1
hackerwgf 2015-04-17 22:11:11 +08:00
我也遇到了...
|
2
yinheli 2015-04-17 22:57:42 +08:00
我也是...
抓包看了下. 是百度的一个统计脚本被劫持了. curl 重现... curl -v hm.baidu.com * Rebuilt URL to: hm.baidu.com/ * Hostname was NOT found in DNS cache * Trying 220.181.164.39... * Connected to hm.baidu.com (220.181.164.39) port 80 (#0) > GET / HTTP/1.1 > User-Agent: curl/7.37.1 > Host: hm.baidu.com > Accept: */* > < HTTP/1.1 302 Found < Location: http://122.141.234.60:51234/bdpop.sl.php?http://hm.baidu.com/ < Content-type: text/html < Content-Length: 0 < * Excess found in a non pipelined read: excess = 890 url = / (zero-length body) * Connection #0 to host hm.baidu.com left intact |
3
yinheli 2015-04-17 23:01:50 +08:00
现在... 暂时先吧 hm.baidu.com hosts 到 127.0.0.1 了
|
5
yinheli 2015-04-18 00:32:53 +08:00
@cobola 也可以改路由器的 iptables. 这样所有的设备都ok了.
比如我的 openwrt 的路由器. 在 iptables 里加了一条. iptables -I FORWARD -d 122.141.234.60 -j REJECT |
6
holyghost 2015-04-19 12:59:01 +08:00
同被劫持。
|
7
brt 2015-04-20 18:39:58 +08:00
这两天也出现这种情况,在打开易迅时火狐提示。
坐标:广东汕头。电信。 |