[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Strange network probes on UDP port: 161



I guess that's SNMP traffic.

> Ever since I have brought my new system on line I have been getting the
> following reports from other server:
>
> Jan  4 20:47:49 maps portsentry[1117]: attackalert: Connect from host:
> 192.168.1.113/192.168.1.113 to UDP port: 161
> Jan  4 20:47:49 maps portsentry[1117]: attackalert: Host: 192.168.1.113
> is already blocked. Ignoring
>
> Since all these systems are behind a firewall device and my local
> network is all configured on the 10.1.1.x network this is a little
> strange. I'm pretty sure it is coming from the new hardware, but I'm not
> sure how to confirm it other than to turn off the new server and see if
> the messages stop.
>
> I do have an IPMI card in the new server that I have not figured out how
> to setup and configure because I have been focused on other issues first.
>
> port 161 is an snmp port but I can find no reference to anything like
> that in the motherboard user's guide for the SuperMicro X6DHT-G
> motherboard.
>
> Any thoughts on this?
>
> -Steve
>
>
> --
> To UNSUBSCRIBE, email to debian-amd64-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>




Reply to: