OVH Community, your new community space.

Mi servidor realiza ataques automatizados.


oceano
07/07/2014, 08:02
Hola, buenos días Tize,

Pásate por aquí cuando tengas un momento y lees estos hilos

http://foros.ovh.es/showthread.php?1...-Linux-Malware
http://foros.ovh.es/showthread.php?1...6798#post76798


Deseo puedan ayudarte !

Un saludo

Tize
06/07/2014, 21:23
Hola a todos, creo que ya encontré el problema.
He encontrado esto y me sirvió de ayuda, sirve para indicar los últimos movimientos realizados en los dominios.

# find /var/www/ -type f -mtime -10

Encontré un dominio modificado con una carpeta lang de idioma con cosas cómo...

bruteforce.so, .sd0, oldcash.php

http://geekpics.net/images/2014/07/06/qX3D.png

Ahora acabo de borrar esa carpeta y cambiado permisos a joomla que tenía 777 por los correctos.
Y he realizado un netstat -tapn / netstat -nt
Y ahora aparecen menos direcciones ip salientes que son muchas y es raro la verdad.
Pueden mirarlo por favor y recomendarme ?
Muchas gracias.

Tize
06/07/2014, 19:36
Hola a todos, al parecer mi servidor está realizando ataques a otros equipos continuamente y no se como solucionar el problema.
Le instalé fail2ban pero es para accesos a mi equipo y leyendo por la red dicen que para bloquear esos salientes es con iptables pero al reiniciar se pierden los cambios.
Instalé por otro lado rkhunter y también chktootkit para encontrar posibles errores y tan sólo con rkhunter me aparecen varios warnings que no se como solucionar.
Estoy un tanto perdido y preocupado con el problema que me afecta con el servidor la verdad.
Ruego algo de ayuda para poder reparar el problema.
Gracias.

Adjunto un log de netstat siendo la 133.333.33.333 modificada por seguridad.

Código:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 127.0.0.1:3310              0.0.0.0:*                   LISTEN      1390/clamd
tcp        0      0 127.0.0.1:783               0.0.0.0:*                   LISTEN      11433/spamd.pid
tcp        0      0 0.0.0.0:80                  0.0.0.0:*                   LISTEN      3263/httpd
tcp        0      0 0.0.0.0:8880                0.0.0.0:*                   LISTEN      1509/sw-cp-server
tcp        0      0 133.333.33.333:53           0.0.0.0:*                   LISTEN      1963/named
tcp        0      0 127.0.0.1:53                0.0.0.0:*                   LISTEN      1963/named
tcp        0      0 127.0.0.1:3000              0.0.0.0:*                   LISTEN      2130/drwebd.real
tcp        0      0 127.0.0.1:953               0.0.0.0:*                   LISTEN      1963/named
tcp        0      0 0.0.0.0:443                 0.0.0.0:*                   LISTEN      3263/httpd
tcp        0      0 0.0.0.0:8443                0.0.0.0:*                   LISTEN      1509/sw-cp-server
tcp        0      0 0.0.0.0:69                  0.0.0.0:*                   LISTEN      1373/sshd
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      1859/mysqld
tcp        0      0 133.333.33.333:46757        96.44.156.28:80             ESTABLISHED 17233/host
tcp        0    148 133.333.33.333:43503        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:51694        85.25.139.55:80             ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:55299        23.28.252.172:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:57997        94.75.225.1:80              LAST_ACK    -
tcp        0    152 133.333.33.333:34931        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:57895        198.143.165.100:80          TIME_WAIT   -
tcp        0    140 133.333.33.333:60458        94.231.103.26:80            FIN_WAIT1   -
tcp        1      1 133.333.33.333:49087        173.254.98.138:80           LAST_ACK    -
tcp        0      0 133.333.33.333:55397        23.229.193.224:80           ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:45827        27.96.52.124:80             TIME_WAIT   -
tcp        0      0 133.333.33.333:42726        27.96.52.124:80             TIME_WAIT   -
tcp        0    144 133.333.33.333:33978        66.147.244.221:80           ESTABLISHED 17233/host
tcp        0    151 133.333.33.333:45625        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:36478        94.73.150.50:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:43547        94.73.148.119:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:80           88.17.189.86:54923          TIME_WAIT   -
tcp        0      0 133.333.33.333:44250        94.73.146.100:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:80           198.143.158.34:50373        TIME_WAIT   -
tcp        0    150 133.333.33.333:36342        185.21.40.19:80             FIN_WAIT1   -
tcp        1      1 133.333.33.333:57723        208.113.198.223:80          LAST_ACK    -
tcp        0    139 133.333.33.333:41386        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:47119        94.73.150.100:80            FIN_WAIT2   -
tcp        0    148 133.333.33.333:35635        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:54181        23.28.252.172:80            TIME_WAIT   -
tcp        0      1 133.333.33.333:45983        65.39.66.8:80               SYN_SENT    17233/host
tcp        0      0 133.333.33.333:38713        82.223.234.103:80           ESTABLISHED 17233/host
tcp        0    151 133.333.33.333:33506        185.21.40.19:80             FIN_WAIT1   -
tcp        1      1 133.333.33.333:60947        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:40392        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:33495        133.242.9.57:80             SYN_SENT    17233/host
tcp        1      1 133.333.33.333:37234        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:40668        103.27.206.203:80           ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:42618        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:55153        190.215.46.155:80           LAST_ACK    -
tcp        0    142 133.333.33.333:33611        94.231.103.26:80            FIN_WAIT1   -
tcp        1    169 133.333.33.333:52718        207.210.91.148:80           CLOSING     -
tcp        0      0 133.333.33.333:44991        94.75.225.1:80              ESTABLISHED 17233/host
tcp        1    169 133.333.33.333:34825        207.210.91.148:80           CLOSING     -
tcp        0      0 133.333.33.333:33244        217.26.70.150:80            ESTABLISHED 17233/host
tcp        0    149 133.333.33.333:32816        185.21.40.19:80             FIN_WAIT1   -
tcp        1      1 133.333.33.333:60006        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:47518        112.127.94.175:80           ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:38582        66.34.245.131:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:46831        198.20.250.81:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:32984        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:41243        94.73.148.80:80             FIN_WAIT2   -
tcp        1      1 133.333.33.333:35873        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:48990        182.48.49.107:80            LAST_ACK    -
tcp        0      0 133.333.33.333:40013        94.73.148.119:80            FIN_WAIT2   -
tcp        0    143 133.333.33.333:36438        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:36869        66.34.5.74:80               ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:37888        94.73.148.119:80            FIN_WAIT2   -
tcp        1      1 133.333.33.333:40233        182.48.37.26:80             LAST_ACK    -
tcp        0      0 133.333.33.333:42394        81.177.33.245:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:44265        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:38091        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:57422        23.28.252.172:80            TIME_WAIT   -
tcp        0    141 133.333.33.333:42799        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:58429        112.126.204.88:80           ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:33176        103.252.100.58:80           LAST_ACK    -
tcp        1      1 133.333.33.333:41962        110.232.142.10:80           LAST_ACK    -
tcp        1      1 133.333.33.333:44327        94.75.225.1:80              LAST_ACK    -
tcp        0    149 133.333.33.333:58948        185.21.40.19:80             FIN_WAIT1   -
tcp        1    169 133.333.33.333:43085        207.210.91.148:80           CLOSING     -
tcp        1      1 133.333.33.333:33843        94.75.225.1:80              LAST_ACK    -
tcp        0    148 133.333.33.333:42807        185.21.40.19:80             FIN_WAIT1   -
tcp        1      1 133.333.33.333:57790        94.75.225.1:80              LAST_ACK    -
tcp        1    171 133.333.33.333:55586        207.210.91.148:80           CLOSING     -
tcp        0    147 133.333.33.333:53362        209.54.50.183:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:33953        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:36284        198.23.245.219:80           SYN_SENT    17233/host
tcp        0      0 133.333.33.333:58413        94.73.151.30:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:33765        198.143.165.100:80          TIME_WAIT   -
tcp        0    142 133.333.33.333:57135        62.75.252.77:80             ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:32803        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:34733        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:60730        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:43801        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64342        TIME_WAIT   -
tcp        0      0 133.333.33.333:80           198.143.158.34:59331        TIME_WAIT   -
tcp        0    146 133.333.33.333:51707        192.186.222.224:80          ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:42509        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:36434        182.48.26.98:80             ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:59345        69.162.119.139:80           LAST_ACK    -
tcp        1      1 133.333.33.333:37578        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64368        TIME_WAIT   -
tcp        0   1938 133.333.33.333:80           79.159.101.133:64399        FIN_WAIT1   21804/httpd
tcp        1      1 133.333.33.333:44902        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:34774        216.246.8.171:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:41969        37.139.24.155:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:42674        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:44747        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:58576        213.142.137.205:80          TIME_WAIT   -
tcp        1      1 133.333.33.333:34600        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:49145        173.254.98.138:80           SYN_SENT    17233/host
tcp        1      1 133.333.33.333:35893        192.186.235.12:80           LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64398        TIME_WAIT   -
tcp        0      0 133.333.33.333:41794        192.155.94.98:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:35174        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64337        TIME_WAIT   -
tcp        1      1 133.333.33.333:34388        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64366        TIME_WAIT   -
tcp        0      0 133.333.33.333:57189        202.78.195.34:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:43303        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:44546        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:60591        23.28.252.172:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:59638        66.228.117.28:80            ESTABLISHED 17233/host
tcp        0    150 133.333.33.333:39141        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:80           79.159.101.133:64303        TIME_WAIT   -
tcp        1      1 133.333.33.333:41412        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64373        TIME_WAIT   -
tcp        1      1 133.333.33.333:43149        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:57847        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:39007        23.229.153.67:80            LAST_ACK    -
tcp        0    149 133.333.33.333:42092        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:80           79.159.101.133:64376        TIME_WAIT   -
tcp        0      0 133.333.33.333:52472        213.142.137.205:80          TIME_WAIT   -
tcp        1      1 133.333.33.333:60241        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:80           198.143.158.34:54932        TIME_WAIT   -
tcp        1      1 133.333.33.333:45768        65.39.66.8:80               LAST_ACK    -
tcp        0      0 133.333.33.333:44785        94.73.148.80:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:41602        213.186.33.17:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:59541        23.28.252.172:80            TIME_WAIT   -
tcp        0      0 133.333.33.333:33199        128.227.24.50:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:40204        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:45473        94.73.148.80:80             FIN_WAIT2   -
tcp        0    148 133.333.33.333:38442        185.21.40.19:80             FIN_WAIT1   -
tcp        1      1 133.333.33.333:43189        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:42141        94.73.148.119:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:80           79.159.101.133:64338        TIME_WAIT   -
tcp        0      0 133.333.33.333:42648        94.73.148.80:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:58770        212.98.96.29:80             TIME_WAIT   -
tcp        1      1 133.333.33.333:57944        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:46370        94.73.146.100:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:37066        198.143.165.100:80          ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:56010        213.142.137.205:80          TIME_WAIT   -
tcp        0      0 133.333.33.333:42141        94.73.150.50:80             ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:36886        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:53012        192.185.30.42:80            SYN_SENT    17233/host
tcp        0      1 133.333.33.333:35075        128.199.168.63:80           SYN_SENT    17233/host
tcp        0      0 133.333.33.333:37487        50.19.220.154:80            TIME_WAIT   -
tcp        0    142 133.333.33.333:51746        203.146.170.168:80          ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:38648        190.215.46.155:80           LAST_ACK    -
tcp        1      1 133.333.33.333:53556        192.151.138.48:80           LAST_ACK    -
tcp        0    139 133.333.33.333:42099        94.231.103.26:80            FIN_WAIT1   -
tcp        0    157 133.333.33.333:38900        192.185.5.96:80             ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:43431        94.75.225.1:80              LAST_ACK    -
tcp        1    172 133.333.33.333:54158        207.210.91.148:80           CLOSING     -
tcp        1      1 133.333.33.333:49061        210.188.199.229:80          LAST_ACK    -
tcp        1      1 133.333.33.333:36602        94.75.225.1:80              LAST_ACK    -
tcp        0    142 133.333.33.333:37141        94.231.103.26:80            FIN_WAIT1   -
tcp        0    152 133.333.33.333:34695        116.90.166.12:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:60454        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:60175        94.75.225.1:80              LAST_ACK    -
tcp        1    166 133.333.33.333:51995        207.210.91.148:80           CLOSING     -
tcp        0      0 133.333.33.333:44887        88.80.209.43:80             ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:60204        212.98.96.29:80             TIME_WAIT   -
tcp        0      0 133.333.33.333:80           198.143.158.34:34059        TIME_WAIT   -
tcp        1      1 133.333.33.333:43663        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:59019        114.179.231.56:80           LAST_ACK    -
tcp        1    168 133.333.33.333:39458        207.210.91.148:80           CLOSING     -
tcp        1      1 133.333.33.333:40661        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:44941        94.73.146.100:80            FIN_WAIT2   -
tcp        0    141 133.333.33.333:43501        94.231.103.26:80            FIN_WAIT1   -
tcp        1      1 133.333.33.333:42837        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:41938        94.73.148.80:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:49248        94.73.150.100:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:43347        198.252.101.2:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:43723        94.75.225.1:80              LAST_ACK    -
tcp        1    170 133.333.33.333:50570        207.210.91.148:80           CLOSING     -
tcp        0    149 133.333.33.333:37747        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:40422        50.19.220.154:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:57582        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:34968        149.115.26.219:80           ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:43062        216.245.205.218:80          ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:41473        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:55506        61.19.250.16:80             ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:51834        210.224.177.240:80          ESTABLISHED 17233/host
tcp        0    144 133.333.33.333:38033        207.126.52.141:80           ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:34239        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:56600        183.81.166.22:80            LAST_ACK    -
tcp        0      0 133.333.33.333:80           79.159.101.133:64344        TIME_WAIT   -
tcp        0      0 133.333.33.333:37200        94.73.150.50:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:80           79.159.101.133:64339        TIME_WAIT   -
tcp        0      1 133.333.33.333:51409        198.58.92.228:80            SYN_SENT    17233/host
