accessdomain.com.err --open-files-limit=10000 --pid-file=/var/lib/mysql/j7xh-wynn.accessdomain.com.pid
  45. root 105502 0.0 0.0 66496 976 ? Ss 10:08 0:00 \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
  46. root 105503 0.0 0.0 66496 708 ? S 10:08 0:00 | \_ /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
  47. mailnull 105544 0.0 0.0 74232 4644 ? Ss 10:08 0:00 \_ /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid
  48. root 107093 7.3 0.0 220160 97676 ? Ss 10:09 0:03 \_ /usr/local/cpanel/3rdparty/perl/524/bin/spamd --daemonize --max-spare=1 --max-children=3 --allowed-ips=127.0.0.1,::1 --pidfile=/var/run/spamd.pid
  49.  
  50.  
  51. Network snapshot:
  52. Active Internet connections (servers and established)
  53. Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
  54. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1282/mysqld
  55. tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 1329/exim
  56. tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN 1351/spamd.pid
  57. tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1364/httpd
  58. tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 1329/exim
  59. tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1082/sshd
  60. tcp 0 0 205.186.139.33:22 139.70.167.76:80 SYN_RECV -
  61. tcp 0 0 205.186.139.33:22 69.124.173.72:443 SYN_RECV -
  62. tcp 0 0 205.186.139.33:22 173.0.93.0:37393 SYN_RECV -
  63. tcp 0 0 205.186.139.33:22 111.18.41.39:11473 SYN_RECV -
  64. tcp 0 0 205.186.139.33:22 53.43.152.193:25 SYN_RECV -
  65. tcp 0 0 205.186.139.33:22 94.194.118.90:80 SYN_RECV -
  66. tcp 0 0 205.186.139.33:22 69.199.82.15:12384 SYN_RECV -
  67. tcp 0 0 205.186.139.33:22 171.225.104.69:80 SYN_RECV -
  68. tcp 0 0 205.186.139.33:22 79.180.77.48:177 SYN_RECV -
  69. tcp 0 0 205.186.139.33:22 103.7.70.140:25 SYN_RECV -
  70. tcp 0 0 205.186.139.33:22 65.41.190.101:47123 SYN_RECV -
  71. tcp 0 0 205.186.139.33:22 95.30.29.109:443 SYN_RECV -
  72. tcp 0 0 205.186.139.33:22 8.138.42.196:443 SYN_RECV -
  73. tcp 0 0 205.186.139.33:22 69.207.39.154:80 SYN_RECV -
  74. tcp 0 0 205.186.139.33:22 112.191.194.59:80 SYN_RECV -
  75. tcp 0 0 205.186.139.33:22 173.166.171.219:25 SYN_RECV -
  76. tcp 0 0 205.186.139.33:22 181.40.95.181:36208 SYN_RECV -
  77. tcp 0 0 205.186.139.33:22 108.25.117.241:80 SYN_RECV -
  78. tcp 0 0 205.186.139.33:22 114.154.199.1:80 SYN_RECV -
  79. tcp 0 0 205.186.139.33:22 12.2.137.102:443 SYN_RECV -
  80. tcp 0 0 205.186.139.33:22 114.156.27.171:443 SYN_RECV -
