After two years of development, the first release of the Messor project, which develops free, independent, and decentralized software for network security and transparent data collection on attacks and scans, is now available. The project's developers have launched the Messor.Network and published a plugin for the e-commerce platform. OpenCart3. The plugin code is written in PHP and is distributed under the Apache 2.0 license. A module for nginx/apache2 (C++), a plugin for Magento (php) and plugin for Wordress (php).
The project provides a combination of an IPS, a honeypot, and a hybrid P2P client that provides protection against scanning, regardless of the purpose, be it vulnerability exploitation, bots, search engines, or other applications. The main difference between Messor and other IPS is its network structure. Interconnected sites form a single P2P network, the Messor Network, where each participant collects data on attackers, sends information to other network participants, and receives daily database updates. Each Messor network participant is responsible for distributing the current database to other network participants and sending it to central servers. Server networks of collected attack data.
The database contains:
- List IP addresses, which the network has recognized as dangerous, which means that attacks from them have been repeatedly recorded in recent times;
- Lists of ip-addresses of various bots;
- Regular expressions for detecting attacks based on UserAgent/GET/POST/COOKIE data;
- Regular expressions to detect bots;
- A list of honeypots to define scans.
Source: opennet.ru
