Snort与IPsec联动构建入侵检测与防护系统
已有 6956 次阅读
2012-12-17 10:27
|个人分类:计算机应用技术|系统分类:生活其它|
系统, 检测, 入侵检测, Snort, ipsec
上周末开始,一群日本IP对我的服务器搞TCP全连接攻击,比较麻烦的一种攻击。
这种攻击的麻烦在于,用的可能是真实的僵尸电脑,构造非正常的TCP连接,占用和消耗服务器资源。
给他们子网的ISP支持人员去了email,没人鸟我;只有自己动手,处理掉这些非正常的TCP连接。
攻击源IP很分散,识别和判断起来比较麻烦,于是只好用起Snort这把宝刀,来判断。
然后,用ipsec禁止掉攻击源IP。
好像没什么好写的,就是Snort发现非正常TCP连接,由脚本处理警报日志,然后交给Ipsec,防火墙处理。
搞snort规则的时候走了个弯路,用WireShark抓包分析畸形数据包特征这一步其实没必要,因为数据包本身没啥特征码,只要snort能判断是畸形数据包就行了。
如果是科学网的博友调戏俺的话,就拜托收了神通吧
。。。这种攻击也没什么意思,拼的就是资源和自动化程度。
附,疑似僵尸电脑IP:223.216.138.12
223.217.238.27
223.217.138.98
114.185.206.168
60.42.43.60
114.185.96.28
121.115.151.165
125.205.130.29
114.180.187.9
220.220.170.57
60.42.213.206
60.34.14.127
114.186.42.100
114.186.64.230
114.185.61.227
114.184.149.139
125.203.63.113
180.63.141.209
58.89.144.29
220.220.55.158
60.41.137.47
114.180.106.64
222.150.35.25
27.114.86.5
114.188.142.63
114.188.200.218
219.165.188.49
220.99.219.127
118.19.80.118
60.36.25.236
118.16.1.216
223.216.243.210
114.186.146.144
125.205.198.116
223.218.171.222
114.187.25.213
60.43.16.139
180.63.76.195
223.218.24.28
60.42.203.13
125.203.219.5
118.18.145.46
58.93.31.23
114.188.19.7
114.180.161.227
223.219.0.225
60.41.196.93
118.21.7.56
114.189.163.165
60.42.169.45
60.34.222.218
118.20.236.79
118.16.11.144
220.221.47.116
180.63.81.104
114.189.120.10
114.184.115.47
118.16.195.130
114.190.200.220
118.20.52.96
121.119.94.62
114.185.101.117
125.201.23.50
118.19.44.19
121.112.85.15
220.220.79.111
218.47.206.35
219.167.9.3
60.42.162.110
125.202.201.9
121.117.206.229
114.183.56.232
114.180.152.127
125.205.233.112
114.180.236.146
114.182.214.216
118.20.38.202
60.47.45.6
219.167.173.163
125.205.78.26
121.114.8.215
118.16.28.26
58.89.37.89
114.188.17.110
220.109.85.28
220.220.112.218
223.217.180.9
118.17.154.40
220.108.233.224
180.63.103.199
60.35.220.54
125.205.91.215
60.35.212.86
218.47.211.207
180.63.43.249
60.41.49.189
125.203.76.201
114.182.249.236
220.108.49.58
222.150.29.82
114.182.138.76
218.47.180.181
114.190.207.173
121.119.47.73
58.95.96.112
125.205.180.172
220.108.63.32
118.17.108.30
220.220.102.15
114.190.1.88
114.180.64.241
114.184.179.169
220.220.88.3
118.18.57.80
223.218.194.105
121.115.25.67
118.19.194.237
220.109.172.108
121.118.36.10
60.42.220.190
218.47.169.167
121.119.69.54
60.36.205.223
60.43.27.242
58.94.121.62
220.99.254.53
223.216.202.24
60.41.146.59
121.115.58.172
114.188.204.219
125.202.158.5
219.164.196.39
220.220.1.143
121.118.100.180
220.221.181.249
223.219.186.112
218.44.72.232
60.34.163.15
114.184.5.83
219.167.164.215
118.16.244.85
220.221.135.168
223.216.137.253
60.41.191.144
114.188.242.193
219.167.168.115
114.186.19.57
220.220.193.95
60.42.227.43
125.205.94.205
223.218.168.219
118.18.3.72
60.42.46.47
121.118.132.104
121.116.46.188
121.114.63.204
58.93.221.100
114.189.227.128
121.119.4.225
121.112.224.46
60.46.159.247
220.109.20.244
58.93.164.218
121.116.252.50
114.186.168.172
58.94.182.123
220.220.217.33
118.17.18.126
114.190.67.201
58.93.45.249
114.186.209.1
