somebody attacked our server

[Jithin]

Thats hard for me to understand..
Anyway,is it OK now??

[Exploited]

tcp4       0      0  69.64.87.188.80        212.224.127.251.1200   SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.59184  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.57484  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.60866  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.62186  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.50850  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.51670  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.51632  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.55174  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.43338  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.45728  SYN_RCVD
tcp4       0      0  69.64.87.188.80        212.224.127.251.47924  SYN_RCVD
...

uff and again another happy user attacking the server Again he is blocked of course

[heamn]

what in the earth~ why is our server always got attack...

[Exploited]

it's normal there are always infected machines attacking other machines.


edit: Thanks for the fast response of First Colo GmbH (first-colo.de):

Hello,

we are sorry but the system of our Customer is under heavy DDoS Attack.
What you see is the reply of the server to faked packages which floods
the system.