This UFW message on my server repeated hours apart, but in a group of 4:
Odd thing is the source IP is a TV in the upstairs bedroom that's in sleep mode. It started yesterday, but not before.
A couple days ago there was some from an IP in South Korea, but it stopped after a couple minutes.
I just think it odd that it's blocking local IPs I assume there's a way to allow that, I just know nothing about UFW.
Code:
[SIZE=10px][Thu Jan 19 07:58:08 2023] [UFW BLOCK] IN=eno1 OUT= MAC=fc:aa:14:91:fd:c1:1c:1e:e3:81:6e:79:08:00 SRC=192.168.1.20 DST=192.168.1.250 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=13109 DF PROTO=TCP SPT=8060 DPT=52888 WINDOW=0 RES=0x00 RST URGP=0 [Thu Jan 19 07:58:09 2023] [UFW BLOCK] IN=eno1 OUT= MAC=fc:aa:14:91:fd:c1:1c:1e:e3:81:6e:79:08:00 SRC=192.168.1.20 DST=192.168.1.250 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=13250 DF PROTO=TCP SPT=8060 DPT=52888 WINDOW=0 RES=0x00 RST URGP=0 [Thu Jan 19 07:58:13 2023] [UFW BLOCK] IN=eno1 OUT= MAC=fc:aa:14:91:fd:c1:1c:1e:e3:81:6e:79:08:00 SRC=192.168.1.20 DST=192.168.1.250 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=13294 DF PROTO=TCP SPT=8060 DPT=52888 WINDOW=0 RES=0x00 RST URGP=0 [Thu Jan 19 07:58:19 2023] [UFW BLOCK] IN=eno1 OUT= MAC=fc:aa:14:91:fd:c1:1c:1e:e3:81:6e:79:08:00 SRC=192.168.1.20 DST=192.168.1.250 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=13581 DF PROTO=TCP SPT=8060 DPT=52888 WINDOW=0 RES=0x00 RST URGP=0[/SIZE]
A couple days ago there was some from an IP in South Korea, but it stopped after a couple minutes.
I just think it odd that it's blocking local IPs I assume there's a way to allow that, I just know nothing about UFW.
Comment