IN from bad port 41d at c010eba0
ciao a tutti,
sul mio server (woody) ultimamente mi stanno arrivando questi messaggi.
...che significano?
Dibito che si tratti di un attacco... il firewall me lo avrebbe notificato, e su questa macchina ci accedo solo io (ssh) e mia moglie (ftp e http)
ciao,
MAX
This mail is sent by logcheck. If you do not want to receive it any more,
please modify the configuration files in /etc/logcheck or deinstall logcheck.
Possible Security Violations
=-=-=-=-=-=-=-=-=-=
Sep 10 09:02:02 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:02:13 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:02:17 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:08:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:23:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:38:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:53:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Sep 10 09:02:02 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:02:13 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:02:17 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:08:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:23:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:38:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Sep 10 09:53:01 debian-ppc kernel: IN from bad port 41d at c010eba0
Reply to: