[問題] LOG裡一直出現的異常訊息

作者: iceman0204 (LIFE)   2015-08-06 11:46:00
想請教一下版上達人
我的LOG裡這些訊息一直出現, 但是不知道是有害無害
能不能幫忙解答一下該不該處理, 還是放任不管它
Aug 5 00:19:17 59-125-121-235 sshd[3126]:
Bad protocol version identification 'GET
http://www.1dvj.com/?rands=_7788135525631593243500080
HTTP/1.1' from 61.157.96.80 port 55097
Aug 5 00:19:17 59-125-121-235 sshd[3127]:
Bad protocol version identification 'GET
http://www.kuaidaili.com/?rands=_10570135979239364381693492
HTTP/1.1' from 61.157.96.80 port 55103
****以下IP換了****
Aug 5 02:40:00 59-125-121-235 sshd[3298]:
Bad protocol version identification 'GET
http://www.baidu.com/?rands=_108082521612922621231296
HTTP/1.1' from 123.249.71.194 port 9871
Aug 5 02:40:00 59-125-121-235 sshd[3299]:
Bad protocol version identification 'GET
http://reg.renren.com/?rands=_250438304024504001319292
HTTP/1.1' from 123.249.71.194 port 9900
有人可以解答嗎?
謝謝
作者: iceman0204 (LIFE)   2015-08-06 11:46:00
忘了說, 是/var/log/secure
作者: kouryuu (Kouryuu)   2015-08-06 12:54:00
有人在try port前後應該還有其他的log
作者: iceman0204 (LIFE)   2015-08-06 13:01:00
對呀, 每天都有幾百個
作者: pizzahut (...)   2015-08-06 17:37:00
被try port,之前好像用iptables可以設規則擋掉
作者: aeolus0829 (阿洽)   2015-08-06 21:34:00
fail2ban

Links booklink

Contact Us: admin [ a t ] ucptt.com