Suddenly Many connections to my server?

2025-04-18

I need help.. normally there is only like 10 connections when i typed netstat but recently, it suddenly shows alot of connections and even the same ones everyday. I am not sure what are these connection doing but they are eating up some of my cpu processes which cause some problem with my VPS. The support desk informed me someone is running a Perl scripts to do internal DDOS but I can't see any trace of that script's name when I view 'top' or check up my 'CPU Usage' under cpanel WHM.

Could anyone help me? Many thanks in advance! (the connection output is below)

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 apc.sg:http ca.monitoringserv:46239 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti122110a081-8527:46345 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti122110a081-8527:46346 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57682 c213-200-175-249.c:6915 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:10932 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http acc2-235-6.dialup.:3337 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http acc2-235-6.dialup.:3339 FIN_WAIT2
tcp 0 0 eu.biblos.com.ua:http acc2-235-6.dialup.:3338 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http acc2-235-6.dialup.:3333 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http acc2-235-6.dialup.:3332 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30465 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15786 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30464 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:10152 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30466 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30461 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30460 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30463 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30462 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 84-217-22-44.tn.g:19897 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 194.23.183.1:30458 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:14403 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti311110a080-4607:61472 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-64-3:52638 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-234-94-120-no91.:ica TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-232-157-99-no2:60674 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:17693 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:11020 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15627 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:11063 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15627 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:11063 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15417 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57672 81-234-94-120-no9:15106 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:14888 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61024 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h248n2fls302o291.:17276 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60779 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 217.116.239.152:1338 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 217.116.239.152:1339 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-229-114-197-no3:1130 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 34.80-203-77.next:56662 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 213.151.148.83:1968 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60254 TIME_WAIT
tcp 0 0 localhost:57718 localhost:http TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57685 84-217-22-44.tn.gl:7010 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-253-111-69.bre:1462 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:16916 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-64-3:52638 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-234-94-120-no91.:ica TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-232-157-99-no2:60674 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:17693 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15627 TIME_WAIT
tcp 0 0 localhost:57720 localhost:783 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:15417 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57672 81-234-94-120-no9:15106 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http gprs7.orange.pl:14888 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61024 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h248n2fls302o291.:17276 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60779 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 217.116.239.152:1339 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-229-114-197-no3:1130 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti541210a080-0003.:4259 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57725 c-f813e353.09-59-:13565 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 213.151.148.83:1968 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h253n3c1o285.bred:11106 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61223 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http e212-54-8-87.elisa:4592 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57681 81-233-221-250-no:19785 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 17.80-202-198.nex:59280 TIME_WAIT
tcp 0 0 apc.sg:http msnbot.msn.com:30056 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57736 c-97bce455.93-0066:9769 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti541210a080-0003.:4259 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57725 c-f813e353.09-59-:13565 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 213.151.148.83:1968 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h253n3c1o285.bred:11106 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61223 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http e212-54-8-87.elisa:4592 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61223 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http e212-54-8-87.elisa:4592 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57681 81-233-221-250-no:19785 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 17.80-202-198.nex:59280 TIME_WAIT
tcp 0 0 apc.sg:http msnbot.msn.com:30056 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57694 h248n2fls302o291.:16323 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 47.208.216.81.or.s:3239 TIME_WAIT
tcp 0 0 apc.sg:http msnbot.msn.com:32080 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57701 e212-54-8-87.elis:18721 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http dsl220-199.adsl.n:27894 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c-f813e353.09-59-:62813 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60956 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57674 81-229-114-197-no:25838 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60898 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:60898 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57695 47.208.216.81.or.:57993 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61177 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c-97bce455.93-0066:4447 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http fj9016.inktomisea:36884 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57730 x1-6-00-0d-60-fb-:56544 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61119 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-64-6:45788 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-65-2:61064 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http x1-6-00-0d-60-fb-f:1085 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57696 ti300710a080-6280:15735 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http 194.44.229.6:39198 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-3:39754 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57745 h168n1c1o1003.bred:8427 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57696 ti300710a080-6280:15735 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http 194.44.229.6:39198 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-3:39754 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-7:58410 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-236-20-76-no39.:4928 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57743 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http 194.44.229.6:39198 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-3:39754 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-7:58410 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-236-20-76-no39.:4928 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57743 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57751 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57673 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57704 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57705 157.193.216.81.nk:16489 TIME_WAIT
tcp 0 0 83.149.71.149:pop3 g48072.upc-g.chell:3017 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-249-41-117.bre:3904 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti541210a080-5027.:3402 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-249-41-117.bre:3899 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-249-41-117.bre:3898 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c-3eaae155.214-5-6:2163 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 157.193.216.81.nk.:2428 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 157.193.216.81.nk.:2427 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h121n1fls32o984.te:2879 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti300710a080-6280:61258 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-249-139-182.br:3561 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57740 217-122-159.5001.:32459 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-249-139-182.br:3561 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57740 217-122-159.5001.:32459 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http h220n6c1o994.bred:25718 FIN_WAIT2
tcp 0 0 ns1.myvirtualhost:57750 c83-253-149-40.br:11831 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 43.80-202-210.nex:61064 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http c83-253-149-40.bre:1563 TIME_WAIT
tcp 0 0 83.149.71.149:pop3 h228217.upc-h.che:16438 TIME_WAIT
tcp 0 0 83.149.71.149:pop3 h228217.upc-h.che:16439 TIME_WAIT
tcp 0 0 83.149.71.149:pop3 h228217.upc-h.che:16436 TIME_WAIT
tcp 0 0 83.149.71.149:pop3 h228217.upc-h.che:16435 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http 81-235-227-234-no:61525 TIME_WAIT
tcp 0 0 ns1.myvirtualhost.:http ti211110a080-8010:55034 TIME_WAIT
tcp 0 1324 apc.sg:5509 cm254.omega170.max:2144 ESTABLISHED
tcp 0 0 ns1.myvirtualhost:57691 81-235-227-234-no:10727 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http sababa-110.dialup.:3429 TIME_WAIT
tcp 0 0 eu.biblos.com.ua:http crawl-66-249-71-1:59819 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57684 h71n2fls33o294.te:50000 TIME_WAIT
tcp 0 0 ns1.myvirtualhost:57728 c83-249-139-182.b:16881 TIME_WAIT
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 8 [ ] DGRAM 32796006 /dev/log
unix 3 [ ] STREAM CONNECTED 41562285
unix 3 [ ] STREAM CONNECTED 41562284
unix 2 [ ] DGRAM 40520666
unix 3 [ ] STREAM CONNECTED 38693503
unix 3 [ ] STREAM CONNECTED 38693502
unix 2 [ ] STREAM CONNECTED 36235196
unix 2 [ ] DGRAM 32853325
unix 3 [ ] STREAM CONNECTED 32801711 /var/lib/mysql/mysql.sock
unix 3 [ ] STREAM CONNECTED 32801710
unix 2 [ ] STREAM CONNECTED 32799053
unix 2 [ ] DGRAM 32797548
unix 2 [ ] DGRAM 32797499
unix 2 [ ] DGRAM 32797291
unix 2 [ ] DGRAM 32796052