gibo Wrote:
-------------------------------------------------------
> Good morning,
>
> i've notice on my firewall some strange connections (denied) starting
> from an nginx based reverse proxy located in a dmz.
> Connections starts from the machine and point some random ips and port
> all over the world (on common ports like 21, 6667, 22, etc.).
> This nginx is configured only as reverse proxy without any cgi and
> htdocs installed so can be this an exploit?
>
> Debian 10.6
> Nginx 1.18.0 (from the official apt repos)
>
> Thanks in advance for your help
Obviously i've checked and the connections was mad from an nginx worker process.
-------------------------------------------------------
> Good morning,
>
> i've notice on my firewall some strange connections (denied) starting
> from an nginx based reverse proxy located in a dmz.
> Connections starts from the machine and point some random ips and port
> all over the world (on common ports like 21, 6667, 22, etc.).
> This nginx is configured only as reverse proxy without any cgi and
> htdocs installed so can be this an exploit?
>
> Debian 10.6
> Nginx 1.18.0 (from the official apt repos)
>
> Thanks in advance for your help
Obviously i've checked and the connections was mad from an nginx worker process.