found some fake peers use three handshakes to occupy a large number of TCP connections. Can be blocked?

[63780223]

Suggestion

发现有虚假peer使用三次握手来大量占用TCP连接，能否屏蔽

ipv4 2 tcp 6 375582 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=52098 dport=43946 src=77.219.5.97 dst=192.168.1.161 sport=43946 dport=52098 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431992 ESTABLISHED src=176.52.32.143 dst=192.168.1.161 sport=50501 dport=64475 src=192.168.1.161 dst=176.52.32.143 sport=64475 dport=50501 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431986 ESTABLISHED src=45.183.226.254 dst=192.168.1.161 sport=47182 dport=64475 src=192.168.1.161 dst=45.183.226.254 sport=64475 dport=47182 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431947 ESTABLISHED src=184.22.119.223 dst=192.168.1.161 sport=65049 dport=64475 src=192.168.1.161 dst=184.22.119.223 sport=64475 dport=65049 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 378587 ESTABLISHED src=192.168.1.161 dst=77.219.15.215 sport=63935 dport=31868 src=77.219.15.215 dst=192.168.1.161 sport=31868 dport=63935 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 377337 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=52843 dport=43941 src=77.219.5.97 dst=192.168.1.161 sport=43941 dport=52843 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 300 ESTABLISHED src=192.168.88.2 dst=192.168.1.161 sport=14852 dport=22 src=192.168.1.161 dst=192.168.88.2 sport=22 dport=14852 [ASSURED] mark=0 zone=0 use=3 ipv4 2 tcp 6 351469 ESTABLISHED src=192.168.1.161 dst=77.219.1.60 sport=57340 dport=41703 src=77.219.1.60 dst=192.168.1.161 sport=41703 dport=57340 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431991 ESTABLISHED src=222.124.183.212 dst=192.168.1.161 sport=10779 dport=64475 src=192.168.1.161 dst=222.124.183.212 sport=64475 dport=10779 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 359743 ESTABLISHED src=192.168.1.161 dst=77.219.15.138 sport=57900 dport=31387 src=77.219.15.138 dst=192.168.1.161 sport=31387 dport=57900 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 351356 ESTABLISHED src=192.168.1.161 dst=77.219.1.60 sport=56190 dport=41703 src=77.219.1.60 dst=192.168.1.161 sport=41703 dport=56190 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 385175 ESTABLISHED src=192.168.1.132 dst=192.168.1.161 sport=35168 dport=445 src=192.168.1.161 dst=192.168.1.132 sport=445 dport=35168 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 299 ESTABLISHED src=77.247.181.209 dst=192.168.1.161 sport=39635 dport=64475 src=192.168.1.161 dst=77.247.181.209 sport=64475 dport=39635 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 379605 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=58301 dport=9483 src=77.219.5.97 dst=192.168.1.161 sport=9483 dport=58301 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 378423 ESTABLISHED src=192.168.1.161 dst=77.219.3.66 sport=62519 dport=20052 src=77.219.3.66 dst=192.168.1.161 sport=20052 dport=62519 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 383180 ESTABLISHED src=192.168.1.161 dst=77.219.15.138 sport=61004 dport=50182 src=77.219.15.138 dst=192.168.1.161 sport=50182 dport=61004 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 353394 ESTABLISHED src=192.168.1.161 dst=77.219.5.78 sport=55491 dport=7634 src=77.219.5.78 dst=192.168.1.161 sport=7634 dport=55491 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431994 ESTABLISHED src=190.122.76.4 dst=192.168.1.161 sport=2515 dport=64475 src=192.168.1.161 dst=190.122.76.4 sport=64475 dport=2515 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 370331 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=52279 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=52279 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 375638 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=52926 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=52926 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 382083 ESTABLISHED src=192.168.1.161 dst=77.219.9.47 sport=51245 dport=38355 src=77.219.9.47 dst=192.168.1.161 sport=38355 dport=51245 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 387944 ESTABLISHED src=192.168.1.161 dst=77.219.5.78 sport=51451 dport=20052 src=77.219.5.78 dst=192.168.1.161 sport=20052 dport=51451 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 382588 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=55986 dport=43998 src=77.219.5.97 dst=192.168.1.161 sport=43998 dport=55986 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 383168 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=61121 dport=9537 src=77.219.5.97 dst=192.168.1.161 sport=9537 dport=61121 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431979 ESTABLISHED src=177.101.165.146 dst=192.168.1.161 sport=63952 dport=64475 src=192.168.1.161 dst=177.101.165.146 sport=64475 dport=63952 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 416706 ESTABLISHED src=192.168.1.161 dst=77.219.6.241 sport=64455 dport=41405 src=77.219.6.241 dst=192.168.1.161 sport=41405 dport=64455 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 381571 ESTABLISHED src=192.168.1.161 dst=77.219.15.215 sport=61641 dport=31852 src=77.219.15.215 dst=192.168.1.161 sport=31852 dport=61641 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 382996 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=59733 dport=58687 src=77.219.5.97 dst=192.168.1.161 sport=58687 dport=59733 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 382482 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=55022 dport=44016 src=77.219.5.97 dst=192.168.1.161 sport=44016 dport=55022 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 384761 ESTABLISHED src=192.168.1.161 dst=77.219.15.215 sport=56798 dport=31852 src=77.219.15.215 dst=192.168.1.161 sport=31852 dport=56798 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 383578 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=64866 dport=58687 src=77.219.5.97 dst=192.168.1.161 sport=58687 dport=64866 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 376918 ESTABLISHED src=192.168.1.161 dst=77.219.9.47 sport=63978 dport=38355 src=77.219.9.47 dst=192.168.1.161 sport=38355 dport=63978 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 370192 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=51249 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=51249 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 385183 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=59891 dport=20052 src=77.219.5.97 dst=192.168.1.161 sport=20052 dport=59891 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431956 ESTABLISHED src=85.215.226.138 dst=192.168.1.161 sport=64389 dport=64475 src=192.168.1.161 dst=85.215.226.138 sport=64475 dport=64389 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431998 ESTABLISHED src=192.168.88.2 dst=192.168.1.161 sport=14821 dport=5887 src=192.168.1.161 dst=192.168.88.2 sport=5887 dport=14821 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 383131 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=60827 dport=9433 src=77.219.5.97 dst=192.168.1.161 sport=9433 dport=60827 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 376252 ESTABLISHED src=192.168.1.161 dst=77.219.14.244 sport=58294 dport=20052 src=77.219.14.244 dst=192.168.1.161 sport=20052 dport=58294 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 375478 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=51220 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=51220 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 379379 ESTABLISHED src=192.168.1.161 dst=77.219.5.97 sport=56222 dport=51064 src=77.219.5.97 dst=192.168.1.161 sport=51064 dport=56222 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 404183 ESTABLISHED src=192.168.1.161 dst=77.219.10.76 sport=55239 dport=49354 src=77.219.10.76 dst=192.168.1.161 sport=49354 dport=55239 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 377104 ESTABLISHED src=192.168.1.161 dst=77.219.15.215 sport=50672 dport=31852 src=77.219.15.215 dst=192.168.1.161 sport=31852 dport=50672 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 388083 ESTABLISHED src=192.168.1.161 dst=148.252.132.232 sport=53017 dport=64951 src=148.252.132.232 dst=192.168.1.161 sport=64951 dport=53017 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 376076 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=56408 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=56408 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 299 ESTABLISHED src=151.82.49.100 dst=192.168.1.161 sport=4972 dport=64475 src=192.168.1.161 dst=151.82.49.100 sport=64475 dport=4972 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 376467 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=59999 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=59999 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 373680 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=50430 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=50430 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 431997 ESTABLISHED src=123.218.189.228 dst=192.168.1.161 sport=43433 dport=64475 src=192.168.1.161 dst=123.218.189.228 sport=64475 dport=43433 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 360218 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=62097 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=62097 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 351633 ESTABLISHED src=192.168.1.161 dst=77.219.1.60 sport=58479 dport=25346 src=77.219.1.60 dst=192.168.1.161 sport=25346 dport=58479 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 355121 ESTABLISHED src=192.168.1.161 dst=77.219.5.78 sport=52734 dport=7634 src=77.219.5.78 dst=192.168.1.161 sport=7634 dport=52734 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 385225 ESTABLISHED src=192.168.1.166 dst=192.168.1.161 sport=61615 dport=5887 src=192.168.1.161 dst=192.168.1.166 sport=5887 dport=61615 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 383830 ESTABLISHED src=192.168.1.161 dst=77.219.3.66 sport=51823 dport=20052 src=77.219.3.66 dst=192.168.1.161 sport=20052 dport=51823 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 299 ESTABLISHED src=103.137.12.164 dst=192.168.1.161 sport=42534 dport=64475 src=192.168.1.161 dst=103.137.12.164 sport=64475 dport=42534 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 374937 ESTABLISHED src=192.168.1.161 dst=77.219.15.215 sport=61265 dport=38753 src=77.219.15.215 dst=192.168.1.161 sport=38753 dport=61265 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 403789 ESTABLISHED src=192.168.1.161 dst=77.219.10.76 sport=53660 dport=49354 src=77.219.10.76 dst=192.168.1.161 sport=49354 dport=53660 [ASSURED] mark=0 zone=0 use=2 ipv4 2 tcp 6 363603 ESTABLISHED src=192.168.1.161 dst=77.219.13.111 sport=58851 dport=40969 src=77.219.13.111 dst=192.168.1.161 sport=40969 dport=58851 [ASSURED] mark=0 zone=0 use=2

[fooler64]

使用卡巴斯基