Centos fait des attaques a partit de SSH2 !
fanta
-
opasan Messages postés 1 Statut Membre -
opasan Messages postés 1 Statut Membre -
Bonjour,
Volia j'ai un server linux (Centos) et mon server fait des attaque sans savoir pour quoi?
Quelq'un pourrais m'aider???
Volia j'ai un server linux (Centos) et mon server fait des attaque sans savoir pour quoi?
Quelq'un pourrais m'aider???
Configuration: Windows XP / Firefox 3.6
3 réponses
-
des attaques..? cardiaques ..? :-)
c'est quoi son rôle à ton server..? -
connais pas ça moi... :-( ... tu connais le nom de ton service ?
poste un netstat -anpe
aprés si tu peux choper le fichier log de ton service c'est encore mieux... -
J'ai fait ce que tu ma dit.
Ca me fait ca !
udp 0 0 78.46.81.45:27102 0.0.0.0:* 510 54526 11776/hlds_i686
udp 5664 0 78.46.81.45:39520 78.46.81.45:27101 ESTABLISHED 520 3606820 11499/hlds_i686
udp 4536 0 78.46.81.45:34016 79.101.56.14:27025 ESTABLISHED 519 64173 11592/hlds_i686
udp 4536 0 78.46.81.45:51168 78.46.81.45:27029 ESTABLISHED 510 62738 11776/hlds_i686
udp 4152 0 78.46.81.45:54113 79.101.56.14:27023 ESTABLISHED 519 64172 11592/hlds_i686
udp 4152 0 78.46.81.45:49121 78.46.81.45:27102 ESTABLISHED 512 62270 11961/hlds_i686
udp 4536 0 78.46.81.45:43489 78.46.81.45:27029 ESTABLISHED 512 61782 11961/hlds_i686
udp 11328 0 78.46.81.45:53345 78.46.81.45:27014 ESTABLISHED 508 60076 12152/hlds_i686
udp 4920 0 78.46.81.45:45666 79.101.56.14:27025 ESTABLISHED 519 2476085 11592/hlds_i686
udp 4152 0 78.46.81.45:39266 78.46.81.45:27101 ESTABLISHED 520 66820 11499/hlds_i686
udp 3648 0 78.46.81.45:45410 79.101.56.14:27023 ESTABLISHED 519 59923 11592/hlds_i686
udp 0 0 78.46.81.45:55907 217.26.212.40:27050 ESTABLISHED 519 1586470 11592/hlds_i686
udp 4152 0 78.46.81.45:43747 78.46.81.45:27102 ESTABLISHED 512 65343 11961/hlds_i686
udp 4152 0 78.46.81.45:35939 78.46.81.45:21337 ESTABLISHED 519 64224 11592/hlds_i686
udp 4536 0 78.46.81.45:50147 78.46.81.45:27029 ESTABLISHED 512 61319 11961/hlds_i686
udp 4152 0 78.46.81.45:58725 78.46.81.45:27029 ESTABLISHED 512 59007 11961/hlds_i686
udp 4152 0 78.46.81.45:58214 78.46.81.45:21337 ESTABLISHED 519 64305 11592/hlds_i686
udp 4152 0 78.46.81.45:42983 78.46.81.45:27102 ESTABLISHED 512 1640264 11961/hlds_i686
udp 4152 0 78.46.81.45:54887 79.101.56.13:27091 ESTABLISHED 519 67892 11592/hlds_i686
udp 4152 0 78.46.81.45:49383 79.101.56.13:27091 ESTABLISHED 519 63912 11592/hlds_i686
udp 4536 0 78.46.81.45:36200 78.46.81.45:27029 ESTABLISHED 512 2995398 11961/hlds_i686
udp 4152 0 78.46.81.45:34153 78.46.81.45:27102 ESTABLISHED 520 1580976 11499/hlds_i686
udp 4536 0 78.46.81.45:33001 78.46.81.45:27029 ESTABLISHED 510 802004 11776/hlds_i686
