记一次网络攻击事件处理过程

10月9日本来是平常的一天,经过一天的上班后,身心俱疲的我踏上了回家的公交车。本来安安静静的一天,突然被朋友的一个微信所打破:你的网站突然变得无法访问。
我大惊失色,连忙用手机浏览器访问了一下知名的博客网站https://www.minsv.com 结果不出所料,访问异常。
原本放松的心情顿然全无,究竟是哪里出了问题。脑海中,出现了几个可能的原因都被我一一否决。无风不起浪,这次事件并不简单。
回到家后,连忙用ssh远程连接上服务器,一窥究竟。
ss -tunl
先是查看了服务的端口,都正常。
curl 127.0.0.1:443
响应超时,本地访问都不通。

发现大量的TCP连接,而且都来自同一个IP

并发连接竟然达到518个,可怕。突破了网站访问的并发高峰,这是咱的最大并发连接数了。

显然网站遭受到了DOS攻击,攻击IP为113.87.192.74

咱一直是遵纪守法的好公民,为啥会受到攻击呢?我百思不得姐。

通过抓包观察发现,攻击还在持续,大量的syn同步报文如潮水般涌来。可能是觉得我的实力不足,还没上DDOS攻击,还手下留情了,在此我表示感谢。

当务之急是恢复网站的正常访问,封禁攻击的IP
iptables -A INPUT -s 113.87.192.74 -j DROP

并发连接明显减少,网站恢复了往日的宁静。

对方在5:30分钟开始发动攻击,经纬度是在深圳,可以看到大量的请求404.这就是传说中的拒绝服务攻击,干扰正常的网站访问。


截止至发稿时分,攻击流量累计达到300M左右。

最后写了一个shell脚本,用于Dos攻击的防御自动化:

https://github.com/minsvc/DefendDosAttack

当然这个脚本还是存在弱点,iptabels规则的数目显然不可能是无限的。

78 thoughts on “记一次网络攻击事件处理过程

  1. Get Laid

    Right his very second you could be getting laid.
    Think about that for a moment. You could be
    having sex instead of jerking off. Go to http://getlaid.xyz and find yourself a woman who wants to fuck.
    You’ll be surprised when you’re balls deep inside a pretty
    princess.

    Reply
  2. Best Online Dating

    Are you searching for love? Have you tried unsuccessfully
    to meet the person of your dreams at other sites?
    Almost all of those dating sites are a waste of your time.
    Check out http://bestonlinedating.xyz and see what the difference
    is. It’s full of good looking women who are searching for
    Mr. Right. Join today and be prepared to live happily ever after.

    Reply
  3. Cute Cam Girls

    The cutest cam girls are just one click away. These are girls who will make your dick hard instantly.

    Visit http://cutecamgirls.xyz and start talking to
    these girls. You’ll be surprised when they show you their tits.
    Nothing is better than talking to girls who get totally naked right before your very eyes.

    Reply
  4. beylikduzu escort

    Simply wish to say your article iis as astounding.

    The clearness in your post is just cool and i could assume you’re an expert on this subject.
    Fine wth your permission let me to grab your RSS feed to keep up
    to dae with forthcoming post. Thanks a million and pleae carry on the rewardiing work.

    Reply
  5. avcilar escort

    It’s really a great and helpful piece of information.
    I am satisfied that you shared this helpful info with us.
    Please keep us informed likke this. Thanks for sharing.

    Reply
  6. Date Fat Girls

    Greate article. Keep writing such kind of information on your blog.
    Im really impressed by your blog.
    Hi there, You’ve performed an excellent job. I’ll certainly
    digg it and in my opinion suggest to my friends. I am confident
    they’ll be benefited from this website.

    Reply
  7. maltepe escort

    Does your website have a contact page? I’m having a tough time locating it but, I’d like to
    send you an email. I’ve got some creative ideas for youjr blogg you might be interested inn hearing.
    Either way, great site and I look forward to seeing it expand ovger time.

    Reply
  8. maltepe escort

    I’ve leazrn seveeral good stuff here. Definitely price
    bookmqrking for revisiting. I surprise how so much effort you set to create one of these wonderful informative
    site.

    Reply
  9. umraniye escort

    Greetings I am so delighted I found your blog page, I really
    found you by error, while I was searching oon Askjeeve for something else, Anyhw I amm here
    now and would just like to say many thanks for a tremendous
    post and a all round entertaining blog (I also love the theme/design), I don’t have time to
    browse it all at the minute but I have saved
    it and also included your RSS feeds, so when I have time I will be back to read more, Pleasee do keep up
    the great work.

    Reply
  10. Ultra HQ Beautiful Asshole

    Hello There. I found your blog using msn. This
    is a really well written article. I’ll be sure to bookmark it and return to read more of your useful information. Thanks for the post.

    I will definitely return.

    Reply
  11. Sleep With Younger Women

    I’ve been surfing online more than three hours today, but I by no means discovered any fascinating article like yours.
    It’s beautiful worth enough for me. Personally, if all site owners and
    bloggers made excellent content material as you probably did, the web shall be a lot more helpful than ever before.

    Reply
  12. Dotty

    You actually make it appear really easy with your presentation but I in finding this
    topic to bbe actually one thing that I think I would
    by no means understand. It seems too complex and very
    wide for me. I am looking forward in yoour subsequent put up,
    I’ll attempt to get the grasp of it!

    Reply
  13. Shonda

    Hllo just wanted to give you a quick heads up.
    The text in your article swem to be running off the screen in Ie.

    I’m not sure if this iis a formatting issue or something to do with
    browser compatibility but I figured I’d post
    to let you know. The tyle and design look great though!

