Page 1 of 1

Strange commands frequently received

Posted: 2021-04-05 23:14
by takfuji
Could some guru teach me on this strange commands, which I receive frequently for recent months.
I would like to know whether this is a sort of attack, or just a behavior of a browser.

The log of Filezilla server is this:
> Connected on port 21, sending welcome message...
> 220 Welcome to the Tak's FTP service. Connection successful.
> ...
> 500 Syntax error, command unrecognized.
> ュ.
> 500 Syntax error, command unrecognized.
>
> disconnected.

The first command is substituted but it is actually Hex 16 03 03 0D 0A, and the second one is EF BD AD 01 0D 0A.
Thanks in advance
Tak

Re: Strange commands frequently received

Posted: 2021-04-06 08:16
by botg
16 03 03, looks like a TLS handshake record. Most likely from some automated scanners.

Safe to ignore, doesn't harm FileZilla Server. If it bothers you, block the offending IP addresses, possibly already in your firewall.

Re: Strange commands frequently received

Posted: 2021-04-06 12:23
by takfuji
Thank you,
I will just ignore them as recommended.
Tak