  81. tcp 0 0 205.186.139.33:22 187.165.177.91:62021 SYN_RECV -
  82. tcp 0 0 205.186.139.33:22 83.62.50.131:40330 SYN_RECV -
  83. tcp 0 0 205.186.139.33:22 188.98.6.105:46600 SYN_RECV -
  84. tcp 0 0 205.186.139.33:22 119.230.171.238:31063 SYN_RECV -
  85. tcp 0 0 205.186.139.33:22 170.164.11.25:443 SYN_RECV -
  86. tcp 0 0 205.186.139.33:22 78.144.75.210:25 SYN_RECV -
  87. tcp 0 0 205.186.139.33:22 82.64.84.121:23323 SYN_RECV -
  88. tcp 0 0 205.186.139.33:22 129.210.88.32:80 SYN_RECV -
  89. tcp 0 0 205.186.139.33:22 44.43.132.16:80 SYN_RECV -
  90. tcp 0 0 205.186.139.33:22 164.162.76.24:80 SYN_RECV -
  91. tcp 0 0 205.186.139.33:22 78.98.10.88:25 SYN_RECV -
  92. tcp 0 0 205.186.139.33:22 214.46.156.36:25080 SYN_RECV -
  93. tcp 0 0 205.186.139.33:22 39.188.249.150:25793 SYN_RECV -
  94. tcp 0 0 205.186.139.33:22 212.31.66.16:80 SYN_RECV -
  95. tcp 0 0 205.186.139.33:22 135.127.236.8:37722 SYN_RECV -
  96. tcp 0 0 205.186.139.33:22 214.255.124.204:80 SYN_RECV -
  97. tcp 0 0 205.186.139.33:22 51.235.151.67:80 SYN_RECV -
  98. tcp 0 0 205.186.139.33:22 177.152.131.208:80 SYN_RECV -
  99. tcp 0 0 205.186.139.33:22 104.250.89.2:80 SYN_RECV -
  100. tcp 0 0 205.186.139.33:22 168.120.31.84:21611 SYN_RECV -
  101. tcp 0 0 205.186.139.33:22 157.34.184.94:80 SYN_RECV -
  102. tcp 0 0 205.186.139.33:22 81.190.211.138:80 SYN_RECV -
  103. tcp 0 0 205.186.139.33:22 91.179.130.245:25 SYN_RECV -
  104. tcp 0 0 205.186.139.33:22 109.22.104.22:25854 SYN_RECV -
  105. tcp 0 0 205.186.139.33:22 73.186.239.182:45810 SYN_RECV -
  106. tcp 0 0 205.186.139.33:22 51.255.107.166:443 SYN_RECV -
  107. tcp 0 0 205.186.139.33:22 100.228.106.117:25 SYN_RECV -
  108. tcp 0 0 205.186.139.33:22 200.221.7.152:443 SYN_RECV -
  109. tcp 0 0 205.186.139.33:22 173.0.90.246:44781 SYN_RECV -
  110. tcp 0 0 205.186.139.33:22 91.124.146.13:80 SYN_RECV -
  111. tcp 0 0 205.186.139.33:22 142.18.109.171:80 SYN_RECV -
  112. tcp 0 0 205.186.139.33:22 111.169.18.43:80 SYN_RECV -
  113. tcp 0 0 205.186.139.33:22 116.193.220.73:50786 SYN_RECV -
  114. tcp 0 0 205.186.139.33:22 150.118.11.143:80 SYN_RECV -
  115. tcp 0 0 205.186.139.33:22 126.178.113.200:29296 SYN_RECV -
  116. tcp 0 0 205.186.139.33:22 79.223.180.191:25 SYN_RECV -
  117. tcp 0 0 205.186.139.33:22 206.151.154.108:80 SYN_RECV -
  118. tcp 0 0 205.186.139.33:22 186.88.191.42:25 SYN_RECV -
  119. tcp 0 0 205.186.139.33:22 66.218.74.104:27905 SYN_RECV -
  120. tcp 0 0 205.186.139.33:22 49.31.199.196:64464 SYN_RECV -
  121. tcp 0 0 205.186.139.33:22 203.39.223.117:25 SYN_RECV -
  122. tcp 0 0 205.186.139.33:22 27.191.39.3:40592 SYN_RECV -
  123. tcp 0 0 205.186.139.33:22 144.97.229.112:80 SYN_RECV -
  124. tcp 0 0 205.186.139.33:22 41.112.78.156:25 SYN_RECV -
  125. tcp 0 0 205.186.139.33:22 72.76.124.172:80 SYN_RECV -
  126. tcp 0 0 205.186.139.33:22 27.194.255.61:51043 SYN_RECV -
  127. tcp 0 0 205.186.139.33:22 96.210.237.94:443 SYN_RECV -
  128. tcp 0 0 205.186.139.33:22 4.82.222.68:25 SYN_RECV -
  129. tcp 0 0 205.186.139.33:22 31.50.10.167:25 SYN_RECV -
  130. tcp 0 0 205.186.139.33:22 186.75.225.10:42071 SYN_RECV -
  131. tcp 0 0 205.186.139.33:22 99.62.230.35:3051 SYN_RECV -
  132. tcp 0 0 205.186.139.33:22 98.169.96.100:25 SYN_RECV -
  133. tcp 0 0 205.186.139.33:22 148.207.93.142:443 SYN_RECV -
  134. tcp 0 0 205.186.139.33:22 159.205.35.144:12306 SYN_RECV -
  135. tcp 0 0 205.186.139.33:22 5.32.100.135:37513 SYN_RECV -
  136. tcp 0 0 205.186.139.33:22 214.243.59.15:44250 SYN_RECV -
  137. tcp 0 0 205.186.139.33:22 149.159.43.191:11674 SYN_RECV -
  138. tcp 0 0 205.186.139.33:22 99.155.144.23:80 SYN_RECV -
  139. tcp 0 0 205.186.139.33:22 219.169.120.21:80 SYN_RECV -
  140. tcp 0 0 205.186.139.33:22 4.34.186.130:443 SYN_RECV -
  141. tcp 0 0 205.186.139.33:22 213.176.143.209:443 SYN_RECV -
  142. tcp 0 0 205.186.139.33:22 123.180.77.98:43071 SYN_RECV -
  143. tcp 0 0 205.186.139.33:22 192.75.71.177:443 SYN_RECV -
  144. tcp 0 0 205.186.139.33:22 126.196.44.133:44309 SYN_RECV -
  145. tcp 0 0 205.186.139.33:22 71.79.140.154:38764 SYN_RECV -
  146. tcp 0 0 205.186.139.33:22 187.34.121.155:25 SYN_RECV -
  147. tcp 0 0 205.186.139.33:22 75.125.234.15:51548 SYN_RECV -
  148. tcp 0 0 205.186.139.33:22 80.201.96.73:34469 SYN_RECV -
  149. tcp 0 0 205.186.139.33:22 67.219.149.33:19478 SYN_RECV -
  150. tcp 0 0 205.186.139.33:22 4.7.49.220:25 SYN_RECV -
  151. tcp 0 0 205.186.139.33:22 45.27.205.61:80 SYN_RECV -
  152. tcp 0 0 205.186.139.33:22 5.132.25.141:24409 SYN_RECV -
  153. tcp 0 0 205.186.139.33:22 154.51.49.230:46453 SYN_RECV -
  154. tcp 0 0 205.186.139.33:22 135.60.210.166:37835 SYN_RECV -
  155. tcp 0 0 205.186.139.33:22 55.98.164.6:25 SYN_RECV -
  156. tcp 0 0 205.186.139.33:22 78.80.220.172:80 SYN_RECV -
  157. tcp 0 0 205.186.139.33:22 68.76.70.228:443 SYN_RECV -
  158. tcp 0 0 205.186.139.33:22 183.53.6.138:25 SYN_RECV -
  159. tcp 0 0 205.186.139.33:22 182.191.85.86:80 SYN_RECV -
  160. tcp 0 0 205.186.139.33:22 186.194.43.53:52188 SYN_RECV -
