Re: Strange network probes on UDP port: 161
I guess that's SNMP traffic.
> Ever since I have brought my new system on line I have been getting the
> following reports from other server:
> Jan 4 20:47:49 maps portsentry: attackalert: Connect from host:
> 192.168.1.113/192.168.1.113 to UDP port: 161
> Jan 4 20:47:49 maps portsentry: attackalert: Host: 192.168.1.113
> is already blocked. Ignoring
> Since all these systems are behind a firewall device and my local
> network is all configured on the 10.1.1.x network this is a little
> strange. I'm pretty sure it is coming from the new hardware, but I'm not
> sure how to confirm it other than to turn off the new server and see if
> the messages stop.
> I do have an IPMI card in the new server that I have not figured out how
> to setup and configure because I have been focused on other issues first.
> port 161 is an snmp port but I can find no reference to anything like
> that in the motherboard user's guide for the SuperMicro X6DHT-G
> Any thoughts on this?
> To UNSUBSCRIBE, email to debian-amd64-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact