LOG裡一直出現的異常訊息 - Linux

Table of Contents

想請教一下版上達人
我的LOG裡這些訊息一直出現, 但是不知道是有害無害
能不能幫忙解答一下該不該處理, 還是放任不管它

Aug 5 00:19:17 59-125-121-235 sshd[3126]:
Bad protocol version identification 'GET
http://www.1dvj.com/?rands=_7788135525631593243500080
HTTP/1.1' from 61.157.96.80 port 55097

Aug 5 00:19:17 59-125-121-235 sshd[3127]:
Bad protocol version identification 'GET
http://www.kuaidaili.com/?rands=_10570135979239364381693492
HTTP/1.1' from 61.157.96.80 port 55103

****以下IP換了****

Aug 5 02:40:00 59-125-121-235 sshd[3298]:
Bad protocol version identification 'GET
http://www.baidu.com/?rands=_108082521612922621231296
HTTP/1.1' from 123.249.71.194 port 9871

Aug 5 02:40:00 59-125-121-235 sshd[3299]:
Bad protocol version identification 'GET
http://reg.renren.com/?rands=_250438304024504001319292
HTTP/1.1' from 123.249.71.194 port 9900

有人可以解答嗎?

謝謝

--

All Comments

Rosalind avatarRosalind2015-08-06
忘了說, 是/var/log/secure
Sandy avatarSandy2015-08-07
有人在try port前後應該還有其他的log
Agatha avatarAgatha2015-08-10
對呀, 每天都有幾百個
Valerie avatarValerie2015-08-13
被try port,之前好像用iptables可以設規則擋掉
David avatarDavid2015-08-15
fail2ban