today I want to share story with you - if you are running some crypto currency masternode, or staking coins, or just wallet/service which is using IPFS you could receive warning from your hosting provider about detected netscan and your server being locked.
This happened to me, and after few hours of researching I find out that PIRL crypto Master Node is running with IPFS service, which is triggering this problem. You can read about this issue here: http://lmgtfy.com/?q=ipfs+netscan
Solution is to disable IPFS or update firewall. To do it in the console write:
sudo iptables -A OUTPUT -d 172.16.0.0/12 -j DROP
sudo iptables -A OUTPUT -d 192.168.0.0/16 -j DROP
sudo iptables -A OUTPUT -d 169.254.0.0/16 -j DROP
sudo iptables -A OUTPUT -d 100.64.0.0/10 -j DROP
sudo iptables -A OUTPUT -d 169.254.0.0/16 -j DROP
The email from hosting provider was following:
Dear Sir or Madam
Your server with the above-mentioned IP address has performed scans on other servers on the Internet.
This has placed a considerable strain on network resources and, as a result, a segment of our network has been adversely affected.
Your server has therefore been deactivated as a precautionary measure.
A corresponding log history is attached at the end of this email.
For guidelines on how to proceed next please see:
http://wiki.hetzner.de/index.php/Leitfaden_bei_Serversperrung/en
... log of netscan here.
I hope this article helps to everybody who is facing similar problem
