遇到大量 ip 扫描如何应对？

This topic created in 3563 days ago, the information mentioned may be changed or developed.

最近看了下 ss 日志发现每天都有很多这样的 log ，有什么好的方法自动封禁这种 ip 吗？

 2016-08-11 20:47:53 ERROR: authentication error from 45.78.0.195
 2016-08-11 21:04:52 ERROR: authentication error from 50.249.31.58
 2016-08-11 21:05:04 ERROR: authentication error from 71.254.128.97
 2016-08-11 21:33:26 ERROR: failed to handshake with 107.167.18.34
 2016-08-11 21:40:45 ERROR: invalid password or cipher
 2016-08-11 21:40:45 ERROR: failed to handshake with 36.37.174.222
 2016-08-11 22:52:41 ERROR: failed to handshake with 192.99.102.7
 2016-08-11 22:59:59 ERROR: authentication error from 94.102.51.124
 2016-08-11 23:14:08 ERROR: invalid password or cipher
 2016-08-11 23:14:08 ERROR: failed to handshake with 13.75.92.162
 2016-08-11 23:22:53 ERROR: authentication error from 70.61.101.138
 2016-08-11 23:25:11 ERROR: remote_recv_send: Broken pipe
 2016-08-12 00:38:37 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 00:52:20 ERROR: invalid password or cipher
 2016-08-12 00:52:20 ERROR: failed to handshake with 163.21.29.132
 2016-08-12 01:09:08 ERROR: invalid password or cipher
 2016-08-12 01:09:08 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 01:55:59 ERROR: invalid password or cipher
 2016-08-12 01:55:59 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 02:22:56 ERROR: invalid password or cipher
 2016-08-12 02:22:56 ERROR: failed to handshake with 222.134.52.196
 2016-08-12 02:40:47 ERROR: invalid password or cipher
 2016-08-12 02:40:47 ERROR: failed to handshake with 72.8.64.148
 2016-08-12 02:47:56 ERROR: invalid password or cipher
 2016-08-12 02:47:56 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 02:48:33 ERROR: invalid password or cipher
 2016-08-12 02:48:33 ERROR: failed to handshake with 85.114.14.78
 2016-08-12 03:09:46 ERROR: invalid password or cipher
 2016-08-12 03:09:46 ERROR: failed to handshake with 107.167.18.34
 2016-08-12 03:15:00 ERROR: authentication error from 185.125.4.137
 2016-08-12 03:37:42 ERROR: invalid password or cipher
 2016-08-12 03:37:42 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 03:49:28 ERROR: invalid password or cipher
 2016-08-12 03:49:28 ERROR: failed to handshake with 185.125.4.167
 2016-08-12 04:20:35 ERROR: authentication error from 91.224.160.70
 2016-08-12 04:27:23 ERROR: failed to handshake with 185.52.76.221
 2016-08-12 04:29:52 ERROR: invalid password or cipher
 2016-08-12 04:29:52 ERROR: failed to handshake with 116.228.44.131
 2016-08-12 04:35:32 ERROR: getpeername: Transport endpoint is not connected
 2016-08-12 04:41:43 ERROR: remote recv: Connection reset by peer
 2016-08-12 04:41:59 ERROR: remote recv: Connection reset by peer
 2016-08-12 04:56:56 ERROR: failed to handshake with 192.99.102.7
 2016-08-12 05:09:09 ERROR: authentication error from 62.210.244.44
 2016-08-12 05:37:21 ERROR: server recv: Connection reset by peer
 2016-08-12 06:05:34 ERROR: authentication error from 182.18.149.188
 2016-08-12 07:02:41 ERROR: invalid password or cipher
 2016-08-12 07:02:41 ERROR: failed to handshake with 68.115.212.162
 2016-08-12 08:38:38 ERROR: failed to handshake with 212.3.143.230
 2016-08-12 08:47:26 ERROR: authentication error from 70.61.101.138

2 replies

1

Busy

Aug 12, 2016

你在担心什么，担心被爆破？密码复杂点就 OK

2

ixinshang

Aug 12, 2016 via Android

可以试试 f2b 现在用的服务器用的密室验证没遇到啥扫描的了