My email server has been blocking a lot of port scans in the 50000 range
lately. Does anyone know what might be causing this?
Jan 21 12:47:05 www kernel: Packet log: input REJECT eth0 PROTO=6
66.187.233.211:113 208.62.207.124:55589 L=40 S=0x00 I=6193 F=0x0000
T=240 (#34)
Jan 21 12:47:08 www kernel: Packet log: input REJECT eth0 PROTO=6
66.187.233.211:113 208.62.207.124:55589 L=40 S=0x00 I=10458 F=0x0000
T=240 (#34)
Jan 21 12:47:12 www kernel: Packet log: input REJECT eth0 PROTO=6
66.240.153.4:113 208.62.207.124:55590 L=40 S=0x00 I=0 F=0x4000 T=241
(#34)
Jan 21 12:47:15 www kernel: Packet log: input REJECT eth0 PROTO=6
66.240.153.4:113 208.62.207.124:55590 L=40 S=0x00 I=0 F=0x4000 T=241
(#34)
Thanks
Darrin
------------------------------------------------------------------------
To unsubscribe email security-discuss-request@linuxsecurity.com
with "unsubscribe" in the subject of the message.