60.34.135.95
223.216.71.96
58.89.72.249
121.113.28.171
60.34.116.101
118.19.132.173
220.109.5.157
125.204.66.248
125.205.123.55
121.119.25.171
121.115.31.227
58.95.165.64
60.42.11.113
114.185.91.25
58.95.145.23
118.16.78.143
60.34.250.16
220.220.206.3
114.187.92.48
60.43.26.38
219.164.64.16
220.109.131.34
114.180.242.184
121.117.198.131
114.191.118.235
118.19.139.96
125.203.22.18
60.47.37.47
220.99.196.131
114.185.3.182
121.113.232.91
220.108.191.54
219.167.97.27
58.93.115.123
114.182.207.245
114.191.56.130
223.218.43.11
220.109.67.162
60.35.81.165
114.182.107.79
118.16.18.186
121.114.27.3
114.181.25.159
60.35.59.25
118.17.197.1
60.34.155.142
114.181.119.239
180.63.13.246
114.191.30.14
121.119.55.236
121.117.119.146
121.119.40.157
114.191.18.33
121.119.57.118
118.17.90.22
223.216.240.86
114.188.54.124
223.218.199.177
218.224.152.239
220.109.186.167
219.167.132.138
125.205.62.2
118.17.204.122
223.217.242.252
114.181.61.110
223.216.19.221
125.202.248.202
114.187.82.112
121.113.75.250
114.184.239.156
121.112.45.127
114.188.58.18
121.113.131.122
223.218.155.64
220.99.196.228
60.41.227.3
125.201.19.169
125.203.221.149
219.165.204.234
223.216.112.7
223.219.83.82
121.117.221.105
118.18.196.186
60.42.220.165
219.167.41.204
180.63.80.125
60.42.66.61
114.181.131.207
121.113.19.106
220.109.26.232
121.114.65.49
114.183.144.165
222.151.38.129
60.42.102.39
220.108.3.1
223.217.141.210
118.16.162.125
60.36.106.182
220.109.128.28
125.205.207.111
60.43.27.147
58.95.244.100
58.89.109.152
60.47.15.234
114.180.12.114
125.202.167.38
121.116.61.24
220.220.251.193
114.183.158.144
60.35.23.214
114.180.212.43
60.43.4.93
220.221.89.224
58.95.171.26
223.216.87.82
121.118.142.217
125.202.181.95
60.34.251.192
114.182.220.159
220.220.9.138
114.190.236.154
223.219.17.73
223.218.151.158
60.43.7.220
220.221.223.246
58.95.123.222
58.95.19.125
220.99.218.34
114.185.41.187
222.150.158.65
27.114.105.239
114.184.22.38
180.63.158.172
219.164.58.112
121.114.38.100
125.201.109.104
125.205.204.85
114.187.228.250
114.183.215.219
218.44.88.184
114.185.17.119
125.202.162.181
118.16.5.151
114.183.234.128
60.41.90.125
118.16.175.176
125.204.242.214
220.99.167.123
114.184.69.62
114.184.20.119
114.191.113.46
121.119.4.186
118.18.117.165
114.187.211.204
114.180.248.159
222.150.118.26
114.188.203.224
219.164.162.212
60.35.123.143
60.42.194.122
121.118.231.56
121.114.78.180
223.216.241.198
220.220.179.244
222.150.165.34
60.34.167.247
121.114.69.12
220.220.155.122
58.94.80.67
114.184.233.120
114.188.241.196
118.17.25.181
218.224.155.85
60.36.225.160
60.42.175.223
118.18.222.174
58.89.31.45
125.205.33.254
121.116.132.177
114.180.145.79
180.63.151.183
58.93.86.231
220.108.51.176
125.202.156.52
118.16.236.194
125.201.57.74
125.205.252.129
118.21.72.4
114.190.0.170
114.187.225.29
60.36.147.226
125.201.64.47
121.115.77.86
114.190.85.87
114.191.21.252
220.220.54.141
121.112.131.170
220.109.148.105
219.164.165.228
220.108.123.144
60.34.236.243
121.112.223.107
223.216.66.23
220.99.240.6
