MobileRead Forums - View Single Post

Chilipops · 04-20-2018, 09:36 AM

Howdy folks. I'm getting a lot of bad actors accessing my calibre content server via Telnet. I shut off all incoming IP's from China via the Windows 10 firewall which cut out about 85% of the problem but I am still getting regular (up to 20 a day) hits from US IP's and a few other countries. I think some of these jackwagons are trying to use the calibre server as a proxy to hide their activity with an access log entry as follows:

61.82.154.150 port-10168 - 20/Apr/2018:01:05:43 -0400 "GET http://m.search.yahoo.com/ HTTP/1.1" 200 1612563

I already use the username and password protections on the calibre content server but doesn't appear to be doing anything to stop the telnet sessions like the one above.

Anyone have any suggestions on how to keep these bad actors out?

04-20-2018, 09:36 AM	#1
Chilipops Member Posts: 12 Karma: 10 Join Date: Apr 2018 Device: nook 3	Calibre Content Server Security? Howdy folks. I'm getting a lot of bad actors accessing my calibre content server via Telnet. I shut off all incoming IP's from China via the Windows 10 firewall which cut out about 85% of the problem but I am still getting regular (up to 20 a day) hits from US IP's and a few other countries. I think some of these jackwagons are trying to use the calibre server as a proxy to hide their activity with an access log entry as follows: 61.82.154.150 port-10168 - 20/Apr/2018:01:05:43 -0400 "GET http://m.search.yahoo.com/ HTTP/1.1" 200 1612563 I already use the username and password protections on the calibre content server but doesn't appear to be doing anything to stop the telnet sessions like the one above. Anyone have any suggestions on how to keep these bad actors out?