12
2010
01

百度域名被劫持 伊朗网军所为?和twitter被攻击时手法如出一辙

今天早上7时许,百度出现访问中断的情况,查询域名baidu.com的WHOIS信息后发现百度域名出现不可理解的问题。
目前Baidu.com的DNS服务器被更换,同时主域名已经被解析到一个荷兰的IP,并且访问百度旗下子域名会被跳转到雅虎的错误页面,WHOIS数据也正在不断被刷新中,目前问题并未解决,百度也并没有对此发表回应。

8:20更新:有网友曾经被定向到一个黑页Iranian Cyber Army上,域名被盗取或劫持的可能性相当大,不过百度如此大的请求数量是任何一个黑页服务器也无法抵御的,因此只能是访问失败。

回想起twitter上次域名被转向,和这次攻击有着惊人的相似。

8:30更新:百度DNS数据已经被改回,但WHOIS数据依然没有刷新

8:36更新:被黑图像出现,果然是伊朗网军。

目前百度whois信息

baidu.com已经被注册!

Whois信息:



Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to
http://www.internic.net
for detailed information.

   Server Name: BAIDU.COM.ZZZZZZ.COM.MORE.INFO.AT.WWW.BEYONDWHOIS.COM
   IP Address: 203.36.226.2
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL:
http://domainhelp.opensrs.net

   Server Name: BAIDU.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM
   IP Address: 69.41.185.203
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL:
http://domainhelp.opensrs.net

   Server Name: BAIDU.COM.ZZZZZ.DOWNLOAD.MOVIE.ONLINE.ZML2.COM
   IP Address: 64.28.187.63
   Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
   Whois Server: whois.PublicDomainRegistry.com
   Referral URL:
http://www.PublicDomainRegistry.com

   Server Name: BAIDU.COM.MORE.INFO.AT.WWW.BEYONDWHOIS.COM
   IP Address: 203.36.226.2
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL:
http://domainhelp.opensrs.net

   Domain Name: BAIDU.COM
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL:
http://www.register.com
   Name Server: YNS1.YAHOO.COM
   Name Server: YNS2.YAHOO.COM
   Status: clientTransferProhibited
   Updated Date: 11-jan-2010
   Creation Date: 11-oct-1999
   Expiration Date: 11-oct-2014

>>> Last update of whois database: Tue, 12 Jan 2010 00:37:52 UTC <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.register.com]
Your request cannot be completed at this time due to query limit controls. Please try your request again after 30 minutes.

« 上一篇 下一篇 »

发表评论:

◎欢迎参与讨论,请在这里发表您的看法、交流您的观点。