  161. tcp 0 0 205.186.139.33:22 34.196.25.103:80 SYN_RECV -
  162. tcp 0 0 205.186.139.33:22 61.77.174.9:80 SYN_RECV -
  163. tcp 0 0 205.186.139.33:22 18.79.112.103:443 SYN_RECV -
  164. tcp 0 0 205.186.139.33:22 87.127.249.78:80 SYN_RECV -
  165. tcp 0 0 205.186.139.33:22 183.7.195.234:25 SYN_RECV -
  166. tcp 0 0 205.186.139.33:22 62.88.201.123:443 SYN_RECV -
  167. tcp 0 0 205.186.139.33:22 64.115.251.120:44862 SYN_RECV -
  168. tcp 0 0 205.186.139.33:22 68.196.200.31:80 SYN_RECV -
  169. tcp 0 0 205.186.139.33:22 191.247.178.93:443 SYN_RECV -
  170. tcp 0 0 205.186.139.33:22 124.186.75.254:443 SYN_RECV -
  171. tcp 0 0 205.186.139.33:22 44.253.156.71:443 SYN_RECV -
  172. tcp 0 0 205.186.139.33:22 121.150.172.231:80 SYN_RECV -
  173. tcp 0 0 205.186.139.33:22 173.244.4.200:25 SYN_RECV -
  174. tcp 0 0 205.186.139.33:22 137.15.53.25:80 SYN_RECV -
  175. tcp 0 0 205.186.139.33:22 32.112.82.59:443 SYN_RECV -
  176. tcp 0 0 205.186.139.33:22 190.112.210.200:10004 SYN_RECV -
  177. tcp 0 0 205.186.139.33:22 189.224.251.181:25 SYN_RECV -
  178. tcp 0 0 205.186.139.33:22 12.109.174.119:80 SYN_RECV -
  179. tcp 0 0 205.186.139.33:22 113.93.158.199:25 SYN_RECV -
  180. tcp 0 0 205.186.139.33:22 101.84.58.216:25 SYN_RECV -
  181. tcp 0 0 205.186.139.33:22 2.243.111.73:13755 SYN_RECV -
  182. tcp 0 0 205.186.139.33:22 139.81.126.231:25747 SYN_RECV -
  183. tcp 0 0 205.186.139.33:22 58.190.63.33:80 SYN_RECV -
  184. tcp 0 0 205.186.139.33:22 147.116.27.38:443 SYN_RECV -
  185. tcp 0 0 205.186.139.33:22 137.161.48.176:25 SYN_RECV -
  186. tcp 0 0 205.186.139.33:22 190.102.157.176:80 SYN_RECV -
  187. tcp 0 0 205.186.139.33:22 201.74.26.166:443 SYN_RECV -
  188. tcp 0 0 205.186.139.33:22 221.224.32.5:443 SYN_RECV -
  189. tcp 0 0 205.186.139.33:22 77.153.97.231:39763 SYN_RECV -
  190. tcp 0 0 205.186.139.33:22 84.145.138.249:44691 SYN_RECV -
  191. tcp 0 0 205.186.139.33:22 90.255.54.10:80 SYN_RECV -
  192. tcp 0 0 205.186.139.33:22 219.114.100.14:54695 SYN_RECV -
  193. tcp 0 0 205.186.139.33:22 146.169.8.68:37420 SYN_RECV -
  194. tcp 0 0 205.186.139.33:22 60.241.164.36:45252 SYN_RECV -
  195. tcp 0 0 205.186.139.33:22 193.85.35.183:63115 SYN_RECV -
  196. tcp 0 0 205.186.139.33:22 89.7.70.61:80 SYN_RECV -
  197. tcp 0 0 205.186.139.33:22 101.182.141.128:443 SYN_RECV -
  198. tcp 0 0 205.186.139.33:22 151.81.186.60:80 SYN_RECV -
  199. tcp 0 0 205.186.139.33:22 184.218.170.11:80 SYN_RECV -
  200. tcp 0 0 205.186.139.33:22 93.139.62.84:80 SYN_RECV -
