Packet 0x4547

[Tauro]

I will try to be as specific as possible, sorry my English.

Since opening a server I have been getting web and db attacks, which I have fixed.

But in the ssh or vps sometimes multiple closes of different ip come out because I receive unsupported packet (packet 0x4547). Search the forums but can't find anything related to this error.

I don't know if anyone knows why this error is due or how they could solve it.

And when it closes the connections the ssh drops for about 10 seconds, closing the server but after that time it reconnects and without having to reload or start the server I can connect without problems.

My client is 20180620

Edited January 10, 2022 by Mael

[4144]

this is port scanners. most time bots.

from your error look like scanner checks is on your server ports working http server.

 

[Tauro]

And how could it be solved, changing the default ports of the server? 

[4144]

probably only solution is to use some hoster or ip address what not scanned by bots too often

and you can ignore any errors with packet id 0x4547

[Tauro]

but this packet does not occur by bots, it is intentional by a third party where they send multiple connections in seconds using that packet until the hosting collapses and restarts. (And I say that it is intentional because at the beginning they were attacks against the web hosting).

I can't just ignore the packet because the server keeps restarting due to it, is there no way to make that packet perform any action other than crash the server? 

[Rynbef]

Change any Port of ur server. Use a firewall ipblock list on Linux u can use UFW for blocking other ports and allow easy in our outgoing packets or blocks too many requests or else.

 

Rynbef~

Edited January 12, 2022 by Rynbef

[Tauro]

I will try these changes, thanks!

[JinYuichi]

you can try this, so that you don't have attacks

# iptables -A INPUT -p icmp --icmp-type echo-request -j DROP 

# iptables -A OUTPUT -p icmp --icmp-type echo-reply -j DROP

# iptables -L

[Rynbef]

UFW is an useful tool for the Iptables.

 

Rynbef~