Debian iptables, netstate. DDOS?

Question

My server has been timing out and crashing lately.

I ran this command:

netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

Check the picture for result. Does the two IPs in the end ddos me? And how do I block them with IPtables?

Thanks.

Answer 1

The following is a good tutorial for preventing DOS attack using IPTABLES.

http://bipinkdas.blogspot.com/2008/09/prevent-dos-attack-in-linux.html

Regards