V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
dtsdao
V2EX  ›  GitHub

Github 又被 DNS 污染了...

  •  
  •   dtsdao · Apr 21, 2018 · 8739 views
    This topic created in 2939 days ago, the information mentioned may be changed or developed.

    邮箱收到了 issue 通知本打算开 github 瞅一眼结果打不开??? chrome 提示拒绝连接,嗯,熟悉的 DNS 污染感觉 赶紧 dig 一手,可怕了...直接解析到本地...8.8.8.8 也不行... 而且包括其 cdn 也被污染,奇怪的是 不用 chrome 访问直接 dig 就是正确地址 真是奇怪...

    以下是 dig 日志

    ➜  ~ dig @8.8.8.8 github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3069
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;github.com.                    IN      A
    
    ;; ANSWER SECTION:
    github.com.             190     IN      A       127.0.0.1
    
    ;; Query time: 8 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:36:53 CST 2018
    ;; MSG SIZE  rcvd: 44
    
    ➜  ~ dig github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> github.com
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14402
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;github.com.                    IN      A
    
    ;; ANSWER SECTION:
    github.com.             94      IN      A       127.0.0.1
    
    ;; Query time: 6 msec
    ;; SERVER: 10.0.1.1#53(10.0.1.1)
    ;; WHEN: 周六 4 月 21 13:37:07 CST 2018
    ;; MSG SIZE  rcvd: 44
    
    ➜  ~ dig @8.8.8.8 www.baidu.com A
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 www.baidu.com A
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31332
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;www.baidu.com.                 IN      A
    
    ;; ANSWER SECTION:
    www.baidu.com.          1141    IN      CNAME   www.a.shifen.com.
    www.a.shifen.com.       741     IN      A       112.34.112.40
    www.a.shifen.com.       741     IN      A       112.34.112.41
    
    ;; Query time: 18 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:38:55 CST 2018
    ;; MSG SIZE  rcvd: 90
    
    ➜  ~ dig @8.8.8.8 github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18322
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;github.com.                    IN      A
    
    ;; ANSWER SECTION:
    github.com.             190     IN      A       127.0.0.1
    
    ;; Query time: 14 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:39:05 CST 2018
    ;; MSG SIZE  rcvd: 44
    
    ➜  ~ dig @8.8.8.8 www.github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 www.github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34255
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 512
    ;; QUESTION SECTION:
    ;www.github.com.                        IN      A
    
    ;; ANSWER SECTION:
    www.github.com.         3438    IN      CNAME   github.com.
    github.com.             59      IN      A       52.74.223.119
    github.com.             59      IN      A       13.250.177.223
    github.com.             59      IN      A       13.229.188.59
    
    ;; Query time: 238 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:39:13 CST 2018
    ;; MSG SIZE  rcvd: 105
    
    ➜  ~ dig @8.8.8.8 www.github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 www.github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63465
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;www.github.com.                        IN      A
    
    ;; ANSWER SECTION:
    www.github.com.         300     IN      A       127.0.0.1
    
    ;; Query time: 13 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:39:27 CST 2018
    ;; MSG SIZE  rcvd: 48
    
    ➜  ~ dig @8.8.8.8 assets-cdn.github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 assets-cdn.github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48985
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 512
    ;; QUESTION SECTION:
    ;assets-cdn.github.com.         IN      A
    
    ;; ANSWER SECTION:
    assets-cdn.github.com.  10      IN      CNAME   github.map.fastly.net.
    github.map.fastly.net.  29      IN      A       151.101.0.133
    github.map.fastly.net.  29      IN      A       151.101.64.133
    github.map.fastly.net.  29      IN      A       151.101.128.133
    github.map.fastly.net.  29      IN      A       151.101.192.133
    
    ;; Query time: 247 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:41:24 CST 2018
    ;; MSG SIZE  rcvd: 149
    
    ➜  ~ dig @8.8.8.8 assets-cdn.github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> @8.8.8.8 assets-cdn.github.com
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44077
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;assets-cdn.github.com.         IN      A
    
    ;; ANSWER SECTION:
    assets-cdn.github.com.  277     IN      A       127.0.0.1
    
    ;; Query time: 17 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: 周六 4 月 21 13:41:39 CST 2018
    ;; MSG SIZE  rcvd: 55
    
    ➜  ~ dig assets-cdn.github.com
    
    ; <<>> DiG 9.11.2-P1 <<>> assets-cdn.github.com
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38550
    ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;assets-cdn.github.com.         IN      A
    
    ;; ANSWER SECTION:
    assets-cdn.github.com.  158     IN      A       127.0.0.1
    
    ;; Query time: 11 msec
    ;; SERVER: 10.0.1.1#53(10.0.1.1)
    ;; WHEN: 周六 4 月 21 13:41:46 CST 2018
    ;; MSG SIZE  rcvd: 55
    
    ➜  ~
    

    对了,顺便说一句,由于六月份要开上合,会不会和这个有关啊....

    15 replies    2018-04-22 11:05:04 +08:00
    guanaco
        1
    guanaco  
       Apr 21, 2018
    坐标帝都,可以上
    input2output
        2
    input2output  
       Apr 21, 2018 via Android
    江苏移动 正常
    yexm0
        3
    yexm0  
       Apr 21, 2018 via iPhone
    这个 Query time。。。你路由器或者电脑问题吧
    Madcrow
        4
    Madcrow  
       Apr 21, 2018 via Android
    也遇到了,青岛移动
    Tangel
        5
    Tangel  
       Apr 21, 2018
    炸了...坐标济南,移动。手机和电脑都无法访问。
    ![123.png]( https://i.loli.net/2018/04/21/5adaea256b097.png)
    zw
        6
    zw  
       Apr 21, 2018
    我昨天发过一贴,https://www.v2ex.com/t/448197,最近 Chrome 的域名解析不知是啥缘故,感觉不太正常。。。
    crb912
        7
    crb912  
       Apr 21, 2018 via Android
    @zw 域名解析不是 chrome 负责的吧,chrome 只是浏览器。域名解析是有 IPS 服务器负责
    zw
        8
    zw  
       Apr 21, 2018
    @crb912 Chrome 应该是增加了好几个与域名解析相关的增强功能,你看看设置中的选项就知道了,都不用去看源码。
    Fading2276
        9
    Fading2276  
       Apr 21, 2018 via iPad
    @crb912 ISP
    ZenFX
        10
    ZenFX  
       Apr 21, 2018
    我这边可以正常上,DNS 污染一般不会解析到 127.0.0.1
    通过 IPIP 查,国内 DNS 解析也都是正常的。
    https://www.ipip.net/dns.php
    peterpei
        11
    peterpei  
       Apr 21, 2018 via Android
    河南联通正常
    laoyur
        12
    laoyur  
       Apr 21, 2018
    @input2output 为毛同样是江苏移动,表示 github 已经被墙了差不多有半年了
    meisky6666
        13
    meisky6666  
       Apr 21, 2018
    你不知道现在 beijing 飞机都不飞了吗?墙几个网站正常的
    input2output
        14
    input2output  
       Apr 21, 2018
    @peterpei #11 我不知道... 我不翻墙,允许缓存大约 1s 加载完毕
    PaperCUbe
        15
    PaperCUbe  
       Apr 22, 2018
    同青岛移动。我还特地问了一下身边的联通用户,他们表示都正常。移动无论是宽带还是数据网络都是一样,解析到 127.0.0.1 并且访问被拒绝。目前正在勉强改 hosts 度日
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   5622 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 84ms · UTC 07:34 · PVG 15:34 · LAX 00:34 · JFK 03:34
    ♥ Do have faith in what you're doing.