mirror of
https://github.com/fatedier/frp.git
synced 2026-05-15 08:05:49 -06:00
[GH-ISSUE #1891] ssh嗅探连接问题 #1496
Labels
No labels
In Progress
WIP
WaitingForInfo
bug
doc
duplicate
easy
enhancement
future
help wanted
invalid
lifecycle/stale
need-issue-template
need-usage-help
no plan
proposal
pull-request
question
todo
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/frp#1496
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Chenyming on GitHub (Jul 6, 2020).
Original GitHub issue: https://github.com/fatedier/frp/issues/1891
frpc:0.24.0
ubuntu:20.04
大家还有人遇到ssh嗅探连接么?
应该是扫描到了开放的ssh端口,进而进行无限次登陆尝试.
从log看每隔10s会进行一次随机用户名的登陆.
使用journal -u ssh查看是否有如下log:
@christaikobo commented on GitHub (Jul 26, 2020):
https://github.com/fatedier/frp/blob/master/README_zh.md#%E5%AE%89%E5%85%A8%E5%9C%B0%E6%9A%B4%E9%9C%B2%E5%86%85%E7%BD%91%E6%9C%8D%E5%8A%A1
作者文档不是都写的很清楚了吗
@BrianYi commented on GitHub (Jul 26, 2020):
抱歉,后来看到了,这个回复忘记删了
@ANDYGE commented on GitHub (Dec 7, 2021):
I also meet this question, it generate so many record in my /var/log/secure, I don't how to remove this. 并且没有看到上面文档上有关于这一块的描述,@terrytw 能说的具体点吗?
@christaikobo commented on GitHub (Dec 8, 2021):
https://github.com/fatedier/frp#expose-your-service-privately
作者把中文文档给删除了...
@ATPs commented on GitHub (Apr 14, 2022):
我也遇到这种情况。
最后用了找到了一个解决办法,在服务器端使用 fail2ban.
https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-7
https://www.apude.com/blog/9485.html
运行
sudo iptables -L可以看到有些攻击的ip被ban了
@silencej commented on GitHub (Jul 17, 2022):
@ATPs 用了frp以后地址都是127.0.0.1,你怎么配置fail2ban的?
@yunyuyuan commented on GitHub (Feb 11, 2023):
@ATPs 同问,是
frpc.ini配置有啥技巧可以把源ip转发吗@ATPs commented on GitHub (Apr 2, 2023):
@yunyuyuan @silencej 在服务器端配置的哈。不是在本地。frps端。
@liangweidonggood commented on GitHub (Aug 4, 2023):