The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

My server is sending packet ... how to track ?

Discussion in 'Security' started by calvinphanctt, Nov 9, 2012.

  1. calvinphanctt

    calvinphanctt Active Member

    Joined:
    Mar 27, 2007
    Messages:
    44
    Likes Received:
    0
    Trophy Points:
    6
    Hi everyone,

    This afternoon, when I left my SSH opened and connected to my server, I see these messages from my SSH, I know that my server is sending package to other IP address 212.X.X.X . Can you tell me how to stop that and how to track what is happening?

    Thank you very much ...

    Here are the messages: I change my server to 173.X.X.X. and other IP address to:

    Code:
    Message from syslogd@server2 at Nov 9 15:44:20 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=31646 DF PROTO=TCP SPT=21 DPT=64799 SEQ=1108918173 ACK=1122426526 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:44:40 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=31647 DF PROTO=TCP SPT=21 DPT=64799 SEQ=1108918173 ACK=1122426526 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:35 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56910 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH URGP=0 UID=0 GID=0
    
    Message from syslogd@server2 at Nov 9 15:46:35 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56911 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0 UID=0 GID=0
    
    Message from syslogd@server2 at Nov 9 15:46:35 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56912 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:36 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56913 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:36 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56914 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:36 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56915 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:37 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56916 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:38 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56917 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:40 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56918 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:40 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56919 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:41 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56920 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
    
    Message from syslogd@server2 at Nov 9 15:46:42 ...
    kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=173.X.X.X DST=212.X.X.X LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=56921 DF PROTO=TCP SPT=21 DPT=51513 SEQ=578217776 ACK=355814167 WINDOW=115 RES=0x00 ACK PSH FIN URGP=0
     
  2. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    I'd like to know this as well.
     
Loading...

Share This Page