97¹ú¼Ê

µã»÷ÏÂÔØ¡¶ÍòÕ×Ô°ÇøÒÔÌ«²Ê¹âÑо¿±¨¸æ¡· £¬½âËøÍòÕ×Ô°ÇøÍøÂ罨ÉèÖ¸ÄÏ
Á¬Ã¦ÏÂÔØ
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨Ðû²¼
Ô¤Ô¼Ö±²¥
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¼Æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¼Æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷»ï°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

ÔÚÍøÂçÖÐÒ²Òª×èÖ¹"±»Ñ¬È¾" £¬¿´ºÚÓòÃûµÄΣº¦ÓëÓ¦¶Ô²½·¥ |ÔËάʵս¼Ò

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ Ðû²¼Ê±¼ä£º2020-04-14
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

×÷ÕߣºÎâÓ°  Áõ»Ô»Ô

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

2020ÄêÒÁʼ £¬Ò»ÖÖÃûΪ“COVID-19”µÄÐÂÐ͹Ú×´²¡¶¾ÔÚÈ«ÇòËÁŰ £¬¶øÔÚÍøÂçÌìÏÂÀï £¬²¡¶¾Ò²Ã»ÏÐ×Å¡£½èÖúÓÚÕæÊµÌìÏÂÀïµÄ²¡¶¾ËÁŰ £¬ÍøÂç¹¥»÷Õ߳ûúÈö²¥¶ñÒâÈí¼þ £¬´óÅúÓû§“²ÒÔâѬȾ”¡£ÕâÅú±»Ñ¬È¾µÄÓû§ £¬½èÖúÓÚ“ºÚÓòÃû”µÄ×ÊÖú £¬¼ÌÐøÔÚÍøÂç¿Õ¼äÄÚ¶Ô²¡¶¾“ËÁÒâÈö²¥” £¬ÄÇô“ºÚÓòÃû”ÊÇʲô £¬¶ÔÎÒÃÇÓÐʲôӰÏì £¬±¾Æª½«ÎªÁÐλÖðÒ»µÀÀ´¡£


ºÚÓòÃûÊÇʲô£¿

 

“ºÚÓòÃû”Ò»Ñùƽ³£Ö¸µÄÊÇÈçÏÂÁ½ÖÖÀàÐ͵ÄÓòÃû£º

  1. ͨ¹ý·ÇÕý¹æÇþµÀ¹ºÖá¢ÈªÔ´²»Ã÷µÄÓòÃû £»
  2. ¶ñÒâÈí¼þÓÃÓÚÔÚ½©Ê¬ÍøÂçÖÐʵÏÖ¹ÜÀí¼°¿ØÖƵȹ¦Ð§¶øÊ¹ÓõÄÓòÃû £»


ÕâÀïÎÒÃÇËùÖ¸µÄ“ºÚÓòÃû”ÌØÖ¸µÚ¶þÀà £¬¼´¶ñÒâÈí¼þ£¨ÈçÍڿ󲡶¾¡¢½©Ê¬ÍøÂç¡¢ÀÕË÷²¡¶¾µÈ£©Í¨¹ý“ºÚÓòÃû”ʵÏÖ±»¿ØÖÆÖÕ¶ËÓë¿ØÖÆ·þÎñÆ÷Ö®¼ä¼á³ÖͨѶµÄÓòÃû¡£“ºÚÓòÃû”»¹¿É·ÖΪ¾²Ì¬ºÍ¶¯Ì¬Á½Àà¡£

¾²Ì¬ºÚÓòÃû³£ÓÃÓÚÍÚ¿ó¡¢ÀÕË÷²¡¶¾µÈÍøÂç¹¥»÷ÐÐΪ¡£

¶¯Ì¬ºÚÓòÃû³£ÓÃÓÚ½©Ê¬ÍøÂç»òC&CµÈÍøÂç¹¥»÷ÐÐΪ £¬¾­³£Ê¹ÓÃDGAËã·¨(Domain Generate Algorithm)ÌìÉú¡£

¶Ô¶ñÒâ³ÌÐò¶øÑÔ £¬Àο¿µÄ¶ñÒâIPµØÖ·¼«Ò×±»Çå¾²×°±¸¼ì²â²¢×è¶Ï £¬ÎÞ·¨ÊµÏÖÒþ²ØÓëÓÐÓõؿØÖÆ¡£ÒÔÊÇ £¬½©Ê¬ÍøÂçÓëC&C¹¥»÷ÔÚÉèÖöñÒâÈí¼þʱÆð¾¢×èֹʹÓÃÀο¿IPµØÖ·×÷Ϊ±»¿ØÖÕ¶ËÓë·þÎñÆ÷¶ËµÄÅþÁ¬¡£ÔÚ³ÌÐòÖо­³£Ê¹ÓÃDGAËã·¨À´ÌìÉúËæ»úÓòÃû(ºÚÓòÃû) £¬ÒÔÈÆ¹ý³£¼ûµÄÇå¾²·À»¤ÊÖ¶Î £¬ÊµÏÖ¶Ô±»¿ØÖƶËÒ»Á¬¡¢ÓÐÓõĿØÖÆ¡£


ͨ¹ýDGAËã·¨ÌìÉúµÄºÚÓòÃûÔÚ»¥ÁªÍøÖо­³£ÎÞ·¨»á¼û £¬ÓÉÓÚ¶ñÒâ¹¥»÷ÕßÔÚ¶ñÒâÈí¼þÔËÐÐʱ £¬²Å¶ÔÓòÃû¾ÙÐÐ×¢²á £¬ÒÔÊÇÎÒÃÇ·¢Ã÷µÄºÚÓòÃû¾­³£ÎÞ·¨Ö±½Ó¾ÙÐлá¼û¡£


ºÚÓòÃûÓëͨË×ÓòÃûµÄÇø±ðÓÐÄÄЩ£¿


 ÏÖÓÃÏÖ×¢²á

ÓÉÓÚ×¢²áÓòÃûÐèÒªÓöÈ £¬¹Ê¶ñÒâ¹¥»÷Õß¾­³£ÔÚºÚÓòÃûÍýÏëÉÏÏßǰ²Å×¢²áÓòÃû £¬ÔÚ´ËʱºÚÓòÃû²Å¿ÉÔÚ»¥ÁªÍøÇéÐÎÖлá¼û¡£

 Ê¹ÓÃʱ¼ä¶Ì

ÓÉÓÚÏÖÓÐÇå¾²·À»¤²½·¥¶ÔÍøÂçÁ÷Á¿ÖеÄÐÐΪ¾ÙÐмì²â £¬·¢Ã÷¿ÉÒÉÇëÇóºó½«ÉÏ´«ÔƶËÇå¾²¹ÜÀíÖÐÐÄ¡£ÒÔÊÇÔÚºÚÓòÃûÉúЧʹÓúó £¬ÏÖÓмì²â¡¢·À»¤×°±¸¿É¿ìËÙʶ±ð²¢¹ã²¥·À»¤¹æÔòʵÏÖÓÐÓÃ×è¶Ï £¬ÎªÁË×èÖ¹³¤Ê±¼ä¶¯Ì¬ÓòÃûµÄ̻¶ £¬¶ñÒâ¹¥»÷ʹÓÃÒ»¸öÌØ¶¨ºÚÓòÃûµÄʱ¼ä¶¼²»³¤ £¬Í¨¹ýÔÚ1-7Ìì×óÓÒ¡£

 Í³Ò»¿î¶ñÒâÈí¼þÓ²±àÂë¶à¸öºÚÓòÃû

ͳһ¿î¶ñÒâÈí¼þÔÚÖÆ×÷ʱ¿ÉÄÜ»áÄÚÖöà¸öºÚÓòÃû £¬ÒÔÌá¸ßÀÖ³ÉÅþÁ¬½©Ê¬ÍøÂçµÄ¼¸ÂÊ¡£


ºÚÓòÃûµÄ³£¼ûͨѶÀú³ÌÊÇÔõÑùµÄ£¿

 

µ±Ï»¥ÁªÍøÇéÐÎÖÐ £¬¾­³£Ê¹ÓúÚÓòÃûÀ´ÊµÏÖÒþ²Ø½©Ê¬ÍøÂçÖÐÖ÷¿Ø¶ËÕæÊµIP £¬ÒòÆäʹÓÃÓòÃûµÄ¶¯Ì¬ÐÔ £¬¿ÉÈÆ¹ý»ùÓÚÌØÕ÷¼ì²âµÄÇå¾²·À»¤×°±¸·À»¤¹¦Ð§¡£


ÒÔ¶¯Ì¬ºÚÓòÃûΪÀý £¬ËµÃ÷ºÚÓòÃûµÄʹÓó¡¾°¼°Ê¹ÓÃÀú³Ì¡£

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

1¡¢Ñ¬È¾²¢ÌìÉúËæ»úÓòÃû

¶ñÒâְԱͨ¹ý¶ñÒâÓʼþ¡¢ÍøÂçÈëÇÖµÈÊÖ¶Î £¬ÏòÓû§ÅÌËã»úͶ·Å¶ñÒⲡ¶¾ £¬ÊÍ·ÅC&C±»¿Ø¶ËÈí¼þ¡£±»¿Ø¶ËÈí¼þ°²Åźó £¬Æ¾Ö¤DGAËã·¨ÌìÉúÎ±Ëæ»úÓòÃû¡£


2¡¢×¢²áËæ»úÓòÃû £¬±»¿Ø¶Ë·´ÏòÅþÁ¬Ö÷¿Ø¶Ë

¶ñÒâ¹¥»÷Õß¿ÉÌáǰע²á²¿·ÖºÚÓòÃû £¬ÔÚ¶ñÒâ³ÌÐòѬȾÖն˺óʹÓÃDGAËã·¨ÌìÉúÎ±Ëæ»úÓòÃû³Ø £¬Ê¹ÓóØÖÐÓòÃûÖðÒ»Ö±DNS·þÎñÆ÷ÇëÇó¶ÔÓ¦µÄIPµØÖ· £¬Ö±ÖÁÀֳɻñÈ¡IPµØÖ·ºó¼´¾ÙÐÐC&C»á»°ÅþÁ¬ £¬¾ÙÐз´ÏòÅþÁ¬¡£

¶ñÒâ¹¥»÷Õß¿ÉÌáǰע²á²¿·ÖºÚÓòÃû £¬ÔÚ¶ñÒâ³ÌÐòѬȾÖն˺óʹÓÃDGAËã·¨ÌìÉúÎ±Ëæ»úÓòÃû³Ø £¬Ê¹ÓóØÖÐÓòÃûÖðÒ»Ö±DNS·þÎñÆ÷ÇëÇó¶ÔÓ¦µÄIPµØÖ· £¬Ö±ÖÁÀֳɻñÈ¡IPµØÖ·ºó¼´¾ÙÐÐC&C»á»°ÅþÁ¬ £¬¾ÙÐз´ÏòÅþÁ¬¡£


¹ØÓÚÀúÊ·ÉÏ·¢Ã÷µÄºÚÓòÃûʾÀý£º

  • zugzwang.me
  • tr069.online
  • tr069.tech
  • tr069.support
  • zvdhcktzjoz.biz
  • 1cgqypq2o9mf4d3pgt0100twa.net
  • d7gdxaph63ks231iac1gfmf0i.biz
  • pwmdyyj.info
  • sxekhtn.net
  • bbhxyjv.org
  • ihbgynr.biz
  • ywqksthri.net
  • ……


ºÚÓòÃûµÄʶ±ð

 

һЩµÚÈý·½ÍþвÇ鱨¹«¹²Æ½Ì¨¿ÉÒÔ¾ÙÐкÚÓòÃûµÄЭÖúÈ·ÈÏ£¨ÒÔϽØÍ¼ÒÔ΢²½ÔÚÏßÍþвÇ鱨ÉçÇøÎªÀý£©£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾


ͬʱ½èÖúÓÚÎÒ˾RG-BDS´óÊý¾ÝÇ徲ƽ̨¡¢RG-BDS-TSPÁ÷Á¿Ì½ÕëÒÔ¼°RG-APT¸ß¼¶Íþв¼ì²âϵͳ £¬¾ùÄܵÚһʱ¿Ì·¢Ã÷ºÚÓòÃûµÄÆÊÎöÓë»á¼û £¬²¢¾ÙÐи澯¡£