  201. tcp 0 0 205.186.139.33:22 54.204.84.241:948 SYN_RECV -
  202. tcp 0 0 205.186.139.33:22 124.182.83.161:80 SYN_RECV -
  203. tcp 0 0 205.186.139.33:22 58.216.222.121:27798 SYN_RECV -
  204. tcp 0 0 205.186.139.33:22 177.23.144.40:25 SYN_RECV -
  205. tcp 0 0 205.186.139.33:22 182.56.226.219:25 SYN_RECV -
  206. tcp 0 0 205.186.139.33:22 74.74.59.32:25 SYN_RECV -
  207. tcp 0 0 205.186.139.33:22 64.210.92.249:6552 SYN_RECV -
  208. tcp 0 0 205.186.139.33:22 94.182.91.186:25 SYN_RECV -
  209. tcp 0 0 205.186.139.33:22 185.37.59.245:443 SYN_RECV -
  210. tcp 0 0 205.186.139.33:22 157.169.184.76:45982 SYN_RECV -
  211. tcp 0 0 205.186.139.33:22 96.193.187.129:41883 SYN_RECV -
  212. tcp 0 0 205.186.139.33:22 125.241.250.80:56020 SYN_RECV -
  213. tcp 0 0 205.186.139.33:22 187.245.208.8:80 SYN_RECV -
  214. tcp 0 0 205.186.139.33:22 69.118.234.209:2076 SYN_RECV -
  215. tcp 0 0 205.186.139.33:22 190.47.120.78:33409 SYN_RECV -
  216. tcp 0 0 205.186.139.33:22 96.213.221.94:3162 SYN_RECV -
  217. tcp 0 0 205.186.139.33:22 187.108.1.252:25 SYN_RECV -
  218. tcp 0 0 205.186.139.33:22 50.190.53.119:443 SYN_RECV -
  219. tcp 0 0 205.186.139.33:22 74.11.98.26:63779 SYN_RECV -
  220. tcp 0 0 205.186.139.33:22 67.155.5.167:80 SYN_RECV -
  221. tcp 0 0 205.186.139.33:22 168.209.211.181:25 SYN_RECV -
  222. tcp 0 0 205.186.139.33:22 81.149.124.233:443 SYN_RECV -
  223. tcp 0 0 205.186.139.33:22 223.47.46.142:58802 SYN_RECV -
  224. tcp 0 0 205.186.139.33:22 96.226.22.190:17522 SYN_RECV -
  225. tcp 0 0 205.186.139.33:22 71.1.187.190:80 SYN_RECV -
  226. tcp 0 0 205.186.139.33:22 97.86.149.4:15698 SYN_RECV -
  227. tcp 0 0 205.186.139.33:22 118.182.176.168:443 SYN_RECV -
  228. tcp 0 0 205.186.139.33:22 119.217.51.119:56803 SYN_RECV -
  229. tcp 0 0 205.186.139.33:22 90.68.212.26:443 SYN_RECV -
  230. tcp 0 0 205.186.139.33:22 193.200.34.150:443 SYN_RECV -
  231. tcp 0 0 205.186.139.33:22 177.89.150.4:443 SYN_RECV -
  232. tcp 0 0 205.186.139.33:22 206.181.215.223:80 SYN_RECV -
  233. tcp 0 0 205.186.139.33:22 2.196.238.26:80 SYN_RECV -
  234. tcp 0 0 205.186.139.33:22 109.219.161.125:443 SYN_RECV -
  235. tcp 0 0 205.186.139.33:22 177.164.170.35:49963 SYN_RECV -
  236. tcp 0 0 205.186.139.33:22 87.169.21.48:443 SYN_RECV -
  237. tcp 0 0 205.186.139.33:22 168.9.96.238:33291 SYN_RECV -
  238. tcp 0 0 205.186.139.33:22 129.110.215.244:24662 SYN_RECV -
  239. tcp 0 0 205.186.139.33:22 211.222.87.251:13242 SYN_RECV -
  240. tcp 0 0 205.186.139.33:22 173.0.90.54:62143 SYN_RECV -
