Hi guys,

Just after a bit of information.

We got CPanel at work for our server and clients. We keep on getting numerous connections opened by:

'unauthorised user' and each connection resembles a port scan like this:


User Port Status
unauthorised user 202.0.164.8:1001 Ok
unauthorised user 202.0.164.8:1002 Ok
unauthorised user 202.0.164.8:1003 Ok
unauthorised user 202.0.164.8:1004 Ok


and so on. This makes it slow.

Any help?

need to ban that ip in the firewall it looks like.

So, any ideas on where this problem comes from?

I would like to get an idea on what it is before we just ban that IP. As well as that, the IP address is one of our servers so it looks like a port scan to me.


What do you think?

Thanks mate,
Zane

Could it be a networking issue of some sort? It is an IP off one of our other servers...

must be someone doing a scan for an open port, I'd ban that IP from your box very quickly although you mentioned the IP is another server you have? that IP goes to Hong Kong - if its your own server IP you're going to have to check who is hosted on your server that is causing it as it might be a client on your own box doing a scan.