访问不存在的域名被劫持

574722031

root@mad2:~# ping  lg.mad2.hosthat423ch2.com
PING cs.wangxin.com (154.85.62.49) 56(84) bytes of data.
64 bytes from 154.85.62.49 (154.85.62.49): icmp_seq=1 ttl=114 time=229 ms
64 bytes from 154.85.62.49 (154.85.62.49): icmp_seq=2 ttl=114 time=228 ms
64 bytes from 154.85.62.49 (154.85.62.49): icmp_seq=3 ttl=114 time=228 ms
64 bytes from 154.85.62.49 (154.85.62.49): icmp_seq=4 ttl=114 time=229 ms


ping不存在的域名 全部到这个ip 这是被劫持了吗
http页面全部跳转到'http://www.wangxin.com/'

Nextarray

之前住酒店的时候
酒店WiFi把所有不存在的域名劫持到
https://net.domain.name

574722031

Nextarray 发表于 2021-10-26 20:31

之前住酒店的时候
酒店WiFi把所有不存在的域名劫持到
https://net.domain.name
digital-vm马德里机房的vps

citywar

运营商也会跳转到 一些网址导航

小猪佩奇

看域名吓我一跳，我以为是某部门

574722031

root@mad2:~# ip addr
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0:
mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:16:3c:31:2c:31 brd ff:ff:ff:ff:ff:ff
    inet 5.111.111.173/25 brd 5.111.111.255 scope global eth0
       valid_lft forever preferred_lft forever


root@mad2:~# arp -a
irb-0.agg1v.mad1.es.m247.com (5.111.111.130) at 08:b2:58:c7:15:00 [ether] on eth0
? (5.111.111.129) at 00:00:5e:00:01:04 [ether] on eth0

是不是机房被arp劫持