|
刚手机访问论坛,在内网dns服务器上发现这么一条日志 反复刷屏:
"dns rebind attack detected:
upstream server 223.5.5.5 returned A record: faq.comsenz.com. 0.0.0.1
config faq.comsenz.com. to NXDOMAIN for 300 seconds"
dig 之后如下:
~ $ dig faq.comsenz.com @1.1.1.1 ; <<>> DiG 9.16.41 <<>> faq.comsenz.com @1.1.1.1 ;; global options: +cmd
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27477 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;faq.comsenz.com. IN A ;; ANSWER SECTION:
faq.comsenz.com. 300 IN A 0.0.0.1
;; Query time: 488 msec ;; SERVER: 1.1.1.1#53(1.1.1.1) ;; WHEN: Sun May 19 14:53:48 CST 2024 ;; MSG SIZE rcvd: 60
请管理排查论坛从这个网址引用了什么资源?(貌似页面没少什么啊?) |
|