  241. tcp 0 0 205.186.139.33:22 82.73.80.32:25 SYN_RECV -
  242. tcp 0 0 205.186.139.33:22 107.164.218.49:46009 SYN_RECV -
  243. tcp 0 0 205.186.139.33:22 223.33.75.19:32141 SYN_RECV -
  244. tcp 0 0 205.186.139.33:22 70.99.254.101:9197 SYN_RECV -
  245. tcp 0 0 205.186.139.33:22 61.165.79.108:21994 SYN_RECV -
  246. tcp 0 0 205.186.139.33:22 94.79.73.223:36481 SYN_RECV -
  247. tcp 0 0 205.186.139.33:22 75.118.3.224:443 SYN_RECV -
  248. tcp 0 0 205.186.139.33:22 112.183.225.220:80 SYN_RECV -
  249. tcp 0 0 205.186.139.33:22 64.35.123.235:17285 SYN_RECV -
  250. tcp 0 0 205.186.139.33:22 37.116.241.145:443 SYN_RECV -
  251. tcp 0 0 205.186.139.33:22 150.55.122.89:443 SYN_RECV -
  252. tcp 0 0 205.186.139.33:22 215.10.44.103:25 SYN_RECV -
  253. tcp 0 0 205.186.139.33:22 71.113.184.218:9337 SYN_RECV -
  254. tcp 0 0 205.186.139.33:22 194.38.169.61:35495 SYN_RECV -
  255. tcp 0 0 205.186.139.33:22 204.22.96.34:224 SYN_RECV -
  256. tcp 0 0 205.186.139.33:22 16.140.252.94:31201 SYN_RECV -
  257. tcp 0 0 205.186.139.33:22 39.87.155.142:27421 SYN_RECV -
  258. tcp 0 0 205.186.139.33:22 169.150.111.74:25078 SYN_RECV -
  259. tcp 0 0 205.186.139.33:22 214.213.195.169:80 SYN_RECV -
  260. tcp 0 0 205.186.139.33:22 145.245.176.49:443 SYN_RECV -
  261. tcp 0 0 205.186.139.33:22 93.222.134.242:22691 SYN_RECV -
  262. tcp 0 0 205.186.139.33:22 190.77.145.171:25 SYN_RECV -
  263. tcp 0 0 205.186.139.33:22 74.38.22.0:443 SYN_RECV -
  264. tcp 0 0 205.186.139.33:22 41.251.245.20:2517 SYN_RECV -
  265. tcp 0 0 205.186.139.33:22 105.162.28.49:52504 SYN_RECV -
  266. tcp 0 0 205.186.139.33:22 195.166.2.214:25 SYN_RECV -
  267. tcp 0 0 205.186.139.33:22 79.21.58.42:443 SYN_RECV -
  268. tcp 0 0 205.186.139.33:22 209.112.207.16:25 SYN_RECV -
  269. tcp 0 0 205.186.139.33:22 186.212.183.24:25 SYN_RECV -
  270. tcp 0 0 205.186.139.33:22 89.33.104.0:61259 SYN_RECV -
  271. tcp 0 0 205.186.139.33:22 83.3.151.221:443 SYN_RECV -
  272. tcp 0 0 205.186.139.33:22 129.29.161.73:80 SYN_RECV -
  273. tcp 0 0 205.186.139.33:22 92.122.247.29:56384 SYN_RECV -
  274. tcp 0 0 205.186.139.33:22 208.112.64.119:25 SYN_RECV -
  275. tcp 0 0 205.186.139.33:22 140.239.22.254:25 SYN_RECV -
  276. tcp 0 0 205.186.139.33:22 222.60.86.219:80 SYN_RECV -
  277. tcp 0 0 205.186.139.33:22 74.242.83.164:80 SYN_RECV -
  278. tcp 0 0 205.186.139.33:22 168.201.138.44:443 SYN_RECV -
  279. tcp 0 0 205.186.139.33:22 217.176.241.130:80 SYN_RECV -