220.99.221.73
114.187.200.103
114.183.194.72
125.203.6.144
114.185.90.246
220.220.161.143
220.109.66.54
125.203.220.169
220.109.66.200
219.167.89.236
118.21.10.60
218.47.254.219
114.187.134.215
223.216.53.58
222.150.120.199
219.167.81.224
220.108.50.122
121.119.111.123
58.89.89.94
218.47.108.115
114.181.91.169
125.205.231.158
220.108.62.116
114.189.71.28
60.47.36.50
114.185.14.182
114.190.179.218
220.109.93.174
60.35.10.67
121.114.166.77
125.203.159.12
58.95.225.33
118.19.55.135
125.205.153.202
114.186.145.93
58.94.78.157
223.217.32.51
114.182.79.179
223.218.148.12
121.113.158.130
114.190.144.242
222.150.155.42
58.93.36.16
125.203.122.253
125.203.60.241
125.204.184.102
118.20.203.64
121.118.0.154
60.41.226.217
58.94.18.8
60.35.87.94
220.220.12.83
121.113.50.61
219.164.20.158
60.41.194.213
125.204.136.49
220.220.99.65
219.167.102.122
118.17.207.50
114.189.29.36
60.41.129.75
219.167.131.125
118.21.43.130
114.188.228.237
220.220.133.157
220.220.100.61
114.186.212.73
58.95.88.124
223.216.53.184
220.220.222.205
118.19.122.8
118.20.212.204
114.180.118.54
114.190.201.233
114.186.73.199
125.202.46.249
114.181.141.225
114.183.44.175
114.180.252.135
114.183.21.188
121.115.163.104
218.47.50.77
220.221.36.214
220.220.194.219
220.108.5.102
125.203.14.227
58.95.88.222
58.93.127.191
121.112.176.94
114.191.42.138
220.108.230.215
118.19.204.125
58.95.197.77
114.184.24.118
118.17.91.60
125.201.99.151
222.150.139.115
58.95.17.153
60.41.216.206
118.20.57.143
223.218.164.176
223.216.53.90
220.221.56.153
114.186.217.178
118.16.250.153
210.160.231.38
58.94.153.7
220.220.69.128
180.63.234.27
60.34.38.73
121.112.247.179
220.109.156.188
114.191.170.119
60.42.28.114
60.41.164.33
121.119.0.66
118.16.167.87
223.218.15.89
220.99.202.32
223.218.147.169
58.93.30.165
222.150.146.207
114.181.254.104
58.94.24.131
114.181.135.188
118.16.143.209
125.204.190.231
118.19.70.30
114.191.54.107
58.94.165.15
222.151.0.231
114.185.234.230
118.17.24.81
223.218.210.25
121.114.60.205
121.119.6.29
220.220.164.180
220.220.63.70
114.182.23.8
180.63.11.100
60.34.101.76
121.114.67.183
114.189.19.237
114.180.136.193
58.89.162.97
60.34.149.246
220.109.17.101
223.219.200.13
114.181.247.140
114.188.143.201
223.216.253.6
220.220.187.49
218.47.200.223
114.186.59.165
114.183.14.64
121.112.116.128
58.93.214.152
121.115.97.139
114.183.34.154
118.17.132.10
121.115.159.210
114.191.50.242
60.34.19.128
60.34.75.1
114.184.230.161
219.167.25.122
220.221.100.200
125.205.239.226
60.34.161.107
114.188.252.187
60.41.215.188
220.108.53.175
121.116.39.33
121.118.136.242
118.18.46.167
219.167.40.246
114.181.237.211
220.108.141.236
121.118.249.41
114.183.244.208
114.190.9.103
60.42.171.157
220.220.173.237
114.189.152.238
58.94.138.234
218.47.175.120
114.184.185.200
222.151.6.226
60.47.181.227
220.108.57.6
125.202.147.87
58.95.167.31
121.112.179.142
114.180.205.24
219.164.18.109
60.41.228.248
114.182.93.132
218.47.115.126
114.183.209.81
220.221.150.24
60.41.102.186
220.99.244.79
58.94.226.160
219.164.159.208
118.17.163.116
125.202.149.134
114.182.75.121
58.95.82.251
125.205.3.156
200.49.163.6
173.165.57.20
91.231.120.196
118.13.1.148
58.89.4.196
221.187.199.172
111.101.143.125
223.132.144.39
114.153.165.245
60.41.145.124
118.8.101.14
114.187.201.58
125.203.98.38
114.186.238.31
114.183.247.174
121.115.84.149
58.95.225.48
219.165.130.228
223.219.158.85
220.220.0.58
121.114.239.55
114.191.118.167
125.205.207.13
220.99.253.248
220.220.176.67
125.201.158.150
60.46.197.81
60.42.77.18
220.108.29.4
125.204.194.135
220.108.227.182
60.34.120.234
114.184.97.142
223.219.226.195
121.116.86.1
58.93.214.16
223.218.217.183
114.182.62.142
180.63.65.93
218.47.11.67
60.41.212.157
223.216.53.204
58.95.229.91
180.63.108.202
27.114.14.204
180.63.130.169
223.219.243.51
114.186.29.225
60.36.140.121
125.201.107.166
60.35.71.156
114.183.99.112
118.17.196.101
125.204.3.11
125.202.19.107
60.41.142.23
114.187.249.72
58.94.97.147
114.186.10.9
114.190.194.159
114.190.52.103
118.19.99.246
60.34.174.145
114.187.69.201
121.117.110.37
121.112.179.119
114.181.36.76
114.187.85.142
121.115.72.176
114.183.95.17
219.164.44.130
125.205.38.190
114.189.52.113
222.150.47.131
220.221.162.250
118.17.116.65
121.112.214.136
218.47.60.135
114.185.216.111
220.108.52.16
58.93.28.50
118.21.44.35
60.42.53.65
60.42.64.217
60.34.177.239
60.47.92.180
60.34.29.169
223.219.95.245
60.43.2.103
219.164.110.169
60.42.177.236
114.190.123.90
223.218.32.45
60.35.207.230
125.205.132.180
114.183.231.158
220.108.120.14
219.165.154.227
125.202.51.219
114.185.129.81
219.165.249.179
60.41.48.174
114.189.101.232
60.35.57.206
223.218.218.74
118.17.194.166
114.185.214.35
114.189.70.248
121.116.252.194
114.181.114.162
114.188.100.222
223.219.86.167
220.108.81.186
220.99.241.209
219.167.42.144
219.167.108.146
114.186.89.149
60.47.121.240
118.18.165.43
223.217.85.145
114.188.189.114
223.218.140.13
114.186.32.145
114.185.95.94
58.89.114.197
114.180.21.132
220.109.98.39
219.164.184.35
121.113.89.232
219.165.199.134
220.220.137.156
114.187.206.154
121.117.75.214
125.205.172.210
121.112.205.62
60.42.160.37
218.47.254.48
60.42.205.219
125.202.61.171
125.205.232.146
114.187.95.74
114.186.237.86
60.34.175.125
125.205.140.128
114.185.172.20
223.219.35.200
60.34.196.45
114.189.56.28
60.41.4.141
125.204.187.165
60.35.147.117
60.42.206.28
114.186.146.40
114.184.97.8
121.113.92.172
180.63.233.219
118.20.241.2
220.220.85.131
114.182.46.133
223.219.23.199
125.205.93.98
58.89.171.115
220.99.253.79
118.16.189.155
60.34.250.136
118.18.210.30
180.63.252.189
27.114.64.222
125.201.176.11
114.184.22.236
118.17.143.206
114.186.16.108
114.187.85.190
125.204.32.108
218.47.183.152
118.16.50.45
125.205.135.111
219.167.53.213
219.165.191.33
220.108.53.54
114.180.3.130
121.113.62.241
114.185.216.105
114.180.250.144
220.220.13.163
220.221.179.198
218.224.177.7
121.118.34.144
223.219.93.64
223.217.233.12
223.219.72.124
219.165.133.239
114.182.139.80
60.41.62.23
60.47.170.44
223.218.2.106
114.189.230.56
60.47.39.20
58.93.195.200
125.205.194.71
121.114.27.96
219.164.87.61
118.17.208.37
125.205.37.29
223.218.174.175
60.47.173.15
114.186.209.41
220.220.0.137
58.95.207.134
223.218.14.121
218.47.153.137
60.35.94.10
121.114.177.177
114.187.114.16
220.109.167.38
60.42.17.166
114.187.27.145
220.109.163.106
220.108.242.197
219.165.146.139
118.19.30.94
114.185.130.9
58.95.237.98
114.180.50.161
223.219.184.3
114.183.128.31
125.205.121.151
60.42.3.120
218.47.9.183
114.180.84.105
222.151.43.36
121.113.128.203
220.220.136.55
219.167.199.44
60.47.96.254
60.42.213.32
60.46.148.10
220.220.132.89
219.167.146.44
118.18.89.214
220.108.81.54
223.216.90.45
210.160.225.139
220.108.236.202
114.184.189.250
218.47.212.167
60.35.6.3
223.217.96.106
223.218.43.142
114.181.253.224
222.150.159.162
58.95.148.225
121.114.59.246
125.203.1.246
114.184.241.169
220.220.96.205
114.180.162.33
218.47.11.7
58.89.86.154
222.150.135.2
114.190.184.28
58.95.171.104
121.117.159.181
60.34.22.104
125.203.80.19
58.188.57.247
125.203.117.28
114.183.169.242
220.109.166.173
121.117.222.195
222.150.77.13
125.205.40.125
218.224.157.37
219.164.22.123
121.113.75.225
60.42.197.169
218.47.212.212
121.113.70.231
121.119.24.137
219.167.173.179
220.99.206.223
60.35.160.139
60.41.214.205
60.41.72.14
180.63.236.63
118.16.146.16
223.217.239.227
58.93.3.35
223.219.43.190
218.47.91.165
60.34.173.103
60.34.227.53
121.117.118.220
114.185.99.214
58.89.164.52
220.221.162.91
58.94.180.78
220.109.129.53
220.221.163.113
114.181.64.233
60.34.116.166
121.115.25.52
114.182.9.103
114.184.142.211
121.113.146.40
121.116.45.194
114.190.53.158
58.93.212.181
125.205.238.177
223.218.69.92
220.220.137.240
220.220.49.183
220.220.206.82
114.180.239.249
220.109.20.232
220.99.253.62
114.186.208.3
121.117.13.209
219.164.95.238
125.205.155.2
118.18.78.93
220.108.236.142
220.108.93.227
121.114.236.241
114.186.189.236
60.36.105.59
114.187.204.236
60.42.166.4
219.164.87.9
220.220.164.176
60.41.229.244
114.180.208.61
58.94.148.181
114.181.173.42
223.219.190.246
125.204.195.29
118.19.140.9
114.182.159.147
58.93.21.37
219.165.132.89
58.93.175.52
220.220.24.22
60.35.234.49
121.113.170.103
58.93.215.132
60.35.108.133
114.181.69.27
220.99.145.192
220.221.65.96
220.99.157.111
114.180.138.94
220.99.253.195
125.205.173.117
114.181.49.34
114.182.217.194
114.188.90.53
58.95.171.237
58.93.188.154
58.93.179.16
60.36.99.166
121.118.20.241
60.34.198.124
118.18.131.61
114.186.245.93
114.181.230.108
219.164.85.217
114.180.81.35
60.36.202.181
114.185.94.146
114.185.190.233
118.20.144.60
114.186.23.82
223.219.233.143
219.164.46.16
60.36.64.253
222.151.40.86
60.41.195.213
223.219.77.127
121.116.230.76
219.167.22.168
114.180.207.153
114.180.204.189
60.43.5.15
219.164.63.102
223.217.112.165
114.183.205.27
220.108.29.195
218.47.206.188
60.47.44.244
180.63.236.92
114.186.243.175
58.89.107.50
121.119.111.198
60.34.69.71
220.220.0.83
125.203.10.201
58.95.19.30
125.204.241.244
https://wap.sciencenet.cn/blog-1750-643481.html
上一篇:
运气也是一种实力下一篇:
明目张胆与厚颜无耻