通过以下 Referral 链接购买 DigitalOcean 主机，你将可以帮助 V2EX 持续发展
› DigitalOcean - SSD Cloud Servers
这是一个创建于 2907 天前的主题，其中的信息可能已经有所发展或是发生改变。
我的 VPS 开了 8080 代理端口，发现有很多不明来历的 IP 在连接，我担心自己的代理变成公共代理了，毕竟 VPS 是按流量计费的，之前就试过一次一夜跑几十 G 的。大神帮忙诊断一下，小白谢过了。
[root@VM_44_221_centos ~]# netstat -antp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1300/mysqld
tcp 0 0 10.8.0.1:80 0.0.0.0:* LISTEN 1553/(squid)
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1541/./proxy
tcp 0 0 127.0.0.1:7505 0.0.0.0:* LISTEN 1538/openvpn
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1051/sshd
tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 1341/httpd
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1538/openvpn
tcp 0 0 10.135.44.221:8080 185.129.38.198:1877 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51215 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51247 TIME_WAIT -
tcp 0 0 10.135.44.221:40044 10.190.48.53:9988 ESTABLISHED 1467/secu-tcs-agent
tcp 0 0 10.135.44.221:8080 120.27.26.40:37998 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51258 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 101.254.100.37:26221 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 182.92.157.82:52213 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 121.40.35.53:53296 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51235 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2009 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2100 TIME_WAIT -
tcp 0 320 10.135.44.221:22 14.29.112.169:49828 ESTABLISHED 1601/sshd
tcp 0 0 10.135.44.221:8080 115.159.82.138:1234 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2194 TIME_WAIT -
[root@VM_44_221_centos ~]# netstat -antp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1300/mysqld
tcp 0 0 10.8.0.1:80 0.0.0.0:* LISTEN 1553/(squid)
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1541/./proxy
tcp 0 0 127.0.0.1:7505 0.0.0.0:* LISTEN 1538/openvpn
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1051/sshd
tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 1341/httpd
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1538/openvpn
tcp 0 0 10.135.44.221:8080 185.129.38.198:1877 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51215 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51247 TIME_WAIT -
tcp 0 0 10.135.44.221:40044 10.190.48.53:9988 ESTABLISHED 1467/secu-tcs-agent
tcp 0 0 10.135.44.221:8080 120.27.26.40:37998 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51258 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 101.254.100.37:26221 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 182.92.157.82:52213 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 121.40.35.53:53296 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 112.109.130.187:51235 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2009 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2100 TIME_WAIT -
tcp 0 320 10.135.44.221:22 14.29.112.169:49828 ESTABLISHED 1601/sshd
tcp 0 0 10.135.44.221:8080 115.159.82.138:1234 TIME_WAIT -
tcp 0 0 10.135.44.221:8080 185.129.38.198:2194 TIME_WAIT -
17 条回复 • 2016-12-14 17:32:09 +08:00
 |
1
akwIX 2016-12-07 21:21:53 +08:00
不用常用端口
|
 |
2
cnleoyang 2016-12-07 21:26:23 +08:00
非常用端口+认证
|
 |
3
mmmyc OP |
 |
5
msg7086 2016-12-10 02:59:49 +08:00
为什么不先说说你做了什么安全措施呢？
如果你没有加账号密码的话，本来不就是公用代理吗？ |
|
6
mmmyc OP |
|
7
msg7086 2016-12-10 08:18:53 +08:00
所以你在 VPS 上跑的是 mproxy server 吗？
|
 |
11
shuxiao9058 2016-12-10 21:24:17 +08:00
iptables 加白名单，添加认证。。。
|
|
12
mmmyc OP |
|
13
msg7086 2016-12-11 11:53:43 +08:00
|
|
14
mmmyc OP @msg7086 https://github.com/examplecode/mproxy
这是 mproxy 的 GitHub ，好像普通代理的话是不用客户端的，但我直接在浏览器代理那填我的 IP 和端口又不能打开网页。 这样是不是就安全了 |
 |
17
tammy 2016-12-14 17:32:09 +08:00
fail2ban 呗
|
Select Language