udp 0 0 78.46.81.45:38761 217.26.212.40:27050 ESTABLISHED 519 60643 11592/hlds_i686
udp 12864 0 78.46.81.45:35817 78.46.81.45:27017 ESTABLISHED 508 60077 12152/hlds_i686
udp 0 0 0.0.0.0:5353 0.0.0.0:* 70 9118 3019/avahi-daemon:
udp 0 0 78.46.81.45:43370 82.232.102.55:19863 ESTABLISHED 512 3874440 11961/hlds_i686
udp 9072 0 78.46.81.45:52714 78.46.81.45:27017 ESTABLISHED 508 2999606 12152/hlds_i686
udp 4152 0 78.46.81.45:38122 78.46.81.45:27101 ESTABLISHED 520 58303 11499/hlds_i686
udp 4152 0 78.46.81.45:59371 78.46.81.45:27102 ESTABLISHED 512 62741 11961/hlds_i686
udp 4536 0 78.46.81.45:48876 79.101.56.14:27025 ESTABLISHED 519 3523510 11592/hlds_i686
udp 4536 0 78.46.81.45:34028 78.46.81.45:27029 ESTABLISHED 510 2324299 11776/hlds_i686
udp 4152 0 78.46.81.45:44140 78.46.81.45:27102 ESTABLISHED 520 64844 11499/hlds_i686
udp 4152 0 78.46.81.45:54636 78.46.81.45:27029 ESTABLISHED 512 59821 11961/hlds_i686
udp 3648 0 78.46.81.45:40813 79.101.56.14:27023 ESTABLISHED 519 61389 11592/hlds_i686
udp 4152 0 78.46.81.45:38253 78.46.81.45:27102 ESTABLISHED 512 59006 11961/hlds_i686
udp 4152 0 78.46.81.45:51054 78.46.81.45:27102 ESTABLISHED 512 63714 11961/hlds_i686
udp 12096 0 78.46.81.45:60398 78.46.81.45:27017 ESTABLISHED 508 62690 12152/hlds_i686
udp 4152 0 78.46.81.45:54766 78.46.81.45:27102 ESTABLISHED 520 60340 11499/hlds_i686
udp 4152 0 78.46.81.45:48239 79.101.56.14:27023 ESTABLISHED 519 67889 11592/hlds_i686
udp 4152 0 78.46.81.45:57455 78.46.81.45:27102 ESTABLISHED 512 67884 11961/hlds_i686
udp 4152 0 78.46.81.45:56303 78.46.81.45:27029 ESTABLISHED 512 67411 11961/hlds_i686
udp 5664 0 78.46.81.45:43247 78.46.81.45:21337 ESTABLISHED 519 64531 11592/hlds_i686
udp 4152 0 78.46.81.45:57712 78.46.81.45:27101 ESTABLISHED 510 66295 11776/hlds_i686
udp 0 0 78.46.81.45:54257 82.232.102.55:19863 ESTABLISHED 510 3829907 11776/hlds_i686
udp 0 0 78.46.81.45:50289 217.26.212.40:27050 ESTABLISHED 519 3523511 11592/hlds_i686
udp 4152 0 78.46.81.45:52851 78.46.81.45:27101 ESTABLISHED 520 1580975 11499/hlds_i686
udp 4152 0 78.46.81.45:38004 78.46.81.45:21337 ESTABLISHED 519 68806 11592/hlds_i686
udp 4152 0 78.46.81.45:49396 79.101.56.13:27091 ESTABLISHED 519 64097 11592/hlds_i686
udp 4152 0 78.46.81.45:49268 78.46.81.45:27102 ESTABLISHED 520 54531 11499/hlds_i686
udp 4152 0 78.46.81.45:51956 79.101.56.13:27091 ESTABLISHED 519 54280 11592/hlds_i686
udp 4152 0 78.46.81.45:35445 79.101.56.14:27023 ESTABLISHED 519 3523509 11592/hlds_i686
udp 12096 0 78.46.81.45:40309 78.46.81.45:27017 ESTABLISHED 508 111781 12152/hlds_i686
udp 0 0 78.46.81.45:38005 217.26.212.40:27050 ESTABLISHED 519 62123 11592/hlds_i686
udp 0 0 78.46.81.45:53238 217.26.212.40:27050 ESTABLISHED 519 65869 11592/hlds_i686
udp 4920 0 78.46.81.45:39286 79.101.56.14:27025 ESTABLISHED 519 65868 11592/hlds_i686
udp 3648 0 78.46.81.45:39414 79.101.56.13:27091 ESTABLISHED 519 64102 11592/hlds_i686
udp 0 0 78.46.81.45:54134 217.26.212.40:27050 ESTABLISHED 519 59925 11592/hlds_i686
udp 0 0 78.46.81.45:39415 217.26.212.40:27050 ESTABLISHED 519 64227 11592/hlds_i686
udp 4152 0 78.46.81.45:56055 78.46.81.45:21337 ESTABLISHED 519 62853 11592/hlds_i686
udp 4152 0 78.46.81.45:52599 78.46.81.45:21337 ESTABLISHED 519 59922 11592/hlds_i686
udp 6432 0 78.46.81.45:42744 79.101.56.14:27025 ESTABLISHED 519 2817509 11592/hlds_i686
udp 0 0 78.46.81.45:57464 217.26.212.40:27050 ESTABLISHED 519 64308 11592/hlds_i686
udp 0 0 78.46.81.45:27000 0.0.0.0:* 521 56567 12435/hlds_i686
udp 5664 0 78.46.81.45:48633 79.101.56.13:27091 ESTABLISHED 519 2817511 11592/hlds_i686
udp 4416 0 78.46.81.45:46841 79.101.56.13:27091 ESTABLISHED 519 1586471 11592/hlds_i686
udp 8304 0 78.46.81.45:54649 78.46.81.45:27014 ESTABLISHED 508 448986 12152/hlds_i686
udp 0 0 78.46.81.45:27002 0.0.0.0:* 515 56020 12245/hlds_i686
udp 4152 0 78.46.81.45:47099 78.46.81.45:27102 ESTABLISHED 512 60832 11961/hlds_i686
udp 0 0 78.46.81.45:27003 0.0.0.0:* 532 54272 11684/hlds_i686
udp 4152 0 78.46.81.45:55804 78.46.81.45:27102 ESTABLISHED 520 3854103 11499/hlds_i686
udp 4152 0 78.46.81.45:52604 78.46.81.45:27029 ESTABLISHED 512 66871 11961/hlds_i686
udp 4152 0 78.46.81.45:55548 78.46.81.45:27102 ESTABLISHED 520 66821 11499/hlds_i686
udp 4536 0 78.46.81.45:36348 79.101.56.14:27025 ESTABLISHED 519 61390 11592/hlds_i686
udp 4152 0 78.46.81.45:47740 79.101.56.14:27023 ESTABLISHED 519 54277 11592/hlds_i686
udp 5664 0 78.46.81.45:48253 79.101.56.14:27023 ESTABLISHED 519 2817508 11592/hlds_i686
udp 0 0 78.46.81.45:27005 0.0.0.0:* 529 572011 14722/hlds_i686
udp 4536 0 78.46.81.45:58621 79.101.56.14:27025 ESTABLISHED 519 64100 11592/hlds_i686
udp 4152 0 78.46.81.45:57726 78.46.81.45:21337 ESTABLISHED 519 2476083 11592/hlds_i686
udp 4152 0 78.46.81.45:44926 78.46.81.45:27102 ESTABLISHED 512 64199 11961/hlds_i686
udp 376 0 78.46.81.45:27006 0.0.0.0:* 526 52704 11129/hlds_i686
udp 0 0 78.46.81.45:39167 217.26.212.40:27050 ESTABLISHED 519 66530 11592/hlds_i686
udp 3648 0 78.46.81.45:55679 79.101.56.13:27091 ESTABLISHED 519 65870 11592/hlds_i686
udp 0 0 :::55195 :::* 70 9121 3019/avahi-daemon:
udp 0 0 :::5353 :::* 70 9119 3019/avahi-daemon:
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 9073 3005/xfs /tmp/.font-unix/fs7100
unix 2 [ ACC ] STREAM LISTENING 8549 2863/mysqld /var/lib/mysql/mysql.sock
