我有个小服务器,应该是被人SYN Flood攻击了。
我不理解的是,要有利可图,才有必要攻击我吧。
SYN Flood攻击我的服务器,对他能有什么好处? 他要付出什么成本?
netstat -apntu查询,100+ SYN_RECV占用80端口,导致80端口无法处理正常的访问请求。
[root@VM-20-191-centos ~]# netstat -anptu | grep -i 'syn_recv' | wc -l
127
ip都是随机的。我该如何应对?百度搜解决方案是 SYN代理 或SYN网关,哪里有SYN代理 或SYN网关?
[root@VM-20-191-centos ~]# netstat -anptu
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 10.104.20.191:80 45.112.206.187:65357 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.190.120:29653 SYN_RECV -
tcp 0 0 10.104.20.191:80 46.8.99.34:5336 SYN_RECV -
tcp 0 0 10.104.20.191:80 103.97.1.31:12566 SYN_RECV -
tcp 0 0 10.104.20.191:80 45.195.25.122:64888 SYN_RECV -
tcp 0 0 10.104.20.191:80 156.241.184.38:38230 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.221.26.137:62876 SYN_RECV -
tcp 0 0 10.104.20.191:80 45.112.205.164:53560 SYN_RECV -
tcp 0 0 10.104.20.191:80 156.241.153.156:44965 SYN_RECV -
tcp 0 0 10.104.20.191:80 45.204.66.237:43383 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.211.12.223:45089 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.200.181:17307 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.180.59:29339 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.92.100.51:63091 SYN_RECV -
tcp 0 0 10.104.20.191:80 91.193.102.13:14177 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.151.113:15453 SYN_RECV -
tcp 0 0 10.104.20.191:80 156.236.70.241:12883 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.220.73.202:62889 SYN_RECV -
tcp 0 0 10.104.20.191:80 43.225.159.188:56911 SYN_RECV -
tcp 0 0 10.104.20.191:80 43.228.224.211:48749 SYN_RECV -
tcp 0 0 10.104.20.191:80 156.240.37.193:54516 SYN_RECV -
tcp 0 0 10.104.20.191:80 43.241.197.13:43934 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.213.8.179:26379 SYN_RECV -
tcp 0 0 10.104.20.191:80 156.250.72.197:20119 SYN_RECV -
tcp 0 0 10.104.20.191:80 103.201.25.205:11696 SYN_RECV -
tcp 0 0 10.104.20.191:80 103.60.221.119:8006 SYN_RECV -
tcp 0 0 10.104.20.191:80 118.184.28.196:36419 SYN_RECV -
tcp 0 0 10.104.20.191:80 118.184.64.14:56581 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.188.139:7948 SYN_RECV -
tcp 0 0 10.104.20.191:80 193.5.47.111:64703 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.237.207:10783 SYN_RECV -
tcp 0 0 10.104.20.191:80 45.192.177.71:51682 SYN_RECV -
tcp 0 0 10.104.20.191:80 196.63.149.231:4977 SYN_RECV -
tcp 0 0 10.104.20.191:80 118.184.46.105:27517 SYN_RECV -
tcp 0 0 10.104.20.191:80 154.203.235.226:3753 SYN_RECV -
tcp 0 0 10.104.20.191:80 39.109.126.232:31366 SYN_RECV -
体现下牛逼感吧,新手特爱干这种事,服务器搞搞防火墙,ping不要回