[问题] LOG里一直出现的异常讯息

楼主: iceman0204 (LIFE)   2015-08-06 11:46:00
想请教一下版上达人
我的LOG里这些讯息一直出现, 但是不知道是有害无害
能不能帮忙解答一下该不该处理, 还是放任不管它
Aug 5 00:19:17 59-125-121-235 sshd[3126]:
Bad protocol version identification 'GET
http://www.1dvj.com/?rands=_7788135525631593243500080
HTTP/1.1' from 61.157.96.80 port 55097
Aug 5 00:19:17 59-125-121-235 sshd[3127]:
Bad protocol version identification 'GET
http://www.kuaidaili.com/?rands=_10570135979239364381693492
HTTP/1.1' from 61.157.96.80 port 55103
****以下IP换了****
Aug 5 02:40:00 59-125-121-235 sshd[3298]:
Bad protocol version identification 'GET
http://www.baidu.com/?rands=_108082521612922621231296
HTTP/1.1' from 123.249.71.194 port 9871
Aug 5 02:40:00 59-125-121-235 sshd[3299]:
Bad protocol version identification 'GET
http://reg.renren.com/?rands=_250438304024504001319292
HTTP/1.1' from 123.249.71.194 port 9900
有人可以解答吗?
谢谢
楼主: iceman0204 (LIFE)   2015-08-06 11:46:00
忘了说, 是/var/log/secure
作者: kouryuu (Kouryuu)   2015-08-06 12:54:00
有人在try port前后应该还有其他的log
楼主: iceman0204 (LIFE)   2015-08-06 13:01:00
对呀, 每天都有几百个
作者: pizzahut (...)   2015-08-06 17:37:00
被try port,之前好像用iptables可以设规则挡掉
作者: aeolus0829 (阿洽)   2015-08-06 21:34:00
fail2ban

Links booklink

Contact Us: admin [ a t ] ucptt.com