Здравствуйте Знатоки!
В Линуксе недавно. Если возможно, помогите разобраться. В логах обнаружил подозрительные записи, что это? Звездочками пометил реальные ип адреса.
Feb 12 20:15:42 ollin portsentry[18111]: attackalert: TCP SYN/Normal scan from host: host91-*-*-*.etth.*-*.net/91.*.*.* to TCP port: 445
Feb 12 20:15:42 ollin portsentry[18111]: attackalert: Host 91.*.*.* has been blocked via dropped route using command: «/sbin/iptables -I INPUT -s 91.*.*.* -j DROP»
Feb 12 20:24:21 ollin portsentry[18111]: attackalert: TCP SYN/Normal scan from host: 92.*.*.*/92.*.*.* to TCP port: 445
Feb 12 20:24:21 ollin portsentry[18111]: attackalert: Host 92.*.*.* has been blocked via dropped route using command: «/sbin/iptables -I INPUT -s 92.*.*.* -j DROP»
Feb 12 20:49:01 ollin portsentry[18111]: attackalert: TCP SYN/Normal scan from host: 92.*.*.*/92.*.*.* to TCP port: 445
Feb 12 20:49:01 ollin portsentry[18111]: attackalert: Host 92.*.*.* has been blocked via dropped route using command: «/sbin/iptables -I INPUT -s 92.*.*.* -j DROP»
Feb 12 20:56:18 ollin pulseaudio[13648]: ratelimit.c: 1041 events suppressed
Feb 12 20:57:12 ollin portsentry[18111]: attackalert: TCP SYN/Normal scan from host: 92.*.*.*/92.*.*.* to TCP port: 445
Feb 12 20:57:12 ollin portsentry[18111]: attackalert: Host 92.*.*.* has been blocked via dropped route using command: «/sbin/iptables -I INPUT -s 92.*.*.* -j DROP»
