这是一个创建于 4688 天前的主题，其中的信息可能已经有所发展或是发生改变。
---------- Forwarded message ----------
From: <[email protected]>
Date: 2012/1/5
Subject: [#******] Sinkhole-Drone-Report
To: ******************
Hello,
These IP addresses are all the devices that joined our Sinkhole server that did
not arrive through the usage of am HTTP referrer. Since the Sinkhole server is
only accessed through previously malicious domain names, only infected system,
or security researchers should be seen in this list.
Please check those devices with antivirus ASAP
96.44.1**.***
For more information on this report go to:
http://www.shadowserver.org/wiki/pmwiki.php/Services/Sinkhole-HTTP-Drone
timestamp ip asn geo url type http_agent tor src_port p0f_genre p0f_detail hostname dst_port http_host http_referer http_referer_asn http_referer_geo dst_ip dst_asn dst_geo
2012-01-03 17:37:05 96.44.169.249 29761 US GET /search?q=0 HTTP/1.0 downadup Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB7.2) 2444 80 149.20.56.** 149.20.56.** 1280 US
From: <[email protected]>
Date: 2012/1/5
Subject: [#******] Sinkhole-Drone-Report
To: ******************
Hello,
These IP addresses are all the devices that joined our Sinkhole server that did
not arrive through the usage of am HTTP referrer. Since the Sinkhole server is
only accessed through previously malicious domain names, only infected system,
or security researchers should be seen in this list.
Please check those devices with antivirus ASAP
96.44.1**.***
For more information on this report go to:
http://www.shadowserver.org/wiki/pmwiki.php/Services/Sinkhole-HTTP-Drone
timestamp ip asn geo url type http_agent tor src_port p0f_genre p0f_detail hostname dst_port http_host http_referer http_referer_asn http_referer_geo dst_ip dst_asn dst_geo
2012-01-03 17:37:05 96.44.169.249 29761 US GET /search?q=0 HTTP/1.0 downadup Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB7.2) 2444 80 149.20.56.** 149.20.56.** 1280 US
 |
1
felixonmars 2012-01-26 18:23:26 +08:00
蠕虫病毒, 可能乃的VPN用户中毒了吧...
这种只能算点子背, 把report的那段IP给屏蔽掉吧= = |
 |
2
aveline OP @felixonmars 屏蔽了。。。你看某同学的屏蔽方法。。好奇葩诶。。直接把那ip绑定到lo上去了。。
|
|
3
felixonmars 2012-01-26 18:40:26 +08:00
@aveline rex那个是我教他的(喵哈哈
说起来这方法多简单啊... |
|
4
aveline OP @felixonmars 好奇葩的方法有没有！
|
 |
5
RexChen 2012-01-26 18:43:19 +08:00
@aveline @felixonmars 你们这些坏淫 啧啧
|
|
7
felixonmars 2012-01-26 18:46:06 +08:00
|
|
8
aveline OP @felixonmars 是的...貌似是不欢迎
" 为了保持这里的良好氛围，V2EX 有自己的明确规则： • 这里绝对不讨论任何有关盗版软件、音乐、电影如何获得的问题 • 这里绝对不会全文转载任何文章，而只会以链接方式分享 • 这里尊重原创 • 这里反对中文互联网上的无信息量习惯如“顶”，“沙发”，“前排”，“留名” " |
|
9
aveline OP @felixonmars 是的...貌似是不欢迎
" 为了保持这里的良好氛围，V2EX 有自己的明确规则： • 这里绝对不讨论任何有关盗版软件、音乐、电影如何获得的问题 • 这里绝对不会全文转载任何文章，而只会以链接方式分享 • 这里尊重原创 • 这里反对中文互联网上的无信息量习惯如“顶”，“沙发”，“前排”，“留名” " |
Select Language