server-status ???? and netstat 1055 {nothing}

[Highway]

Hi all,

I think someone attacks my server because apache was very slow.
So, i looked to: server-status and see:

81-0	16942	0/6/6	R	0.12	57	42	0.0	0.02	0.02	?	?	..reading..
82-0	16897	0/5/5	R	0.17	59	44	0.0	0.00	0.00	?	?	..reading..
83-0	16898	0/11/11	R	0.25	54	25	0.0	0.11	0.11	?	?	..reading..
84-0	16899	0/14/14	R	0.57	46	0	0.0	0.52	0.52	?	?	..reading..
85-0	16925	0/12/12	R	0.00	59	0	0.0	0.00	0.00	?	?	..reading..
86-0	16943	0/8/8	R	0.07	59	49	0.0	0.02	0.02	?	?	..reading..
87-0	16955	0/28/28	R	0.17	40	103	0.0	0.12	0.12	?	?	..reading..
88-0	16956	0/6/6	R	0.09	54	59	0.0	0.01	0.01	?	?	..reading..
89-0	16957	0/11/11	R	0.08	3	29	0.0	0.11	0.11	?	?	..reading..
90-0	16958	0/15/15	R	0.40	50	61	0.0	0.07	0.07	?	?	..reading..
91-0	16977	0/9/9	R	0.05	53	22	0.0	0.07	0.07	?	?	..reading..
92-0	16978	0/9/9	R	0.22	56	231	0.0	0.17	0.17	?	?	..reading..
93-0	16979	0/13/13	R	0.47	45	0	0.0	0.11	0.11	?	?	..reading..
94-0	16980	0/1/1	R	0.00	0	58	0.0	0.00	0.00	?	?	..reading..
95-0	16981	0/10/10	R	0.17	50	74	0.0	0.20	0.20	?	?	..reading..

(there are more, but i don't copy paste them all, this is 1% )

When I do : netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n


I see :


3 xxxx
3 xxxx
4 xxxx
4 xxxxx
4 xxxxx
6 xxxx
30 xxxx
1055

(replace XXXX with an legal IP adress)
The after the 1055 does'nt get a IP adress, so I can't block anything.
Is there a way to block connections withoud ip adresses or get this ip address?