Originally Posted by echox
i saw many traffic from many ip like below while using tcpdump
09:50:02.177663 22.214.171.124 > myhost: icmp: 126.96.36.199 udp port 1231 unreachable (DF)
09:50:02.179520 188.8.131.52 > myhost: icmp: 184.108.40.206 udp port 1231 unreachable (DF)
What is this traffic and how can i block it?
Thanks & best regards
It shows that your host send a UDP packet to 220.127.116.11 at port 1231. However, that port is not open at 18.104.22.168. So 22.214.171.124 sent back an ICMP message telling you that that port is unreachable.