Hello guys, I've found that a Fedora Core 5 server Kernel 2.6.15-1.2054_FC5, is doing port scans, and we hace received complains about that, the extrange connection that I've found is this one:

Netstat Oupput:


Everytime that I kill the procc, it gets connected again in 30 secs, so I've don this:

IPTABLES ACTION:

2. I've done this on the server as a countermeasure

Thanks a lot for your advices

Have you got a hardware based firewall or an IDS ie. Snort installed