[Icecast] Help attack DDOS
Victor Moreno
vitjam at gmail.com
Wed Jun 6 15:04:07 UTC 2018
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
1 101.201.239.150
1 103.10.228.221
1 103.105.228.102
1 103.1.186.123
1 103.19.81.76
1 103.205.134.178
1 103.205.26.95
1 103.25.192.150
1 103.26.56.30
1 103.27.0.15
1 103.28.225.17
1 103.39.49.204
1 103.42.162.58
1 103.48.56.130
1 103.58.117.60
1 103.74.239.170
1 103.76.15.28
1 103.78.213.149
1 103.80.36.174
1 104.131.214.218
1 107.16.94.224
1 108.160.137.0
1 109.172.104.122
1 109.196.34.51
1 110.139.125.101
1 110.44.127.241
1 111.23.44.155
1 111.8.191.138
1 112.140.184.147
1 112.78.149.90
1 113.255.29.133
1 115.127.68.70
1 115.69.217.10
1 116.255.35.23
1 116.58.5.106
1 117.54.138.118
1 118.97.107.46
1 118.97.191.205
1 119.23.217.114
1 119.28.24.210
1 119.28.68.27
1 120.50.12.146
1 120.52.73.1
1 121.121.125.2
1 121.140.126.250
1 121.40.203.232
1 123.176.43.144
1 124.118.31.104
1 124.121.192.224
1 124.124.21.97
1 125.164.17.131
1 125.62.213.30
1 128.199.142.35
1 128.199.77.93
1 128.75.78.240
1 129.205.210.90
1 132.148.150.41
1 132.255.244.66
1 13.69.82.216
1 138.68.236.23
1 138.97.140.20
1 139.194.59.97
1 139.255.104.226
1 139.59.124.149
1 139.59.2.223
1 139.99.40.10
1 139.99.40.11
1 14.139.189.211
1 14.36.4.200
1 145.239.93.131
1 145.249.106.107
1 146.185.179.32
1 147.135.210.114
1 148.251.211.123
1 150.109.42.234
1 150.163.105.2
1 150.242.180.151
1 154.118.241.146
1 154.119.46.44
1 154.119.60.227
1 154.48.196.3
1 154.66.157.126
1 155.4.12.61
1 156.54.63.205
1 159.65.168.119
1 159.65.168.7
1 159.65.175.251
1 163.172.98.25
1 165.132.106.71
1 167.99.209.216
1 167.99.93.3
1 168.181.162.94
1 168.228.185.51
1 168.228.191.161
1 168.90.67.73
1 169.254.169.254
1 169.255.4.9
1 170.79.16.19
1 171.244.32.140
1 173.201.177.140
1 173.212.203.209
1 173.68.185.170
1 175.107.14.114
1 176.107.110.112
1 176.37.3.102
1 176.53.2.122
1 176.9.28.86
1 177.103.182.12
1 177.11.120.210
1 177.125.37.124
1 177.134.172.181
1 177.136.252.7
1 177.184.136.74
1 177.204.155.131
1 177.21.109.50
1 177.223.108.55
1 177.22.91.211
1 177.43.41.140
1 177.44.135.166
1 177.54.142.222
1 177.67.83.134
1 178.132.3.94
1 178.162.216.1
1 178.238.228.187
1 179.105.131.222
1 179.107.111.138
1 179.97.47.54
1 180.210.177.86
1 180.210.201.54
1 180.210.201.55
1 180.210.205.104
1 180.210.205.107
1 180.210.206.53
1 180.250.149.73
1 180.250.182.50
1 180.250.214.34
1 180.250.60.218
1 180.253.17.219
1 180.94.64.51
1 181.113.27.98
1 181.40.78.174
1 181.49.92.247
1 18.188.165.157
1 182.100.67.244
1 18.217.198.64
1 182.23.101.178
1 182.23.107.212
1 182.23.98.211
1 182.253.188.186
1 182.253.26.244
1 182.52.236.125
1 182.53.197.116
1 182.72.30.66
1 182.76.113.206
1 182.76.222.54
1 183.88.217.201
1 183.88.232.207
1 183.89.24.189
1 185.118.25.10
1 185.18.255.85
1 185.22.174.69
1 185.229.224.61
1 185.64.16.117
1 185.91.19.131
1 186.10.5.139
1 186.194.65.93
1 186.208.112.202
1 186.216.220.171
1 186.236.237.143
1 186.248.68.126
1 186.83.66.5
1 186.89.94.168
1 186.91.247.226
1 186.93.13.217
1 187.108.114.74
1 187.110.238.130
1 187.110.93.120
1 187.16.255.98
1 187.18.113.159
1 187.190.221.71
1 187.33.82.126
1 187.45.112.79
1 187.45.127.87
1 187.49.197.90
1 187.5.218.215
1 187.53.60.98
1 187.60.217.161
1 187.9.214.58
1 188.213.174.124
1 188.232.183.166
1 188.40.141.216
1 189.124.17.126
1 189.51.98.214
1 189.76.94.20
1 189.91.62.70
1 190.12.48.158
1 190.207.62.189
1 190.52.175.76
1 190.72.133.136
1 190.75.89.185
1 191.240.159.90
1 191.6.65.43
1 194.182.72.223
1 194.187.216.228
1 195.146.133.90
1 195.154.207.153
1 195.201.43.199
1 195.201.7.153
1 195.209.232.146
1 196.202.194.127
1 197.155.158.22
1 197.210.252.39
1 197.211.45.3
1 197.231.221.211
1 200.114.97.14
1 200.141.94.190
1 200.199.93.98
1 200.229.238.42
1 200.240.245.128
1 200.255.122.174
1 200.49.43.106
1 200.94.21.194
1 201.167.56.18
1 201.18.98.18
1 202.142.159.204
1 202.148.20.218
1 202.162.214.118
1 202.29.238.178
1 202.43.160.142
1 202.51.102.102
1 203.150.138.227
1 203.189.136.139
1 203.99.118.10
1 206.189.181.249
1 207.154.245.20
1 208.47.176.252
1 208.67.183.240
1 209.222.86.48
1 212.237.15.218
1 212.237.30.237
1 212.237.61.17
1 212.46.199.10
1 212.95.180.50
1 212.98.150.50
1 213.108.18.72
1 213.138.103.117
1 213.142.149.2
1 213.192.31.173
1 213.198.241.6
1 217.175.37.205
1 217.182.92.162
1 217.25.210.34
1 218.186.27.31
1 221.14.140.125
1 222.124.145.94
1 222.124.22.133
1 223.93.172.248
1 23.88.111.26
1 31.25.141.46
1 34.251.241.57
1 35.162.163.132
1 35.188.131.123
1 35.233.27.203
1 36.110.175.130
1 36.67.10.9
1 36.77.247.10
1 36.78.130.224
1 36.80.46.225
1 36.81.255.73
1 36.89.39.170
1 37.187.116.199
1 37.187.99.146
1 37.59.79.10
1 39.104.74.95
1 41.128.189.53
1 41.38.212.23
1 41.65.111.226
1 41.75.76.75
1 42.191.126.223
1 43.241.130.242
1 43.250.81.138
1 45.112.126.238
1 45.115.39.139
1 45.249.9.22
1 45.251.230.214
1 45.76.218.233
1 45.76.234.152
1 45.79.139.169
1 46.16.226.10
1 47.252.1.152
1 47.52.231.140
1 47.75.65.202
1 47.88.192.22
1 47.98.33.168
1 50.63.128.151
1 51.15.101.16
1 51.15.121.195
1 51.15.221.10
1 51.254.122.19
1 51.254.132.238
1 51.255.138.248
1 51.38.114.104
1 51.38.192.206
1 5.196.189.104
1 52.187.59.51
1 52.192.39.237
1 52.214.181.43
1 52.221.40.19
1 5.226.70.68
1 52.76.57.164
1 57.100.2.254
1 58.74.78.19
1 60.191.134.165
1 61.178.63.165
1 61.185.137.126
1 62.1.84.229
1 66.119.8.72
1 69.85.70.37
1 71.13.112.152
1 78.111.4.30
1 78.136.240.42
1 78.189.65.220
1 78.81.24.112
1 79.137.182.166
1 79.137.85.204
1 79.140.1.198
1 80.211.0.244
1 80.211.141.177
1 80.211.144.80
1 80.211.148.20
1 80.211.154.220
1 80.211.16.27
1 80.211.180.224
1 80.211.182.207
1 80.211.184.190
1 80.211.184.53
1 80.211.189.165
1 80.211.225.28
1 80.211.228.238
1 80.211.41.5
1 80.211.5.160
1 81.219.21.126
1 81.22.54.60
1 81.26.130.121
1 81.29.244.238
1 82.137.250.213
1 82.223.8.133
1 83.220.62.38
1 84.22.61.46
1 84.233.227.3
1 84.47.174.19
1 85.29.136.212
1 85.97.111.254
1 86.105.51.105
1 88.117.233.210
1 88.205.171.222
1 88.250.193.77
1 89.187.235.59
1 90.187.51.41
1 90.45.26.244
1 91.121.88.53
1 91.191.33.166
1 91.222.117.82
1 91.250.97.225
1 91.73.131.254
1 92.222.74.221
1 92.241.230.224
1 92.43.128.238
1 93.170.186.7
1 94.23.196.68
1 94.242.59.245
1 95.111.137.65
1 95.210.109.32
1 95.216.136.29
1 95.51.119.19
1 Address
1 servers)
2 1.0.134.163
2 103.243.81.234
2 110.136.166.198
2 112.140.184.139
2 112.74.207.50
2 114.215.192.184
2 118.97.168.202
2 120.26.110.59
2 122.166.222.186
2 134.119.223.242
2 136.243.145.143
2 145.239.77.20
2 146.52.85.22
2 153.149.171.138
2 159.65.9.66
2 167.114.250.199