RG-BDS´óÊý¾ÝÇ徲ƽ̨ͳһ¸æ¾¯£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

RG-BDS-TSPÁ÷Á¿Ì½Õë¸æ¾¯£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

RG-APT¸ß¼¶Íþв¼ì²âϵͳ¸æ¾¯£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

ºÚÓòÃû·À»¤³£¼û³¡¾°

 

ij¿Í»§±£´æ±»¶ñÒâÈí¼þѬȾµÄÖ÷»ú £¬ÏòÍâÍø·¢ËÍÒì³£µÄºÚÓòÃûÅþÁ¬ÇëÇó £¬É϶ËÔËÓªÉÌ¡¢Éϼ¶µ¥Î»µÈ»ú¹¹·¢Ã÷¿Í»§´¦±£´æµÄÒì³£Á÷Á¿ £¬Í¬²½¿Í»§´¦Öóͷ£ÒªÇó¡£


³ýÁËʵʱ¶ÔÔâÊܶñÒâÈí¼þѬȾµÄÖ÷»ú¾ÙÐв¡¶¾É¨³ýµÈÇå¾²¼Ó¹Ì²½·¥Íâ £¬¿ÉʹÓÃ97¹ú¼ÊÈ«ÐÂNGFWµÄDNS¹ýÂ˹¦Ð§£¨»òDNSϴ媹¦Ð§£© £¬½øÒ»²½¿ØÖƺÚÓòÃûµÄÒì³£»á¼û £¬½«Ïà¹ØÎ£º¦½µÖÁ×îС¡£


³£¼ûÍØÆËÈçÏ£º

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

ǰÖÃÌõ¼þ˵Ã÷£º

  1. ·À»ðǽÄܹ»Õý³£ÅþÁ¬¹«Íø £»
  2. ·À»ðǽ±ØÐèÒѹºÖÃÊÚȨ £¬ÇÒÊÚȨÈÔÔÚÓÐÓÃÆÚÄÚ £»


Ô­Àí˵Ã÷

 

97¹ú¼ÊÈ«ÐÂNGFWµÄDNS¹ýÂ˹¦Ð§ £¬¹ËÃû˼Òå £¬·À»ðǽÔÚÄÚ²¿Öж¾Ö÷»ú»á¼ûºÚÓòÃûʱµÄDNS½»»¥½×¶ÎÆð¿ØÖÆÏÞÖÆ×÷Óá£


ÔÚ·À»ðǽ¾ÙÐÐDNS¹ýÂËÀú³ÌÖУº

 

  1. ·À»ðǽÐèÒªÓëÔÆ¶Ë·þÎñÆ÷¾ÙÐн»»¥ £»
  2. µ±µÚÒ»´Îʶ±ðµ½Ä³¸öÓòÃû£¨¼ÙÉèΪÓòÃûA£©µÄÆÊÎöÇëÇóʱ £¬·À»ðǽ»áÔÚת·¢DNS±¨ÎĵÄͬʱÓëÔÆ¶ËÈ·ÈÏÓòÃû·ÖÀà £¬²¢¼Í¼ÔÚ·À»ðǽµÄ»º´æÐÅÏ¢ÖÐ £»
  3. ÔÚ»º´æÐÅÏ¢ÓÐÓõÄÌõ¼þÏ £¬µÚ¶þ´ÎÒÔ¼°¸ü¶à´ÎÇëÇóʶ±ðµ½ÓòÃûAµÄÆÊÎöÇëÇóʱ·À»ðǽ¿ÉÒÔÖ±½Ó¾ÙÐд¦Öóͷ£ £»

ÒÔ·À»ðǽ¶Ôij¸öÓòÃû£¨¼ÙÉèΪÓòÃûA£©¾ÙÐÐDNS¹ýÂ˵ÄÊÂÇéÁ÷³ÌµÄÐÎò £¬¿ÉÓÃÏÂͼ¼òÊö£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

ÏêϸÉèÖÃ

 

1¡¢Óû§»ù±¾ÉÏÍøÉèÖãº

ƾ֤ÏÖʵÐèÇó £¬½«·À»ðǽ°²Åŵ½ÍøÂçÖÐ £¬ÊµÏÖ»ù±¾ÉÏÍøÐèÇó £»

2¡¢·À»ðǽÊÚȨע²áÓ뼤»î£º

ƾ֤·À»ðǽÊÚȨע²áÁ÷³ÌÍê³É×¢²áÓ뼤»î £¬¼¤»îÍê³ÉºóÈ·±£Ä¿½ñ×°±¸ÈÔ´¦ÔÚÊÚȨÓÐÓÃÆÚÄÚ £¬ÈçÏÂͼËùʾ£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

