I noticed few days ago that my local network was unstable. So i ran nethogs, to show the activity of my Nextcloud server. It’s installed on a raspberry Pi, up-to-date both nc & ncp, with UFW activated. Here are the logs:
? root 192.168.1.100:571-220.127.116.11:48526 0.000 0.012 KB/sec
? root 192.168.1.100:1324-18.104.22.168:48614 0.000 0.000 KB/sec
? root 192.168.1.100:23580-22.214.171.124:42142 0.000 0.000 KB/sec
? root 192.168.1.100:3217-126.96.36.199:57718 0.000 0.000 KB/sec
? root 192.168.1.100:445-188.8.131.52:58621 0.000 0.000 KB/sec
Where 192.168.1.100 is obviously the server IP on my local network.
Is there anything I can do to block these calls ? Should I worry about the intergrity of my server ?
Well, thank you for your answers. If I understand, nethogs is showing requests coming to my Raspberry, not coming out of it. So, the issue is coming from my router, and I must be more restrictive in port attribution. Am I right ?