2 167.99.5.127
2 171.15.22.199
2 176.31.125.111
2 182.23.31.130
2 184.82.10.112
2 185.122.202.85
2 185.187.182.25
2 185.21.77.83
2 185.238.72.12
2 185.93.3.123
2 186.103.239.190
2 186.211.96.27
2 186.91.251.215
2 187.86.6.97
2 191.248.228.70
2 191.252.1.236
2 195.201.40.120
2 198.199.127.16
2 201.183.235.193
2 201.20.98.42
2 202.21.32.148
2 212.237.36.234
2 212.72.150.51
2 213.24.60.52
2 213.6.40.142
2 217.234.140.40
2 222.124.179.123
2 35.190.133.37
2 36.67.231.3
2 36.72.230.227
2 45.55.157.204
2 46.162.197.248
2 50.203.87.49
2 51.255.235.168
2 51.38.233.169
2 52.172.35.99
2 52.224.48.30
2 54.37.156.128
2 54.38.156.250
2 61.247.58.103
2 62.80.223.139
2 66.82.144.29
2 74.208.169.201
2 74.208.217.160
2 79.143.85.36
2 80.211.148.100
2 80.211.37.110
2 81.30.181.181
2 81.82.209.76
2 85.90.208.4
2 92.195.32.88
2 92.38.47.226
2 93.85.95.152
2 94.177.216.109
2 94.177.218.60
2 94.23.81.70
3 103.82.242.239
3 118.34.212.110
3 119.28.152.208
3 128.199.188.44
3 137.74.158.246
3 144.217.105.153
3 152.92.200.66
3 167.99.70.190
3 187.32.209.40
3 189.112.72.215
3 190.82.70.109
3 193.2.40.8
3 202.171.138.193
3 212.112.122.161
3 67.149.165.136
3 80.211.6.201
3 88.19.124.26
4 117.244.15.243
4 189.85.84.186
4 200.63.129.132
5 191.32.57.18
5 50.233.136.254
5 81.162.56.154
6 101.50.1.2
6 175.98.239.87
6 178.140.57.118
6 202.183.32.6
6 47.95.33.79
6 47.95.36.86
6 62.140.252.21
7 109.74.75.61
7 121.254.214.219
7 178.162.102.173
7 195.80.140.212
7 47.89.18.87
7 47.95.36.13
7 49.51.86.151
7 60.250.79.187
7 61.136.163.245
8 138.91.96.84
8 148.153.1.78
8 188.166.165.78
8 192.168.0.4
8 37.140.192.248
8 47.89.241.103
8 52.239.154.38
8 93.95.100.18
9 101.4.136.34
9 107.0.67.153
9 118.193.26.18
9 120.27.49.85
10 192.168.0.5
10 47.52.153.167
10 47.89.10.103
12 52.239.152.10
13 103.105.50.178
15 223.19.41.6
20 168.63.129.16
40 52.239.153.36
2018-06-06 9:53 GMT-05:00 Alejandro Flores <alex at mordormx.net>:
> What's the command output?
>
> On Wed, Jun 6, 2018, 9:50 AM Victor Moreno <vitjam at gmail.com> wrote:
>
>> i used this command
>> netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
>>
>>
>> I've also changed the port and it shows a flood of ips blocking the
>> icecast
>>
>>
>> 2018-06-06 4:36 GMT-05:00 Geoff Shang <geoff at quitelikely.com>:
>>
>>> On Tue, 5 Jun 2018, Victor Moreno wrote:
>>>
>>> I have a problem with the icecast. When I activate the service I am
>>>> having
>>>> an exesive consumption in the ip queries. It seems like a DDOS attack.
>>>> How
>>>> can I mitigate this attack?
>>>>
>>>
>>> Why do you think it's a DDOS? What do you see?
>>>
>>> If it's an option, try running it on another port.
>>>
>>> HTH,
>>> Geoff.
>>>
>>>
>>> _______________________________________________
>>> Icecast mailing list
>>> Icecast at xiph.org
>>> http://lists.xiph.org/mailman/listinfo/icecast
>>>
>>
>>
>>
>> --
>> Victor Moreno
>> Ingeniero Electrónico
>> 3177684646
>> _______________________________________________
>> Icecast mailing list
>> Icecast at xiph.org
>> http://lists.xiph.org/mailman/listinfo/icecast
>>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
>
--
Victor Moreno
Ingeniero Electrónico
3177684646
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180606/451d183e/attachment.htm>
More information about the Icecast
mailing list