[CentOS] [OT] odd network question
Giles Coochey
giles at coochey.net
Fri Aug 2 13:46:58 UTC 2019
On 02/08/2019 14:12, Fred Smith wrote:
>
> but the amount of attempted traffic on that port certainly does seem
> like it could be a botnet banging on me.
One thing that you could try is to port forward that port to an actual
listening port (think like running nc/netcat in listening mode). That
way it will complete the TCP handshake and you can see what commands (if
any) it sends, might be useful to record it with tcpdump / wireshark.
More information about the CentOS
mailing list