unix 2 [ ACC ] STREAM LISTENING 6512 2732/hald @/var/run/hald/dbus-dmu7lrvn12
unix 2 [ ACC ] STREAM LISTENING 8783 2938/master public/cleanup
unix 2 [ ACC ] STREAM LISTENING 8790 2938/master private/tlsmgr
unix 2 [ ACC ] STREAM LISTENING 8794 2938/master private/rewrite
unix 2 [ ACC ] STREAM LISTENING 8798 2938/master private/bounce
unix 2 [ ACC ] STREAM LISTENING 8802 2938/master private/defer
unix 2 [ ACC ] STREAM LISTENING 8806 2938/master private/trace
unix 2 [ ACC ] STREAM LISTENING 6513 2732/hald @/var/run/hald/dbus-eXXtKVW5sV
unix 2 [ ] DGRAM 1992 878/udevd @/org/kernel/udev/udevd
unix 2 [ ACC ] STREAM LISTENING 6383 2674/dbus-daemon /var/run/dbus/system_bus_socket
unix 2 [ ACC ] STREAM LISTENING 6477 2717/pcscd /var/run/pcscd.comm
unix 2 [ ACC ] STREAM LISTENING 8810 2938/master private/verify
unix 2 [ ACC ] STREAM LISTENING 8814 2938/master public/flush
unix 2 [ ] DGRAM 6521 2732/hald @/org/freedesktop/hal/udev_event
unix 2 [ ACC ] STREAM LISTENING 8818 2938/master private/proxymap
unix 2 [ ACC ] STREAM LISTENING 8822 2938/master private/smtp
unix 2 [ ACC ] STREAM LISTENING 8826 2938/master private/relay
unix 2 [ ACC ] STREAM LISTENING 8830 2938/master public/showq
unix 2 [ ACC ] STREAM LISTENING 8834 2938/master private/error
unix 2 [ ACC ] STREAM LISTENING 8838 2938/master private/discard
unix 2 [ ACC ] STREAM LISTENING 8842 2938/master private/local
unix 2 [ ACC ] STREAM LISTENING 8846 2938/master private/virtual
unix 2 [ ACC ] STREAM LISTENING 8850 2938/master private/lmtp
unix 2 [ ACC ] STREAM LISTENING 8854 2938/master private/anvil
unix 2 [ ACC ] STREAM LISTENING 8858 2938/master private/scache
unix 2 [ ACC ] STREAM LISTENING 8862 2938/master private/maildrop
unix 2 [ ACC ] STREAM LISTENING 8866 2938/master private/old-cyrus
unix 2 [ ACC ] STREAM LISTENING 8870 2938/master private/cyrus
unix 2 [ ACC ] STREAM LISTENING 8874 2938/master private/uucp
unix 2 [ ACC ] STREAM LISTENING 8878 2938/master private/ifmail
unix 12 [ ] DGRAM 6321 2647/syslogd /dev/log
unix 2 [ ACC ] STREAM LISTENING 8882 2938/master private/bsmtp
unix 2 [ ACC ] STREAM LISTENING 9114 3019/avahi-daemon: /var/run/avahi-daemon/socket
unix 2 [ ACC ] STREAM LISTENING 8940 2953/gpm /dev/gpmctl
unix 2 [ ] DGRAM 3831419 16261/3
unix 2 [ ] DGRAM 3475054 16168/pickup
unix 3 [ ] STREAM CONNECTED 3111132 16000/hlds_i686
unix 3 [ ] STREAM CONNECTED 3111131 16000/hlds_i686
unix 2 [ ] STREAM CONNECTED 3071143 15833/sc_serv
unix 2 [ ] STREAM CONNECTED 2976098 15541/sftp-server
unix 3 [ ] STREAM CONNECTED 2976097 15539/sshd: root@no
unix 3 [ ] STREAM CONNECTED 2976096 15541/sftp-server
unix 3 [ ] STREAM CONNECTED 572074 14722/hlds_i686
unix 3 [ ] STREAM CONNECTED 572073 14722/hlds_i686
unix 3 [ ] STREAM CONNECTED 57930 12902/hlds_i686
unix 3 [ ] STREAM CONNECTED 57929 12902/hlds_i686
unix 3 [ ] STREAM CONNECTED 57631 12807/hlds_i686
unix 3 [ ] STREAM CONNECTED 57630 12807/hlds_i686
unix 3 [ ] STREAM CONNECTED 57383 12715/hlds_i686
unix 3 [ ] STREAM CONNECTED 57382 12715/hlds_i686
unix 3 [ ] STREAM CONNECTED 57136 12623/hlds_i686
unix 3 [ ] STREAM CONNECTED 57135 12623/hlds_i686
unix 3 [ ] STREAM CONNECTED 56846 12528/hlds_i686
unix 3 [ ] STREAM CONNECTED 56845 12528/hlds_i686
unix 3 [ ] STREAM CONNECTED 56573 12435/hlds_i686
unix 3 [ ] STREAM CONNECTED 56572 12435/hlds_i686
unix 3 [ ] STREAM CONNECTED 56080 12245/hlds_i686
unix 3 [ ] STREAM CONNECTED 56079 12245/hlds_i686
unix 3 [ ] STREAM CONNECTED 55789 12152/hlds_i686
unix 3 [ ] STREAM CONNECTED 55788 12152/hlds_i686
unix 3 [ ] STREAM CONNECTED 55533 12059/hlds_i686
unix 3 [ ] STREAM CONNECTED 55532 12059/hlds_i686
unix 3 [ ] STREAM CONNECTED 55095 11961/hlds_i686
unix 3 [ ] STREAM CONNECTED 55094 11961/hlds_i686
unix 3 [ ] STREAM CONNECTED 54795 11869/hlds_i686
unix 3 [ ] STREAM CONNECTED 54794 11869/hlds_i686
unix 3 [ ] STREAM CONNECTED 54548 11776/hlds_i686
unix 3 [ ] STREAM CONNECTED 54547 11776/hlds_i686
unix 3 [ ] STREAM CONNECTED 54294 11684/hlds_i686
unix 3 [ ] STREAM CONNECTED 54293 11684/hlds_i686
unix 3 [ ] STREAM CONNECTED 54000 11592/hlds_i686
unix 3 [ ] STREAM CONNECTED 53999 11592/hlds_i686
unix 3 [ ] STREAM CONNECTED 53751 11499/hlds_i686
unix 3 [ ] STREAM CONNECTED 53750 11499/hlds_i686
unix 3 [ ] STREAM CONNECTED 53502 11407/hlds_i686
unix 3 [ ] STREAM CONNECTED 53501 11407/hlds_i686
unix 3 [ ] STREAM CONNECTED 52721 11129/hlds_i686
unix 3 [ ] STREAM CONNECTED 52720 11129/hlds_i686
unix 2 [ ] DGRAM 9251 3053/proftpd: (acce
unix 3 [ ] STREAM CONNECTED 9117 2674/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 9116 3019/avahi-daemon:
unix 3 [ ] STREAM CONNECTED 9111 3020/avahi-daemon:
unix 3 [ ] STREAM CONNECTED 9110 3019/avahi-daemon:
unix 2 [ ] DGRAM 9108 3019/avahi-daemon:
unix 2 [ ] DGRAM 9020 2980/crond
unix 2 [ ] DGRAM 8934 2953/gpm
unix 2 [ ] DGRAM 8911 2942/qmgr
unix 3 [ ] STREAM CONNECTED 8885 2938/master
unix 3 [ ] STREAM CONNECTED 8884 2938/master
unix 3 [ ] STREAM CONNECTED 8881 2938/master
unix 3 [ ] STREAM CONNECTED 8880 2938/master
unix 3 [ ] STREAM CONNECTED 8877 2938/master
unix 3 [ ] STREAM CONNECTED 8876 2938/master
unix 3 [ ] STREAM CONNECTED 8873 2938/master
unix 3 [ ] STREAM CONNECTED 8872 2938/master
unix 3 [ ] STREAM CONNECTED 8869 2938/master
unix 3 [ ] STREAM CONNECTED 8868 2938/master
unix 3 [ ] STREAM CONNECTED 8865 2938/master
unix 3 [ ] STREAM CONNECTED 8864 2938/master
