{"id":20427,"date":"2020-01-30T09:35:09","date_gmt":"2020-01-30T01:35:09","guid":{"rendered":"http:\/\/4563.org\/?p=20427"},"modified":"2020-01-30T09:35:09","modified_gmt":"2020-01-30T01:35:09","slug":"%e8%bf%99%e6%98%af%e6%bb%a5%e7%94%a8%e8%a2%ab%e5%8f%91%e8%ad%a6%e5%91%8a%e4%ba%86%e4%b9%9f%e4%b8%8d%e5%af%b9%e5%95%8a-%e6%88%91%e4%bb%96%e4%b9%88%e5%b0%b11%e4%b8%aa%e7%ab%99-%e7%9c%8b%e4%ba%86","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=20427","title":{"rendered":"\u8fd9\u662f\u6ee5\u7528\u88ab\u53d1\u8b66\u544a\u4e86?\u4e5f\u4e0d\u5bf9\u554a.\u6211\u4ed6\u4e48\u5c311\u4e2a\u7ad9.\u770b\u4e86\u4e0b\u6d41\u91cf"},"content":{"rendered":"\n

\t\t\t\t\ttrips<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:53:24\t<\/p>\n

\u8fd9\u662f\u6ee5\u7528\u88ab\u53d1\u8b66\u544a\u4e86?\u4e5f\u4e0d\u5bf9\u554a.\u6211\u4ed6\u4e48\u5c311\u4e2a\u7ad9.\u770b\u4e86\u4e0b\u6d41\u91cf<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 trips \u4e8e 2020-1-8 18:59 \u7f16\u8f91 <\/p>\n

We have received a security alert from the German Federal Office for Information Security (BSI).
Please see the original report included below for details.<\/p>\n

Please investigate and solve the reported issue.
It is not required that you reply to either us or the BSI.
If the issue has been fixed successfully, you should not receive any further notifications.<\/p>\n

Additional information is provided with the HOWTOs referenced in the report.
In case of further questions, please contact certbund@bsi.bund.de and keep the ticket number of the original report in the subject line. Do not reply to <reports@reports.cert-bund.de> as this is just the sender address for the reports and messages sent to this address will not be read.<\/p>\n

Kind regards<\/p>\n

Abuse Team<\/p>\n

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen \/ Germany
Tel: +49 9831 5050
Fax: +49 9831 5053
www.hetzner.com
Register Court: Registergericht Ansbach, HRB 6089
CEO: Martin Hetzner, Stephan Konvickova, G\u00fcnther M\u00fcller<\/p>\n

For the purposes of this communication, we may save some
of your personal data. For information on our data privacy
policy, please see: www.hetzner.com\/datenschutzhinweis<\/p>\n

On 08 Jan 06:40, reports@reports.cert-bund.de wrote:
> Dear Sir or Madam,
>
> NetBIOS defines a software interface and a naming convention.
> NetBIOS over TCP\/IP provides the NetBIOS programming interface
> over the TCP\/IP protocol.
>
> Over the past months, systems responding to NetBIOS nameservice
> requests from anywhere on the Internet have been increasingly
> abused for DDoS reflection attacks against third parties.
>
> Affected systems on your network:
>
> Format: ASN | IP | Timestamp (UTC) | Workgroup name | Machine name
>
> We would like to ask you to check this issue and take appropriate
> steps to secure the NetBIOS nameservices services on the affected
> systems or notify your customers accordingly.
>
> If you have recently solved the issue but received this notification
> again, please note the timestamp included below. You should not
> receive any further notifications with timestamps after the issue
> has been solved.
>
> Additional information on this notification, advice on how to fix
> reported issues and answers to frequently asked questions:
> <https:\/\/reports.cert-bund.de\/en\/>
>
> This message is digitally signed using PGP.
> Information on the signature key is available at:
> <https:\/\/reports.cert-bund.de\/en\/digital-signature>
>
> Please note:
> This is an automatically generated message. Replies to the
> sender address <reports@reports.cert-bund.de> will NOT be read
> but silently be discarded. In case of questions, please contact
> <certbund@bsi.bund.de> and keep the ticket number
> of this message in the subject line.
>
> !! Please make sure to consult our HOWTOs and FAQ available at
> !! <https:\/\/reports.cert-bund.de\/en\/> first.
>
>
>
> Mit freundlichen Gren \/ Kind regards
> Team CERT-Bund
>
> Bundesamt fr Sicherheit in der Informationstechnik
> Federal Office for Information Security (BSI)
> Referat OC23 – CERT-Bund
> Godesberger Allee 185-189, 53175 Bonn, Germany
\u8fd9\u662f\u6ee5\u7528\u88ab\u53d1\u8b66\u544a\u4e86?\u4e5f\u4e0d\u5bf9\u554a.\u6211\u4ed6\u4e48\u5c311\u4e2a\u7ad9.\u770b\u4e86\u4e0b\u6d41\u91cf\u4e5f\u6b63\u5e38…\u6211\u4e5f\u662f\u9189\u4e86.
\u4eca\u5929\u76ee\u524d\u624d4.8G?
\u8fd9\u4e5f\u53d1\u6ee5\u7528\u8b66\u544a?\t\t\t\t<\/p>\n

