how to stop this

Hello people,

I am getting this reported by snort:

Oct 27 08:29:56 113.44.15.95:47259 -> 148.245.144.47:16941 NULL ********
Oct 27 08:29:56 165.110.62.72:47515 -> 148.245.144.47:19775 NULL ********
Oct 27 08:29:56 157.27.57.20:47771 -> 148.245.144.47:1746 NULL ********
Oct 27 08:29:56 117.78.57.93:48027 -> 148.245.144.47:12982 NULL ********
Oct 27 08:29:56 173.133.210.111:48283 -> 148.245.144.47:41550 NULL ********
Oct 27 08:29:56 98.199.194.82:48539 -> 148.245.144.47:20338 NULL ********
Oct 27 08:29:56 176.2.148.121:48795 -> 148.245.144.47:28813 NULL ********

it goes for several thousand lines

I have a iptables running with a good set of rules, The IP's are getting spoofed, but i have the kernel configured to drop spoofed ips and also iptables to drop them but that doesnt seem to work.

 

 

 

 

Top