  280. tcp 0 0 205.186.139.33:22 182.253.250.162:25 SYN_RECV -
  281. tcp 0 0 205.186.139.33:22 156.77.173.80:80 SYN_RECV -
  282. tcp 0 0 205.186.139.33:22 146.231.84.146:25 SYN_RECV -
  283. tcp 0 0 205.186.139.33:22 130.39.232.68:63681 SYN_RECV -
  284. tcp 0 0 205.186.139.33:22 167.240.67.45:443 SYN_RECV -
  285. tcp 0 0 205.186.139.33:22 99.173.213.172:25 SYN_RECV -
  286. tcp 0 0 205.186.139.33:22 105.78.174.219:33290 SYN_RECV -
  287. tcp 0 0 205.186.139.33:22 42.237.1.63:443 SYN_RECV -
  288. tcp 0 0 205.186.139.33:22 177.123.26.255:25 SYN_RECV -
  289. tcp 0 0 205.186.139.33:22 221.35.246.12:25 SYN_RECV -
  290. tcp 0 0 205.186.139.33:22 64.13.221.42:26199 SYN_RECV -
  291. tcp 0 0 205.186.139.33:22 70.12.221.182:80 SYN_RECV -
  292. tcp 0 0 205.186.139.33:22 152.173.245.68:80 SYN_RECV -
  293. tcp 0 0 205.186.139.33:22 89.126.103.28:25 SYN_RECV -
  294. tcp 0 0 205.186.139.33:22 166.166.121.7:443 SYN_RECV -
  295. tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 1329/exim
  296. tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1364/httpd
  297. tcp 0 0 205.186.139.33:443 191.184.38.240:53115 SYN_RECV -
  298. tcp 248 0 205.186.139.33:443 172.68.27.46:35389 ESTABLISHED -
  299. tcp 207 0 205.186.139.33:443 187.36.60.42:61055 ESTABLISHED -
  300. tcp 248 0 205.186.139.33:443 172.68.26.213:19551 ESTABLISHED -
  301. tcp 517 0 205.186.139.33:443 177.132.96.181:56860 ESTABLISHED -
  302. tcp 0 0 205.186.139.33:443 187.123.146.107:51285 ESTABLISHED 1412/httpd
  303. tcp 228 0 205.186.139.33:443 187.123.146.107:51291 ESTABLISHED -
  304. tcp 248 0 205.186.139.33:443 172.68.25.98:17865 ESTABLISHED -
  305. tcp 517 0 205.186.139.33:443 177.183.238.19:61811 ESTABLISHED -
  306. tcp 438 0 205.186.139.33:80 189.122.103.175:19907 ESTABLISHED -
  307. tcp 228 0 205.186.139.33:443 187.123.146.107:51287 ESTABLISHED -
  308. tcp 248 0 205.186.139.33:443 172.68.26.237:26143 ESTABLISHED -
  309. tcp 228 0 205.186.139.33:443 187.123.146.107:51286 ESTABLISHED -
  310. tcp 248 0 205.186.139.33:443 172.68.27.196:14239 ESTABLISHED -
  311. tcp 248 0 205.186.139.33:443 172.68.25.212:33327 ESTABLISHED -
  312. tcp 248 0 205.186.139.33:443 172.68.26.225:21701 ESTABLISHED -
  313. tcp 248 0 205.186.139.33:443 172.68.25.38:28397 ESTABLISHED -
  314. tcp 228 0 205.186.139.33:443 187.123.146.107:51288 ESTABLISHED -
  315. tcp 0 0 205.186.139.33:443 187.123.146.107:51283 ESTABLISHED 1410/httpd
  316. tcp 248 0 205.186.139.33:443 172.68.27.196:15053 ESTABLISHED -
