[問題] LOG裡一直出現的異常訊息

[iceman0204 (LOSER)]

想請教一下版上達人
我的LOG裡這些訊息一直出現, 但是不知道是有害無害
能不能幫忙解答一下該不該處理, 還是放任不管它

Aug  5 00:19:17 59-125-121-235 sshd[3126]:
Bad protocol version identification 'GET
http://www.1dvj.com/?rands=_7788135525631593243500080
HTTP/1.1' from 61.157.96.80 port 55097

Aug  5 00:19:17 59-125-121-235 sshd[3127]:
Bad protocol version identification 'GET
http://www.kuaidaili.com/?rands=_10570135979239364381693492
HTTP/1.1' from 61.157.96.80 port 55103

****以下IP換了****

Aug  5 02:40:00 59-125-121-235 sshd[3298]:
Bad protocol version identification 'GET
http://www.baidu.com/?rands=_108082521612922621231296
HTTP/1.1' from 123.249.71.194 port 9871

Aug  5 02:40:00 59-125-121-235 sshd[3299]:
Bad protocol version identification 'GET
http://reg.renren.com/?rands=_250438304024504001319292
HTTP/1.1' from 123.249.71.194 port 9900

有人可以解答嗎?

謝謝

--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 36.229.219.252
※ 文章網址: https://www.ptt.cc/bbs/Linux/M.1438832764.A.391.html
→ iceman0204: 忘了說, 是/var/log/secure
→ kouryuu: 有人在try port前後應該還有其他的log
→ iceman0204: 對呀, 每天都有幾百個
推 pizzahut: 被try port，之前好像用iptables可以設規則擋掉
推 aeolus0829: fail2ban