\t\t\t\t\txayle<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:54:56\t<\/p>\n

<\/h3>\n

\t\tGerman Federal Office for Information Security (BSI)<\/p>\n

… \u4f60\u662f\u5e72\u4e86\u5565\uff1f\t\t\t\t<\/p>\n

\t\t\t\t\ttrips<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:55:22\t<\/p>\n

<\/h3>\n

\t\txayle \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:54
German Federal Office for Information Security (BSI)<\/p>\n

… \u4f60\u662f\u5e72\u4e86\u5565\uff1f<\/p>\n

:L \u5565\u90fd\u6ca1\u5e72.\u770b\u4e86\u4e0b\u597d\u50cf\u5f88\u591a\u6536\u5230\u8fd9\u79cd\u7684..
\u4e00\u4e2a\u6708\u5c31\u8dd132G..\u6211\u4ed6\u4e48.\t\t\t\t<\/p>\n

\t\t\t\t\t\u659c\u9633\u665a\u66ae<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:57:57\t<\/p>\n

<\/h3>\n

\t\t\u5173\u952e\u7684\u90ae\u4ef6\u5185\u5bb9\u4f60\u6ca1\u6709\u8d34\u554a\u3002
\u4f30\u8ba1\u662fRDP\u6f0f\u6d1e\u901a\u77e5\u90ae\u4ef6\u3002<\/p>\n

\u6211\u9694\u51e0\u5929\u5c31\u6536\u5230\u4e00\u6b21\uff0c\u4e00\u76f4\u6ca1\u7ba1\u8fc7\u3002\t\t\t\t<\/p>\n

\t\t\t\t\ttrips<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:01:02\t<\/p>\n

<\/h3>\n

\t\t\u659c\u9633\u665a\u66ae \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:57
\u5173\u952e\u7684\u90ae\u4ef6\u5185\u5bb9\u4f60\u6ca1\u6709\u8d34\u554a\u3002
\u4f30\u8ba1\u662fRDP\u6f0f\u6d1e\u901a\u77e5\u90ae\u4ef6\u3002<\/p>\n

100\u5929\u5728\u7ebf.\u5b9d\u5854\u7edf\u8ba1\u6d41\u91cf\u8fd8\u6ca1200G..\u6211\u4eca\u5929\u7b2c\u4e00\u6b21\u6536\u5230..\t\t\t\t<\/p>\n

\t\t\t\t\txayle<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:02:04\t<\/p>\n

<\/h3>\n

\t\ttrips \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 18:55
\u5565\u90fd\u6ca1\u5e72.\u770b\u4e86\u4e0b\u597d\u50cf\u5f88\u591a\u6536\u5230\u8fd9\u79cd\u7684..
\u4e00\u4e2a\u6708\u5c31\u8dd132G..\u6211\u4ed6\u4e48.<\/p>\n

netbios \u6709\u6f0f\u6d1e\uff0c \u670d\u52a1\u5668\u653e\u5f00\u4e86\u8fd9\u4e9b\u7aef\u53e3\uff0c \u5173\u6389\t\t\t\t<\/p>\n

\t\t\t\t\tbabyby168<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:02:15\t<\/p>\n

<\/h3>\n

\t\t> We would like to ask you to check this issue and take appropriate
> steps to secure the NetBIOS nameservices services on the affected
> systems or notify your customers accordingly.\t\t\t\t<\/p>\n

\t\t\t\t\t\u659c\u9633\u665a\u66ae<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:04:46\t<\/p>\n

<\/h3>\n

\t\ttrips \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:01
100\u5929\u5728\u7ebf.\u5b9d\u5854\u7edf\u8ba1\u6d41\u91cf\u8fd8\u6ca1200G..\u6211\u4eca\u5929\u7b2c\u4e00\u6b21\u6536\u5230..<\/p>\n

\u6f0f\u6d1e\u901a\u77e5\uff0c\u548c\u662f\u5426\u5df2\u7ecf\u88ab\u6ee5\u7528\u5e94\u8be5\u6ca1\u5173\u7cfb\u3002
\u4e0d\u9700\u8981\u56de\u590d\u7684\u95ee\u9898\u3002\u5e94\u8be5\u90fd\u4e0d\u4e25\u91cd\uff0c\u4e0d\u7528\u600e\u4e48\u7ba1\u3002\t\t\t\t<\/p>\n

\t\t\t\t\txiaoyang<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:06:17\t<\/p>\n

<\/h3>\n

\t\t\u770b\u4e0d\u61c2\uff0c\uff0c\u4f60\u662f\u6709\u591a\u9ed1\uff1f\u300b\u3002yc010t\t\t\t\t<\/p>\n

\t\t\t\t\topenos<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-1-8 19:06:47\t<\/p>\n

<\/h3>\n

\t\t\u8fd9\u662fDD\u4e86windows\u7cfb\u7edf\u4e86\u5427?\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

trips \u5927\u4f6c\u6709\u8bdd\u8bf4 : 202…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/20427"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20427"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/20427\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20427"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}