Home Sign Up Sign In
工单节点使用指南
• 请用平和的语言准确描述你所遇到的问题
• 厂商的技术支持和你一样也是有喜怒哀乐的普通人类，尊重是相互的
• 如果是关于 V2EX 本身的问题反馈，请使用 反馈 节点
chinvo

Cloudflare 某 IP 被劫持

  •  1      
  •   chinvo · Jun 8, 2019 · 7384 views
    This topic created in 2706 days ago, the information mentioned may be changed or developed.

    IP: 104.27.191.245

    现在被劫持到菠菜了，根据朋友反馈，影响范围挺大

    $ whois 104.27.191.245
% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object

refer:        whois.arin.net

inetnum:      104.0.0.0 - 104.255.255.255
organisation: ARIN
status:       ALLOCATED

whois:        whois.arin.net

changed:      2011-02
source:       IANA

# whois.arin.net

NetRange:       104.16.0.0 - 104.31.255.255
CIDR:           104.16.0.0/12
NetName:        CLOUDFLARENET
NetHandle:      NET-104-16-0-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Assignment
OriginAS:       AS13335
Organization:   Cloudflare, Inc. (CLOUD14)
RegDate:        2014-03-28
Updated:        2017-02-17
Comment:        All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref:            https://rdap.arin.net/registry/ip/104.16.0.0



OrgName:        Cloudflare, Inc.
OrgId:          CLOUD14
Address:        101 Townsend Street
City:           San Francisco
StateProv:      CA
PostalCode:     94107
Country:        US
RegDate:        2010-07-09
Updated:        2018-10-10
Comment:        All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref:            https://rdap.arin.net/registry/entity/CLOUD14


OrgTechHandle: ADMIN2521-ARIN
OrgTechName:   Admin
OrgTechPhone:  +1-650-319-8930
OrgTechEmail:  [email protected]
OrgTechRef:    https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

OrgNOCHandle: NOC11962-ARIN
OrgNOCName:   NOC
OrgNOCPhone:  +1-650-319-8930
OrgNOCEmail:  [email protected]
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC11962-ARIN

OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-650-319-8930
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE2916-ARIN

RTechHandle: ADMIN2521-ARIN
RTechName:   Admin
RTechPhone:  +1-650-319-8930
RTechEmail:  [email protected]
RTechRef:    https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

RNOCHandle: NOC11962-ARIN
RNOCName:   NOC
RNOCPhone:  +1-650-319-8930
RNOCEmail:  [email protected]
RNOCRef:    https://rdap.arin.net/registry/entity/NOC11962-ARIN

RAbuseHandle: ABUSE2916-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-650-319-8930
RAbuseEmail:  [email protected]
RAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
  • Cloudflare
  • abuse
  • iana
  • [email protected]
    22 replies  •  2019-06-11 16:00:52 +08:00
    miyuki
    miyuki
    Jun 8, 2019
    1
    http://104.27.175.71 https://104.27.175.71
    http://104.27.191.245 https://104.27.191.245

    稳定复现
    Cipool
    Cipool
    Jun 8, 2019 via Android
    2
    好奇什么原理，看路由是正常的
    miyuki
    miyuki
    Jun 8, 2019
    3
    @Cipool

    tcp 劫持，icmp 正常。如果用 tcp 路由追踪也会受影响的。

    能做这个范围看来能量相当大。
    chenoe
    chenoe
    Jun 8, 2019 via iPad
    4
    浙江移动无响应，新加坡 HTTP 403
    Myprincess
    Myprincess
    Jun 8, 2019
    5
    如果是在某云的话，赶紧学习去，我刚刚学习回来，那个 HOLD 住不能解封。如果你细看现在规则。你会把域名转出去的。站长与快 BO 同罪。
    rushssss
    rushssss
    Jun 8, 2019
    6
    @miyuki 无法复现

    http 访问 403: Direct IP access not allowed，https 访问 tls 握手错误: no common encryption algorithm(s). Error code: SSL_ERROR_NO_CYPHER_OVERLAP
    zuikren
    zuikren
    Jun 8, 2019 via Android
    7
    国内成功复现，挂代理后无法复现，这个劫持什么原理？
    run2
    run2
    Jun 9, 2019
    8
    四川电信用户 复现
    johnkiller
    johnkiller
    Jun 9, 2019
    9
    湖北联通成功复现
    TechCiel
    TechCiel
    Jun 9, 2019
    10
    吉林电信 复现
    注意尝试的时候走国内网络
    learningman
    learningman
    Jun 9, 2019
    11
    江西移动稳定复现
    https 是 localhost 签发的什么鬼。。。不应该是 CloudFlare Sni SSL 啥的吗
    txydhr
    txydhr
    Jun 9, 2019 via iPhone
    12
    江苏电信 被劫持
    txydhr
    txydhr
    Jun 9, 2019 via iPhone
    13
    江苏移动 4G 被劫持
    cncmmdwl
    cncmmdwl
    Jun 9, 2019
    14
    福建电信被劫持，啥原理？
    wdlth
    wdlth
    Jun 9, 2019
    15
    实现了真正的 AnyCast ……
    gerardyang
    gerardyang
    Jun 9, 2019
    16
    广东电信成功复现，广东联通成功复现
    ![香港 vps 用 w3m 访问]( https://i.loli.net/2019/06/09/5cfd07d1348a962605.png)
    香港 vps 用 w3m 访问
    gerardyang
    gerardyang
    Jun 9, 2019
    17
    附上 VPS curl 出来的 https://pastebin.com/c1tt3fbX
    chenoe
    chenoe
    Jun 9, 2019 via Android
    18
    浙江移动 1 无响应
    浙江移动 2，http 无响应，https 只能加载到 localhost 的证书错误然后无响应
    江苏移动成功复现（跳转 x 网）
    新加坡、法国 HTTP 403 FORBIDDEN
    这是什么鬼。。。国外 IP 自动 ban 的见过，国内还带分区划响应的？还是运营商的机房屏蔽了连接？（两个浙江移动是省内不同的机房和网络）
    zhhww57
    zhhww57
    Jun 10, 2019
    19
    江苏移动成功复现
    zhhww57
    zhhww57
    Jun 10, 2019
    20
    是宽带
    tankren
    tankren
    Jun 10, 2019
    21
    扑克游戏？
    zanzhz1101
    zanzhz1101
    Jun 11, 2019
    22
    山东电信成功复现
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   1473 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 114ms · UTC 22:34 · PVG 06:34 · LAX 14:34 · JFK 17:34
    ♥ Do have faith in what you're doing.