unix 3 [ ] STREAM CONNECTED 8861 2938/master
unix 3 [ ] STREAM CONNECTED 8860 2938/master
unix 3 [ ] STREAM CONNECTED 8857 2938/master
unix 3 [ ] STREAM CONNECTED 8856 2938/master
unix 3 [ ] STREAM CONNECTED 8853 2938/master
unix 3 [ ] STREAM CONNECTED 8852 2938/master
unix 3 [ ] STREAM CONNECTED 8849 2938/master
unix 3 [ ] STREAM CONNECTED 8848 2938/master
unix 3 [ ] STREAM CONNECTED 8845 2938/master
unix 3 [ ] STREAM CONNECTED 8844 2938/master
unix 3 [ ] STREAM CONNECTED 8841 2938/master
unix 3 [ ] STREAM CONNECTED 8840 2938/master
unix 3 [ ] STREAM CONNECTED 8837 2938/master
unix 3 [ ] STREAM CONNECTED 8836 2938/master
unix 3 [ ] STREAM CONNECTED 8833 2938/master
unix 3 [ ] STREAM CONNECTED 8832 2938/master
unix 3 [ ] STREAM CONNECTED 8829 2938/master
unix 3 [ ] STREAM CONNECTED 8828 2938/master
unix 3 [ ] STREAM CONNECTED 8825 2938/master
unix 3 [ ] STREAM CONNECTED 8824 2938/master
unix 3 [ ] STREAM CONNECTED 8821 2938/master
unix 3 [ ] STREAM CONNECTED 8820 2938/master
unix 3 [ ] STREAM CONNECTED 8817 2938/master
unix 3 [ ] STREAM CONNECTED 8816 2938/master
unix 3 [ ] STREAM CONNECTED 8813 2938/master
unix 3 [ ] STREAM CONNECTED 8812 2938/master
unix 3 [ ] STREAM CONNECTED 8809 2938/master
unix 3 [ ] STREAM CONNECTED 8808 2938/master
unix 3 [ ] STREAM CONNECTED 8805 2938/master
unix 3 [ ] STREAM CONNECTED 8804 2938/master
unix 3 [ ] STREAM CONNECTED 8801 2938/master
unix 3 [ ] STREAM CONNECTED 8800 2938/master
unix 3 [ ] STREAM CONNECTED 8797 2938/master
unix 3 [ ] STREAM CONNECTED 8796 2938/master
unix 3 [ ] STREAM CONNECTED 8793 2938/master
unix 3 [ ] STREAM CONNECTED 8792 2938/master
unix 3 [ ] STREAM CONNECTED 8789 2938/master
unix 3 [ ] STREAM CONNECTED 8788 2938/master
unix 3 [ ] STREAM CONNECTED 8786 2938/master
unix 3 [ ] STREAM CONNECTED 8785 2938/master
unix 3 [ ] STREAM CONNECTED 8782 2938/master
unix 3 [ ] STREAM CONNECTED 8781 2938/master
unix 3 [ ] STREAM CONNECTED 8779 2938/master
unix 3 [ ] STREAM CONNECTED 8778 2938/master
unix 2 [ ] DGRAM 8767 2938/master
unix 3 [ ] STREAM CONNECTED 8390 2674/dbus-daemon /var/run/dbus/system_bus_socket
unix 3 [ ] STREAM CONNECTED 8389 2732/hald
unix 3 [ ] STREAM CONNECTED 8184 2732/hald @/var/run/hald/dbus-dmu7lrvn12
unix 3 [ ] STREAM CONNECTED 8183 2742/event0
unix 3 [ ] STREAM CONNECTED 8176 2732/hald @/var/run/hald/dbus-dmu7lrvn12
unix 3 [ ] STREAM CONNECTED 8175 2741/event
unix 3 [ ] STREAM CONNECTED 6516 2732/hald @/var/run/hald/dbus-eXXtKVW5sV
unix 3 [ ] STREAM CONNECTED 6515 2733/hald-runner
unix 2 [ ] DGRAM 6476 2717/pcscd
unix 3 [ ] STREAM CONNECTED 6387 2674/dbus-daemon
unix 3 [ ] STREAM CONNECTED 6386 2674/dbus-daemon
unix 2 [ ] DGRAM 6329 2650/klogd