Shadowsocks-libev: 突然出现大量的 failed to handshake with 127.0.0.1

Created on 7 Dec 2017  ·  6Comments  ·  Source: shadowsocks/shadowsocks-libev

What version of shadowsocks-libev are you using?

shadowsocks-libev 3.1.1

What operating system are you using?

Ubuntu 17.10

What is your config in detail (with all sensitive info masked)?

我在服务端的配置文件

{
    "server": "0.0.0.0",
    "server_port": "隐去",
    "password": "隐去",
    "method": "chacha20-ietf-poly1305",
    "timeout": "300",
    "fast_open": true,
    "plugin": "obfs-server",
    "plugin_opts": "obfs=tls"
}

log的内容如下

Dec  7 17:21:20 minecloudvps ss-server[887]:  2017-12-07 17:21:20 ERROR: failed to handshake with 127.0.0.1: authentication error
Dec  7 17:21:20 minecloudvps ss-server[887]:  2017-12-07 17:21:20 [simple-obfs] ERROR: remote recv: Connection reset by peer
Dec  7 17:21:20 minecloudvps ss-server[887]:  2017-12-07 17:21:20 ERROR: failed to handshake with 127.0.0.1: authentication error
Dec  7 17:21:20 minecloudvps ss-server[887]:  2017-12-07 17:21:20 [simple-obfs] ERROR: remote recv: Connection reset by peer
Dec  7 17:21:21 minecloudvps ss-server[887]:  2017-12-07 17:21:21 ERROR: failed to handshake with 127.0.0.1: authentication error
Dec  7 17:21:21 minecloudvps ss-server[887]:  2017-12-07 17:21:21 [simple-obfs] ERROR: remote recv: Connection reset by peer

请问为什么会出现 127.0.0.1 的验证失败呢?

question

Most helpful comment

Mostly a port scanner or a web spider.

All 6 comments

Mostly a port scanner or a web spider.

主要是为啥是 127.0.0.1 的握手呢?是vps被植入什么木马之类的了吗?

I have this issue as well

@lizhaode 127.0.0.1是因为你开启了插件,这时候ss-server实际上是和插件在回环通信的,所以地址是127.0.0.1

@madeye @lcdtyph

所以出现failed to handshake with 127.0.0.1 的原因是什么呢?

@lizhaode 原因即是作者说的呀,可能是一些扫描器在向你的端口发送非ss协议的包,导致server不能正确握手。或者你的客户端配置不匹配。

Was this page helpful?
0 / 5 - 0 ratings