sockets security

[javiBristol]

Hi all,

I have a project on my pi that requires a port to be open for sending information. I've implemented some basic security measures to avoid code being executed maliciously and also to check that only the correct messages are processed.

However, I've noticed recently that the service listening to that port has reported some unusual messages coming in. It seems it is a GET request to a php script on a .pl web.

Should I worry about it or is that something usual?

Cheers,
Javi

[DougieLawson]

It's normal. I get lots of those attempts every day.

I'm running fail2ban which (permanently, at least until the next reboot) blocks anything that turns up in my Apache2 log as an attempt to hack my system. SSH is a more common target than Apache2. In eighteen days fail2ban has blocked 790 IP addresses. There's a few address blocks that I've included in /etc/rc.local so that they're always blocked even before they start any hacking attempts.

[javiBristol]

Thanks a lot!