  317. tcp 0 0 205.186.139.33:443 187.123.146.107:51289 ESTABLISHED 1409/httpd
  318. tcp 0 0 205.186.139.33:443 187.123.146.107:51284 ESTABLISHED 1411/httpd
  319. tcp 0 0 205.186.139.33:443 172.68.27.130:18833 ESTABLISHED 1426/httpd
  320. tcp 228 0 205.186.139.33:443 187.123.146.107:51290 ESTABLISHED -
  321. tcp 0 0 205.186.139.33:443 172.68.26.147:22201 ESTABLISHED 1413/httpd
  322. tcp 1238 0 205.186.139.33:80 172.68.26.87:34857 ESTABLISHED -
  323. tcp 248 0 205.186.139.33:443 172.68.27.178:33095 ESTABLISHED -
  324. tcp 517 0 205.186.139.33:443 191.188.34.167:2901 ESTABLISHED -
  325. tcp 0 0 :::587 :::* LISTEN 1329/exim
  326. tcp 0 0 :::80 :::* LISTEN 1364/httpd
  327. tcp 0 0 ::ffff:127.0.0.1:7984 :::* LISTEN 893/java
  328. tcp 0 0 :::465 :::* LISTEN 1329/exim
  329. tcp 0 0 :::21 :::* LISTEN 1064/proftpd
  330. tcp 0 0 :::22 :::* LISTEN 1082/sshd
  331. tcp 0 0 ::ffff:127.0.0.1:8984 :::* LISTEN 893/java
  332. tcp 0 0 :::25 :::* LISTEN 1329/exim
  333. tcp 0 0 :::443 :::* LISTEN 1364/httpd
  334. Active UNIX domain sockets (servers and established)
  335. Proto RefCnt Flags Type State I-Node PID/Program name Path
  336. unix 7 [ ] DGRAM 532498 593/rsyslogd /dev/log
  337. unix 2 [ ACC ] STREAM LISTENING 528919 1/init @/com/ubuntu/upstart
  338. unix 2 [ ] DGRAM 529557 141/udevd @/org/kernel/udev/udevd
  339. unix 2 [ ACC ] STREAM LISTENING 538635 1282/mysqld /var/lib/mysql/mysql.sock
  340. unix 2 [ ACC ] STREAM LISTENING 532530 608/dbus-daemon /var/run/dbus/system_bus_socket
  341. unix 2 [ ACC ] STREAM LISTENING 532589 621/nscd /var/run/nscd/socket
  342. unix 2 [ ACC ] STREAM LISTENING 538737 1314/saslauthd /var/run/saslauthd/mux
  343. unix 2 [ ] DGRAM 562265 1375/crond
  344. unix 3 [ ] STREAM CONNECTED 562041 1353/spamd child
  345. unix 3 [ ] STREAM CONNECTED 562040 1351/spamd.pid
  346. unix 2 [ ] DGRAM 547521 1351/spamd.pid
  347. unix 2 [ ] DGRAM 538736 1314/saslauthd
  348. unix 2 [ ] DGRAM 537810 1093/xinetd
  349. unix 2 [ ] DGRAM 537633 1064/proftpd
  350. unix 2 [ ] STREAM CONNECTED 535950 893/java
  351. unix 2 [ ] STREAM CONNECTED 535629 893/java
  352. unix 3 [ ] STREAM CONNECTED 532545 608/dbus-daemon /var/run/dbus/system_bus_socket
  353. unix 3 [ ] STREAM CONNECTED 532544 1/init
  354. unix 3 [ ] STREAM CONNECTED 532535 608/dbus-daemon
  355. unix 3 [ ] STREAM CONNECTED 532534 608/dbus-daemon
  356. unix 3 [ ] DGRAM 529561 141/udevd
  357. unix 3 [ ] DGRAM 529560 141/udevd
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement