ไม่ทราบว่าปัญหา spoofing ips เกิดจากอะไรครับ แล้วจะแก้ไขยังไงดีครับ
แอดมินมือใหม่ครับ ทำเว็บสตรีมมิ่งวีดีโอครับ
Dedicated Server
Os Ubuntu server 14.04 LTS
CP Plesk 12
Apache 2.4
Php 5.5
Nginx
[FONT=Helvetica Neue]your server was blocked because it was spoofing ips:[/FONT]
Aggregated flows 7
Top 50 flows ordered by flows:
Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Flags Tos Packets Bytes pps bps Bpp Flows
2015-04-25 03:19:09.208 24.487 TCP 209.126.116.96:80 -> 103.22.201.150:15982 … 0 98304 149.6 M 4014 48.9 M 1522 3
2015-04-25 03:17:45.560 38.833 TCP 209.126.116.96:80 -> 103.22.201.243:35462 … 0 98304 149.6 M 2531 30.8 M 1522 3
2015-04-25 03:19:38.860 1.034 TCP 209.126.116.96:80 -> 103.22.201.243:61435 … 0 65536 99.7 M 63381 771.7 M 1522 2
2015-04-25 03:18:13.211 0.000 TCP 209.126.116.96:80 -> 103.22.201.150:23078 … 0 32768 49.9 M 0 0 1522 1
2015-04-25 03:15:32.770 0.000 TCP 209.126.116.97:80 -> 171.5.124.125:64992 … 0 32768 46.6 M 0 0 1422 1
2015-04-25 03:19:47.043 0.000 TCP 209.126.116.96:80 -> 103.22.201.144:13033 … 0 32768 49.9 M 0 0 1522 1
2015-04-25 03:17:52.783 0.000 TCP 209.126.116.96:80 -> 103.22.201.243:46620 … 0 32768 49.9 M 0 0 1522 1
Summary: total flows: 12, total bytes: 595.2 M, total packets: 393216, avg bps: 18.7 M, avg pps: 1546, avg bpp: 1513
Time window: 2015-04-25 03:15:00 - 2015-04-25 03:19:59
Total flows processed: 128983, Blocks skipped: 0, Bytes read: 10324836
Sys: 0.036s flows/second: 3582662.1 Wall: 0.034s flows/second: 3773087.6
[COLOR=#000000][FONT=Helvetica Neue]Server seems to be keep spoofing and we have received several warnings today.Server is currently blocked 2nd time due to same issue which breaches our term and policy.We could unblock your server in recovery mode to stop this activity ;[/FONT][/COLOR][COLOR=#000000][FONT=-moz-fixed]Aggregated flows 11
Top 50 flows ordered by flows:
Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Flags Tos Packets Bytes pps bps Bpp Flows
2015-04-27 14:47:26.353 125.647 TCP 209.126.116.97:80 -> 125.26.0.187:29197 … 0 65536 95.8 M 521 6.1 M 1462 2
2015-04-27 14:46:22.433 0.000 TCP 209.126.116.97:80 -> 103.22.201.203:24422 … 0 32768 49.9 M 0 0 1522 1
2015-04-27 14:45:43.977 0.000 TCP 209.126.116.97:80 -> 183.171.176.183:39098 … 0 32768 47.9 M 0 0 1462 1
2015-04-27 14:45:33.231 0.000 TCP 209.126.116.97:80 -> 118.172.71.78:36808 … 0 32768 43.3 M 0 0 1322 1
2015-04-27 14:45:10.421 0.000 TCP 209.126.116.97:80 -> 171.5.251.242:11847 … 0 32768 46.6 M 0 0 1422 1
2015-04-27 14:49:17.817 0.000 TCP 209.126.116.97:80 -> 171.5.251.242:12050 … 0 32768 46.6 M 0 0 1422 1
2015-04-27 14:47:48.061 0.000 TCP 209.126.116.97:80 -> 27.55.67.46:36492 … 0 32768 49.9 M 0 0 1522 1
2015-04-27 14:49:15.242 0.000 TCP 209.126.116.97:80 -> 101.108.174.98:54100 … 0 32768 49.6 M 0 0 1514 1
2015-04-27 14:46:33.485 0.000 TCP 209.126.116.96:80 -> 125.24.23.203:23978 … 0 32768 49.3 M 0 0 1504 1
2015-04-27 14:49:43.737 0.000 TCP 209.126.116.97:80 -> 171.97.133.78:31717 … 0 32768 49.9 M 0 0 1522 1
2015-04-27 14:47:49.713 0.000 TCP 209.126.116.97:80 -> 49.49.9.181:58796 … 0 32768 46.6 M 0 0 1422 1
Summary: total flows: 12, total bytes: 575.3 M, total packets: 393216, avg bps: 16.8 M, avg pps: 1438, avg bpp: 1463
Time window: 2015-04-27 14:45:00 - 2015-04-27 14:49:59
Total flows processed: 182636, Blocks skipped: 0, Bytes read: 14617016
Sys: 0.048s flows/second: 3804678.9 Wall: 0.048s flows/second: 3780031.5
[/FONT][/COLOR]