我在我的服务器上运行ossec,并定期收到这样的警告:
Received From: myserver->/var/log/auth.log Rule: 5701 fired (level 8) -> "Possible attack on the ssh server (or version gathering)." Portion of the log(s): Nov 19 14:26:33 myserver sshd[2105]: Bad protocol version identification 'GET /robots.txt HTTP/1.1' from 66.249.73.226
IP地址始终对应于Google抓取工具.但是为什么世界上googlebot会尝试索引我的SSH服务器?我们在标准的,着名的端口(22)上运行SSH,所以看起来谷歌比在那里寻找网络服务器更好.我们肯定没有发布任何会导致它相信的链接.