3¡¢ÉèÖÃDNS¹ýÂËÄ£°å£º

ͨ¹ýWeb ½øÈë ¹¤¾ßÉèÖÃ--DNS¹ýÂËÄ£°å £¬×°±¸Ä¬ÈÏÒÑÓÐDNSÄ£°å“default” £¬¿Éµã»÷ÓÒÉϽǵÄÔöÌí°´Å¥ £¬ÐÂÔöÒ»¸öÄ£°å £¬Èç±¾ÀýÔöÌíµÄÄ£°å“dns_filter”£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾


ÉèÖÃÑ¡Ïî˵Ã÷£º


×è¶Ï·¢Ë͵½botnet C&CµÄDNSÇëÇ󣺷À»ðǽװ±¸ÔÚµ¼ÈëÊÚȨºó £¬»á½«Ôƶ˵ÄBotnetµØÖ·¿â¡¢C&CµØÖ·¿âÏÂÔØµ½ÍâµØ £»¿ªÆô´Ë¹¦Ð§ºó £¬µ±DNSÇëÇóµÄÓòÃûÔÚBotnetµØÖ·¿â»òC&C¿âÖÐ £¬DNSÇëÇó½«Ö±½Ó×è¶Ï £¬²»»á¾ÙÐкóÐø´¦Öóͷ£ £»


»ùÓÚÇå¾²ÖÐÐÄ·ÖÀàµÄ¹ýÂËÆ÷£º½«DNSÇëÇóµÄÓòÃû·¢Ë͵½ÔƶË £¬Ôƶ˻᷵»ØÇëÇóµÄÓòÃûµÄ·ÖÀàÐÅÏ¢ £¬Óû§¿É»ùÓÚ·ÖÀàЧ¹û £¬¶Ô²î±ðµÄ·ÖÀàÖ´Ðвî±ðµÄÐж¯ £»


¾²Ì¬Óò¹ýÂËÆ÷-Óò¹ýÂË£º¿ÉÊÖ¹¤½ç˵һ¸öÓòÃûÁбí £¬ÈËΪָ¶¨¶ÔÌØ¶¨ÓòÃûµÄ´¦Öóͷ£Ðж¯ £»


¾²Ì¬Óò¹ýÂËÆ÷-ÍⲿIP×è¶ÏÇåµ¥£ºÓëÓò¹ýÂËÀàËÆ £¬¿ÉÊÖ¹¤½ç˵һ×éIPÁбí £¬µ±ÓòÃûÆÊÎö³öµÄµØÖ·ÔڸõØÖ·ÁÐ±í¹æÄ£ÄÚ £¬ÈËΪָ¶¨´¦Öóͷ£Ðж¯ £»


¿ÉÑ¡Ïî-µ±±¬·¢ÍøÖ··ÖÀà¹ýʧʱÔÊÐíDNSÇëÇ󣺿ªÆô´Ë¹¦Ð§ºó £¬µ±ÇëÇóµÄÓòÃû·¢Ë͸øÔƶË £¬ÔƶËÔÝδ¶ÔÆä¾ÙÐзÖÀà £¬»òÕß·À»ðǽÓëÔÆ¶ËÎÞ·¨Õý³£Í¨Ñ¶Ê± £¬Óû§µÄDNSÆÊÎö±¨ÎÄ¿ÉÕý³£×ª·¢ £»¹Ø±Õ´Ë¹¦Ð§ºó £¬Èç·ºÆðÓòÃûûÓзÖÀà £¬»òÔÆ¶ËÅþÁ¬Ò쳣ʱ £¬DNS±¨ÎĽ«²»¾ÙÐÐת·¢¡£


¿ÉÑ¡Ïî-¼Í¼ËùÓÐDNSÅÌÎʼ°ÏìÓ¦ÈÕÖ¾£º¿ªÆô´Ë¹¦Ð§ºó £¬¿Éͬʱ¼Í¼DNSµÄÇëÇóÓë»Ø¸´ÄÚÈÝ¡£


ÍÆ¼ö±ØÐ迪ÆôµÄ¹¦Ð§Ñ¡Ï×è¶Ï·¢Ë͵½BotnetC&CµÄDNSÇëÇó £¬»ùÓÚÇå¾²ÖÐÐÄ·ÖÀàµÄ¹ýÂËÆ÷£¨Îñ±ØÆ¾Ö¤ÏÖʵÐèÒª¶ÔÌØ¶¨·ÖÀàµÄÐж¯¾ÙÐÐÐÞ¸ÄÓëÈ·ÈÏ£© £¬¿ÉÑ¡Ïî-µ±±¬·¢ÍøÖ··ÖÀà¹ýʧʱÔÊÐíDNSÇëÇó¡£


4¡¢ÉèÖÃSSLÉî¶È¼ì²âÄ£°å

ÔÚ·À»ðǽ6.0Èí¼þ°æ±¾ÉÏ £¬ÎªÁËÌá¸ßÇå¾²ÐÔ £¬ÔÚÇå¾²Õ½ÂÔ¿ªÆôUTM¹¦Ð§Ê± £¬ÒªÇó±ØÐèÑ¡ÔñSSL/SSHÉî¶È¼ì²âÄ£°å¡£×°±¸Ä¬ÈÏÒÑÄÚÖÃSSLÉî¶È¼ì²âÄ£°å £¬µ«Ä¬ÈÏÄ£°åÖж¼»á¶ÔSSL¡¢SSHЭÒé¾ÙÐдúÀí¼ì²â £¬ÔÚÏÖʵӦÓÃÖпÉÄܵ¼Ö·ºÆðÓªÒµÒì³£¡£Òò´ËÈçÏÖʵ³¡¾°ÖÐûÓÐSSL¼ÓÃÜÄÚÈݵĽâÃÜÐèÇó £¬ÐèÒªÖØÐÂÉèÖÃÒ»¸ö²»¼ÓÃܼì²âµÄSSLÄ£°å¡£


ÉèÖÃÒªÁ죺ͨ¹ýWEB·½·¨½øÈë ¹¤¾ßÉèÖÃ--SSL/SSHÉî¶È¼ì²âÄ£°å £¬µã»÷ÓÒÉϽÇн¨°´Å¥ £¬½¨ÉèÒ»¸öеÄSSL/SSHÉî¶È¼ì²âÄ£°å £¬ÈçÏÂͼн¨µÄSSL/SSHÉî¶È¼ì²âÄ£°å“no_ssl”£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

н¨µÄÄ£°åÖÐ £¬½«“¼ì²éËùÓж˿ڔÒÔ¼°“HTTPS”µÈЭÒéºóµÄ¿ªÆôÑ¡ÏîËùÓйرռ´¿É¡£


5¡¢Çå¾²Õ½ÂÔÖÐŲÓÃDNS¹ýÂËÄ£°å

ͨ¹ýWeb½çÃæ £¬ÔÚÕ½ÂÔÉèÖÃ--IPv4Õ½ÂÔÖÐ £¬¶ÔÏÖÓÐÕ½ÂÔ¾ÙÐе÷½â¡£ÈçÏÂͼËùʾ £¬ÔÚ¶ÔÉÏÍøÉÏÍøµÄ“Çå¾²ÉèÖÔ¾ÙÐÐÉèÖúó £¬Å²ÓÃDNS¹ýÂËÄ£°å“dns_filter”ÒÔ¼°SSL/SSHÉî¶È¼ì²âÄ£°å“no_ssl”£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾


Ч¹ûÄ¥Á·

 

ͨ¹ý·À»ðǽÏÂPCʵÑéÆÊÎöºÚÓòÃû £¬Éó²é·À»ðǽ×è¶ÏЧ¹û £¬ÔÚ·À»ðǽÉÏͨ¹ýÉó²éÈÕÖ¾ÒÔ¼°ÄÚÍâÍø½Ó¿Ú×¥°ü·½·¨È·ÈÏЧ¹û¡£


1¡¢±¾°¸ÀýÖÐʹÓÓv.y6h.net” “lpp.ackng.com” “loseyourip.com” 3¸öºÚÓòÃû¾ÙÐвâÊÔ £¬£¨ÒÔÏÂÊÇʹÓÃVirusTotal¹¤¾ßÑéÖ¤Ëù²âÊÔµÄ3¸öÓòÃûΣº¦ÐÔ½ØÍ¼ £¬È·ÈÏÊôÓÚ¸ßΣº¦ÓòÃû£©£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾


2¡¢ÎªÈ·±£Ð§¹û £¬Ç¿ÖƲâÊÔPCʹÓó£¼ûDNS·þÎñÆ÷£¨°¸ÀýÖÐʹÓÃ114.114.114.114 DNS·þÎñÆ÷£©¶ÔΣº¦ÓòÃû¾ÙÐÐÆÊÎö

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

²âÊÔ˵Ã÷£º


a)²ÎÊý“-qt=A”ΪnslookupµÄÔö²¹²ÎÊý £¬ÒâÎªÇ¿ÖÆ¾ÙÐÐIPv4µÄÓòÃûÆÊÎö £»


b)ÏÂÁî×îºóµÄµØÖ· £¬ÒâÎªÇ¿ÖÆÊ¹ÓøõØÖ·×÷ΪDNS·þÎñÆ÷ £»


c)ÿ´Î²âÊÔǰ £¬¾ùʹÓÃÏÂÁî“ipconfig /flushdns”Çå¿ÕDNS»º´æ £¬×èÖ¹»º´æÓ°Ïì²âÊÔЧ¹û¡£


3¡¢·À»ðǽ¶Ë×è¶ÏЧ¹ûÈÕÖ¾£º

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

·À»ðǽÈÕ־˵Ã÷£º


a)Ðж¯Îª“block”ÇÒÐÂÎÅ×Ö¶ÎÏÔʾ“Domain belongs to a denied category in policy” £¬Åú×¢¸ÃDNS±¨ÎÄÊÇͨ¹ýDNS·ÖÀàÊֶα»×è¶Ï £»


b) Ðж¯Îª“block”ÇÒÐÂÎÅ×Ö¶ÎÏÔʾ“Domain was blocked by dns botnet C&C”Åú×¢¸ÃDNS±¨ÎÄÊÇÆ¥Åäµ½ÍâµØµÄBotnet C&C¿â±»×è¶Ï £»


4¡¢·À»ðǽÄÚÍâÍø±¨ÎÄÇéÐΣº

£¨½ØÍ¼×ó²àΪ·À»ðǽÄÚÍø¿Ú±¨ÎÄ £¬ÓÒ²àÓзÀ»ðǽÍâÍø¿Ú±¨ÎÄ£©

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾


ÆäËû×¢ÖØÊÂÏî

 

  1. DNSºÚÓòÃû¹ýÂ˹¦Ð§½öÏÞV5.2-R6.0ƽ̨°æ±¾Ê¹Óà £»
  2. µ±·À»ðǽװ±¸Ã»ÓÐÊÚȨʱ £¬Ôƶ˷ÖÀà¿â½«ÎÞ·¨Ê¹Óá£
  3. ×°±¸¹ÜÀíÓòÖеĹÜÀíµØÖ·ÐèÒªÄܹ»ÓëÍâÍøÕý³£Í¨Ñ¶ £¬°üÀ¨ÓòÃûÆÊÎöÓë×Ô¶¯ÏòÍâµÄ»á¼û £»

 

¹Ø×¢97¹ú¼Ê
¹Ø×¢97¹ú¼Ê¹ÙÍøÎ¢ÐÅ
ËæÊ±Ïàʶ¹«Ë¾×îж¯Ì¬
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ ÎĵµAIÖúÊÖ
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ ÎĵµÆÀ¼Û
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
Äú¶ÔÄ¿½ñÒ³ÃæµÄÖª×ã¶ÈÔõÑù£¿
²»Õ¦µÎ
ºÜÊǺÃ
ÄúÖª×ãµÄÔµ¹ÊÔ­ÓÉÊÇ£¨¶àÑ¡£©£¿
Äú¶ÔÎĵµÊÇ·ñÉÐÓÐÆäËüµÄÎÊÌâ»ò½¨Ò飿
Ϊ¾¡¿ì½â¾öÎÊÌâ £¬ÇëÄúÁôÏÂÁªÏµ·½·¨Òﱋȯ¸´
ÓÊÏä
ÊÖ»úºÅ
ллÄúµÄ·´À¡£¡
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø±Õ×Éѯҳ
ÊÛǰ×Éѯ ÊÛǰ×Éѯ
ÊÛǰ×Éѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
Òâ¼û·´Ïì Òâ¼û·´Ïì
Òâ¼û·´Ïì
¸ü¶àÁªÏµ·½·¨
ÍøÕ¾µØÍ¼