Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 20th November 2009, 18:04
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,044
Thanks: 269
Thanked 154 Times in 133 Posts
Default Seeing a lot af weard stuff in /var/messages

Anyone here who can explain what is happening?
It's really filling up my /var/log/messages file!

Quote:
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=00:14:22:b0:37:dd:00:04:80:85:34:00:08:00 SRC=125.60.241.195 DST=195.184.65.69 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=18329 DF PROTO=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=00:14:22:b0:37:dd:00:04:80:85:34:00:08:00 SRC=80.127.30.189 DST=195.184.65.69 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=11308 DF PROTO=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:1e:c9:b7:9b:32:08:00 SRC=91.196.170.169 DST=224.0.0.1 LEN=412 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:1e:c9:b7:9b:32:08:00 SRC=91.196.170.169 DST=224.0.0.1 LEN=412 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=$
N
Reply With Quote
Sponsored Links
  #2  
Old 21st November 2009, 19:19
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

Do you know the SRC IPs?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 21st November 2009, 21:11
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,044
Thanks: 269
Thanked 154 Times in 133 Posts
Default

Quote:
Originally Posted by falko View Post
Do you know the SRC IPs?
Sorry you got me here..
SRC as in what?
Reply With Quote
  #4  
Old 21st November 2009, 21:53
Hans Hans is offline
Moderator
 
Join Date: Dec 2005
Location: Montfoort, The Netherlands
Posts: 2,263
Thanks: 216
Thanked 649 Times in 295 Posts
Default

Don't know either what these messages mean, but one of the(SRC=Source) IP-address (91.196.170.169) is a default page of the H-Sphere hosting controlpanel. As you can see here: http:///91.196.170.169

__________________
Hans

MrHostman | Managed Hosting

Last edited by Hans; 21st November 2009 at 21:56.
Reply With Quote
  #5  
Old 22nd November 2009, 17:52
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

Quote:
Originally Posted by edge View Post
Sorry you got me here..
SRC as in what?
These IPs:

Quote:
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=00:14:22:b0:37:dd:00:04:80:85:34:00:08:00 SRC=125.60.241.195 DST=195.184.65.69 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=18329 DF PROTO=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=00:14:22:b0:37:dd:00:04:80:85:34:00:08:00 SRC=80.127.30.189 DST=195.184.65.69 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=11308 DF PROTO=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:1e:c9:b7:9b:32:08:00 SRC=91.196.170.169 DST=224.0.0.1 LEN=412 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=$
Nov 20 16:56:12 host kernel: IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:1e:c9:b7:9b:32:08:00 SRC=91.196.170.169 DST=224.0.0.1 LEN=412 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=$
N
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #6  
Old 22nd November 2009, 19:45
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,044
Thanks: 269
Thanked 154 Times in 133 Posts
 
Default

They do not belong to the ISP that I'm hosting my servers.
I guess that it's maybe somekind of broadcast or so.

For now I have added all the IP's to my firewall. Lets wait and see what's going to happen next.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Receiving a lot of spam garfabian Installation/Configuration 11 9th December 2007 14:59
Need some help installing stuff... Having a hard time! edge Installation/Configuration 1 27th August 2006 17:33


All times are GMT +2. The time now is 03:21.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.