    Hope you get the problem solve soon. Thanks

    Reply
  14. Buy Email List

    Yesterday, while I was at work, my cousin stole my iphone and tested to see if it can survive a 25 foot drop, just so she can be a youtube sensation. My iPad is now destroyed and she has 83 views. I know this is completely off topic but I had to share it with someone!

    Reply
  15. nipples

    We’re a gaggle of volunteers and opening a brfand new scheme in our community.
    Your web site offerted us with valuable information to work on. You have performed an impressive taskk
    and our entire group will likely be thankful to you.

    Reply
  16. Batıkent nakliyat

    Batıkent nakliyat işlemlerinde düşünmenize gerek yok. Nakliyat firması olarak eşyalarınızın kol, ambalaj, montaj, demontjı tecrübeli mobilyacımız ve çalışanlarımız tarafından titizlikle sökülüp ambalaj altına alındıktan sonra taşınma işlemi sağlanır. Yeni evinizde ekibimiz yine kurulum dizayn işlemlerini gerçekleştirerek taşınma işlemlerini sağlarız. Ankara Batıkent nakliyat firmamız uzun yıllardır sektörün içerisinde kalitenin göstergesi olarak sizlerin yanında olmayı kendine vazife edinmiştir. Uzman personellerle birlikte kırılmadan, dökülmeden, sorun yaşanmadan ve güvenli şekilde ev eşyalarınızı yeni yuvalarınıza ulaştırıyor.

    Reply
  17. Fat Girl Cams

    Hmm is anyone else encountering problems with the pictures on this blog loading?
    I’m trying to determine if its a problem on my end or if it’s the blog.
    Any feedback would be greatly appreciated.

    Reply
  18. Squirt Cams

    Wonderful beat ! I would like to apprentice while you amend your web site, how could i subscribe for a blog site?
    The account helped me a acceptable deal. I had been tiny bit acquainted of this your
    broadcast provided bright clear concept

    Reply
  19. cn360led.com

    Hi there! Would you mind if I share your blog with my myspace group? There’s a lot of people that I think would really appreciate your content. Please let me know. Thanks

    Reply
  20. Cuckold Cams

    I was suggested this web site by my cousin. I’m not sure whether this post is written by him as no one else know such detailed about my trouble.
    You are amazing! Thanks!

    Reply
  21. Anal Cams

    Hello just wanted to give you a quick heads up.
    The text in your article seem to be running off the screen in Ie.
    I’m not sure if this is a format issue or something to do with web browser compatibility but I thought I’d post to let you know.
    The design look great though! Hope you get the issue fixed soon. Thanks

    Reply
  22. Blonde Cam girls

    You are so interesting! I don’t believe I’ve truly read through something like that
    before. So great to find someone with original thoughts on this topic.
    Seriously.. many thanks for starting this up. This web site
    is one thing that’s needed on the internet, someone with a little originality!

    Reply
  23. صيانة ميكروويف ال جى

    صيانة ميكروويف شارب

    رقم صيانة ميكرويف جاك

    مركز صيانة ميكروويف هيونداى

    رقم مركز صيانة ميكروويف اوليمبك

    صيانة ميكروويف دايو

    رقم مركز صيانة ميكروويف جالانز

    مركز صيانة ميكروويف ناشيونال

    مركز صيانة ميكروويف باناسونيك

    رقم مركز صيانة ميكرويف ال جى

    صيانة ميكرويف كينوود

    رقم مركز صيانة ميكرويف سامسونج

    رقم صيانة ميكرويف رقم مركز
    صيانة ميكروويف شارب

    رقم مركز صيانة ميكرويف جاك

    مركز صيانة ميكرويف هيونداى

    رقم صيانة ميكروويف اوليمبك

    رقم صيانة ميكروويف دايو

    مركز صيانة ميكروويف جالانز

    رقم صيانة ميكرويف ناشيونال

    صيانة ميكروويف باناسونيك

    رقم مركز صيانة ميكرويف ال جى

    مركز صيانة ميكروويف كينوود

    رقم صيانة ميكرويف سامسونج

    مركز صيانة ميكرويف
    رقم صيانة ميكروويف شارب

    صيانة ميكروويف جاك

    صيانة ميكرويف هيونداى

    مركز صيانة ميكرويف اوليمبك

    صيانة ميكروويف دايو

    رقم صيانة ميكرويف جالانز

    مركز صيانة ميكروويف ناشيونال

    رقم صيانة ميكروويف باناسونيك

    مركز صيانة ميكروويف ال جى

    مركز صيانة ميكروويف كينوود

    رقم مركز صيانة ميكرويف سامسونج

    رقم صيانة ميكرويف

    Reply
  24. Cute Hedgehog

    Nice post. I used to be checking constantly this blog and I’m impressed!
    Extremely helpful info specifically the ultimate part 🙂 I handle such information a lot.

    I used to be seeking this certain information for
    a long time. Thank you and good luck.

    Reply
  25. laura_cherry

    You really make it seem so easy with your presentation but I find this matter to be
    really something which I think I would never understand.
    It seems too complicated and very broad for me. I am looking
    forward for your next post, I’ll try to get the hang of it!

    Reply
  26. Shelby

    Thanks on your marvelous posting! I really enjoyed reading it,you will be a great author.I will be
    sure too bookmark your blog and will come back in tthe foreseeable future.

    I want to encourage yourself too continue your great posts, have a nice morning!

    Reply
  27. Nila

    Qualitty content is the crucial to interest the viewers to pay a quick visit the site, that’s
    what this site is providing.

    Reply
  28. lalikuo

    Hello there! This post could not be written any better!
    Reading through this post reminds me of my good old room mate!
    He always kept talking about this. I will
    forward this page to him. Fairly certain he will have a good read.
    Many thanks for sharing!

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *