TCP_OUT traffic related to Cerber in server log

  • stevejbrobinson

    (@stevejbrobinson)


    1 year ago

    While updating Cerber I noticed (what I can only assume) to be your plugin making repeated attempts to communicate via TCP_OUT to IPs in Moldova, Bulgaria and Ukraine. The server log entries look like this:

    Nov 10 10:12:23 vps kernel: Firewall: TCP_OUT Blocked IN= OUT=eth0 SRC=MY.SERVER.IP.X DST=87.121.121.2 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=57659 DF PROTO=TCP SPT=39184 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 UID=0 GID=0

    My Linux firewall blocks this but I am still able to install the update. So, if it’s not part of the update process, what is this for?

  • The topic ‘TCP_OUT traffic related to Cerber in server log’ is closed to new replies.