질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

웹 서버가 접속이 잘 않되서 질문 입니다.

작성자 정보

  • 유만호 작성
  • 작성일

컨텐츠 정보

본문

어제 낮부터 저녁 까지 서버 접속이 잘 않되더시 저녁쯤 정상적으로 돌아 왔는데

또 새벽 되니까 서버 접속이 정상적으로 되지 않고 있습니다.

netstat 해보면 밑에 처럼 나오고 있는데 밑에 기록 같은 경우 디도스를 의미 부분이 있는지 답변좀 주세요

tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:114.30.12:mediaspace TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:114.200.53.63:38631  TIME_WAIT  
tcp      173      0 ::ffff:114.200.100.50:http  ::ffff:61.40.120.101:61201  ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  bas7-hamilton14-12797:61068 TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:211.4:ndl-tcp-ois-gw TIME_WAIT  
tcp        0  51300 ::ffff:114.200.100.50:http  ::ffff:125.208.77.178:msmq  ESTABLISHED
tcp      174      0 ::ffff:114.200.100.50:http  ::ffff:61.40.120.101:64275  ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:121.1:aimpp-port-req TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:122.47:timbuktu-srv1 TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:124.60.118.68:wimsic TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:222.239.48.52:36811  ESTABLISHED
tcp      178      0 ::ffff:114.200.100.50:http  ::ffff:219.241.104:geniuslm ESTABLISHED
tcp      174      0 ::ffff:114.200.100.50:http  ::ffff:122.47.249.:workflow ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:211.41.210.201:4113  TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:218.37.208:deskshare TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:121.161.230.17:48078 TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:218.233.3:mpsysrmsvr TIME_WAIT  
tcp      178      0 ::ffff:114.200.100.50:http  ::ffff:211.200.223.8:saiseh CLOSE_WAIT 
tcp      174      0 ::ffff:114.200.100.50:http  ::ffff:218.52.219.155:4187  ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:113.130.189.44:62013 TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:116.33.64.28:4436    TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:222.239:tacticalauth ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:116.33.64.28:4437    TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:219.255.39.89:4777   TIME_WAIT  
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:211.44.189.152:4129  ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:218.37.28.:intrastar ESTABLISHED
tcp      178      0 ::ffff:114.200.100.50:http  ::ffff:119.66.252.8:msft-gc ESTABLISHED
tcp      174      0 ::ffff:114.200.100.50:http  ::ffff:61.253.101.5:codasrv ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:121.254.52.18:4594   TIME_WAIT  
tcp        0  22706 ::ffff:114.200.100.50:http  adsl-69-224-182:dsom-server ESTABLISHED
getnameinfo failed
tcp        0      0 ::ffff:114.200.100.50:http  [UNKNOWN]:med-ltp           ESTABLISHED
tcp        0      0 ::ffff:114.200.100.50:http  ::ffff:211.245.205.17:ipcd3 TIME_WAIT  

관련자료

댓글 1

ppabs님의 댓글

  • ppabs
  • 작성일
netstat -anp | grep SYN
이렇게 하시면 신플로우딩 해당 정보를 볼 수 있습니다.

서버가 정상 -> 비정상 -> 정상 ...이런 패턴인 것 같은데... 해킹툴일 돌아가는지 확인 해보시는것이 좋겠네요.

공지사항


뉴스광장


  • 현재 회원수 :  60,076 명
  • 현재 강좌수 :  36,001 개
  • 현재 접속자 :  548 명