tcp        1      1 133.333.33.333:40333        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:47415        94.73.150.80:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:38608        94.73.150.50:80             FIN_WAIT2   -
tcp        1      1 133.333.33.333:57408        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:56697        183.81.166.22:80            SYN_SENT    17233/host
tcp        1      1 133.333.33.333:37177        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:35300        50.19.220.154:80            TIME_WAIT   -
tcp        1      1 133.333.33.333:41212        94.75.225.1:80              LAST_ACK    -
tcp        0    140 133.333.33.333:44116        31.169.73.133:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:37899        94.73.150.50:80             FIN_WAIT2   -
tcp        0      0 133.333.33.333:47439        27.96.52.124:80             TIME_WAIT   -
tcp        1      1 133.333.33.333:34311        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:52082        168.75.242.163:80           LAST_ACK    -
tcp        0      0 133.333.33.333:41433        94.73.148.119:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:41093        192.155.94.98:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:50314        103.247.10.39:80            ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:80           79.159.101.133:64322        TIME_WAIT   -
tcp        0    142 133.333.33.333:59742        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:41857        141.101.116.120:80          ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:51736        210.224.177.240:80          LAST_ACK    -
tcp        0      1 133.333.33.333:52131        168.75.242.163:80           SYN_SENT    17233/host
tcp        1      1 133.333.33.333:39056        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:37197        64.111.121.116:80           ESTABLISHED 17233/host
tcp        0      0 133.333.33.333:53563        69.73.150.163:80            ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:36239        198.23.245.219:80           LAST_ACK    -
tcp        1      1 133.333.33.333:60846        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:40521        94.73.148.80:80             FIN_WAIT2   -
tcp        0    142 133.333.33.333:38554        94.231.103.26:80            FIN_WAIT1   -
tcp        1      1 133.333.33.333:58055        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:58286        94.75.225.1:80              LAST_ACK    -
tcp        0      1 133.333.33.333:49221        210.188.199.229:80          SYN_SENT    17233/host
tcp        0      0 133.333.33.333:45087        27.96.52.124:80             TIME_WAIT   -
tcp        0    150 133.333.33.333:44933        185.21.40.19:80             FIN_WAIT1   -
tcp        0      0 133.333.33.333:80           198.143.158.34:43009        TIME_WAIT   -
tcp        1    169 133.333.33.333:49871        207.210.91.148:80           CLOSING     -
tcp        0      0 133.333.33.333:80           79.159.101.133:64365        TIME_WAIT   -
tcp        0      0 133.333.33.333:42823        94.73.146.100:80            FIN_WAIT2   -
tcp        0      0 133.333.33.333:44340        27.96.52.124:80             TIME_WAIT   -
tcp        0      1 133.333.33.333:34292        103.252.100.58:80           SYN_SENT    17233/host
tcp        0    153 133.333.33.333:51080        27.96.52.124:80             ESTABLISHED 17233/host
tcp        1      1 133.333.33.333:37847        94.75.225.1:80              LAST_ACK    -
tcp        0    147 133.333.33.333:49826        94.73.146.100:80            ESTABLISHED 17233/host
tcp        0    143 133.333.33.333:58286        94.231.103.26:80            FIN_WAIT1   -
tcp        1      1 133.333.33.333:33034        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:33860        50.19.220.154:80            TIME_WAIT   -
tcp        0      0 133.333.33.333:57710        94.73.151.30:80             FIN_WAIT2   -
tcp        1      1 133.333.33.333:34670        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:38890        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:36122        184.168.47.225:80           LAST_ACK    -
tcp        1    171 133.333.33.333:53443        207.210.91.148:80           CLOSING     -
tcp        0      0 133.333.33.333:38206        50.19.220.154:80            TIME_WAIT   -
tcp        0    143 133.333.33.333:44199        94.231.103.26:80            FIN_WAIT1   -
tcp        1      1 133.333.33.333:42789        94.75.225.1:80              LAST_ACK    -
tcp        1      1 133.333.33.333:58125        94.75.225.1:80              LAST_ACK    -
tcp        0    170 133.333.33.333:36239        207.210.91.148:80           ESTABLISHED 17233/host
tcp        0    139 133.333.33.333:32914        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:80           79.159.101.133:64332        TIME_WAIT   -
tcp        0      0 133.333.33.333:47397        117.18.68.219:80            ESTABLISHED 17233/host
tcp        0    139 133.333.33.333:45629        94.231.103.26:80            FIN_WAIT1   -
tcp        0      0 133.333.33.333:56996        94.73.151.30:80             FIN_WAIT2   -
tcp        1      1 133.333.33.333:34078        94.75.225.1:80              LAST_ACK    -
tcp        0      0 133.333.33.333:60902        212.98.96.29:80             TIME_WAIT   -
tcp        0      0 133.333.33.333:52787        94.73.150.100:80            FIN_WAIT2   -
tcp        0    143 133.333.33.333:39244        94.231.103.26:80            FIN_WAIT1   -