{"id":6456,"date":"2017-04-25T21:25:46","date_gmt":"2017-04-25T13:25:46","guid":{"rendered":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/?p=6456"},"modified":"2023-04-16T01:19:57","modified_gmt":"2023-04-15T17:19:57","slug":"%e7%a2%a7%e8%8f%af%e5%9c%8b%e5%b0%8f%e8%b3%87%e5%ae%89%e9%80%9a%e5%a0%b1-%e5%85%a5%e4%be%b5%e4%ba%8b%e4%bb%b6%e8%ad%a6%e8%a8%8a1060425","status":"publish","type":"post","link":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/archives\/6456","title":{"rendered":"\u78a7\u83ef\u570b\u5c0f\u8cc7\u5b89\u901a\u5831-\u5165\u4fb5\u4e8b\u4ef6\u8b66\u8a0a(1060425)"},"content":{"rendered":"<h3>\u53f0\u7063\u5b78\u8853\u7db2\u8def\u5371\u6a5f\u8655\u7406\u4e2d\u5fc3(TACERT) \u5c0d\u672c\u6821\u767c\u4f48\u8cc7\u5b89\u901a\u5831-\u5165\u4fb5\u4e8b\u4ef6\u8b66\u8a0a\uff1a<\/h3>\n<table border=\"1\" cellspacing=\"0\">\n<tbody>\n<tr>\n<td><strong>\u767c\u4f48\u7de8\u865f<\/strong><\/td>\n<td>ASOC-INT-201704-3984<\/td>\n<td><strong>\u767c\u4f48\u6642\u9593<\/strong><\/td>\n<td>2017-04-25 11:50:19<\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e8b\u4ef6\u985e\u578b<\/strong><\/td>\n<td>\u7cfb\u7d71\u88ab\u5165\u4fb5<\/td>\n<td><strong>\u767c\u73fe\u6642\u9593<\/strong><\/td>\n<td>2017-04-25 11:34:49<\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e8b\u4ef6\u4e3b\u65e8<\/strong><\/td>\n<td colspan=\"3\">\u901a\u5831:[\u65b0\u5317\u5e02\u4e09\u91cd\u5340\u78a7\u83ef\u570b\u6c11\u5c0f\u5b78]163.20.169.39 MS.RDP.Connection.Brute.Force<\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e8b\u4ef6\u63cf\u8ff0<\/strong><\/td>\n<td colspan=\"3\">ASOC\u767c\u73fe\u8cb4\u55ae\u4f4d(\u65b0\u5317\u5e02\u4e09\u91cd\u5340\u78a7\u83ef\u570b\u6c11\u5c0f\u5b78)\u6240\u5c6c 163.20.169.39 \u7591\u4f3c\u5c0d\u5916\u9032\u884c MS.RDP.Connection.Brute.Force \u653b\u64ca<\/td>\n<\/tr>\n<tr>\n<td><strong>\u624b\u6cd5\u7814\u5224<\/strong><\/td>\n<td colspan=\"3\">\u8cb4\u55ae\u4f4d\u7591\u4f3c\u5c0d\u5916\u9032\u884c\u975e\u6cd5\u653b\u64ca\u884c\u70ba\uff0c\u9060\u7aef\u653b\u64ca\u8005\u5c0dMicrosoft RDP(Remote Desktop Protocol)\u9032\u884c\u66b4\u529b\u7684\u5bc6\u78bc\u731c\u6e2c\u653b\u64ca\uff0c\u653b\u64ca\u8005\u572810\u79d2\u5167\u9032\u884c200\u6b21\u7684\u767b\u5165\u8acb\u6c42\uff0c\u5982\u6210\u529f\u5229\u7528\u5c07\u53ef\u4ee5\u9023\u5165\u672a\u7d93\u6388\u6b0a\u7684\u7cfb\u7d71\uff0c\u9032\u884c\u975e\u6cd5\u7684\u5b58\u53d6\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u8655\u7406\u5efa\u8b70<\/strong><\/td>\n<td colspan=\"3\">\u60e0\u8acb\u8cb4\u55ae\u4f4d\uff1a<\/p>\n<ol>\n<li>\u6aa2\u67e5\u9632\u706b\u7246\u7d00\u9304\uff1a\u67e5\u770b\u5167\u90e8\u662f\u5426\u6709\u958b\u555f\u7570\u5e38\u6216\u672a\u7d93\u8a31\u53ef\u7684\u9023\u63a5\u57e0\uff0c\u4e26\u67e5\u770b\u8a18\u9304\u662f\u5426\u6709\u5916\u754c\u5c0d\u8cb4\u55ae\u4f4d\u5167\u90e8IP\u4e4b\u7570\u5e38\u9023\u7dda\u3002<\/li>\n<li>\u5982\u767c\u73fe\u70ba\u975e\u6388\u6b0a\u7684\u9023\u7dda\uff0c\u5efa\u8b70\u5c07\u8a72IP\u65bc\u9632\u706b\u7246\u963b\u64cb\u3002<\/li>\n<li>\u5efa\u8b70\u91dd\u5c0d\u88ab\u653b\u64ca\u7684\u4e3b\u6a5f\u505a\u597d\u76f8\u95dc\u4e3b\u6a5f\u7cfb\u7d71\u670d\u52d9\u6aa2\u67e5\u53ca\u5f31\u9ede\u4fee\u88dc\u78ba\u8a8d\u7684\u5de5\u4f5c\uff0c\u4e26\u95dc\u9589\u4e0d\u9700\u8981\u7684\u670d\u52d9\u3002<\/li>\n<li>\u5c07\u6240\u4f7f\u7528\u7684\u5bc6\u78bc\u8907\u96dc\u5ea6\u63d0\u9ad8\u3002<\/li>\n<\/ol>\n<\/td>\n<\/tr>\n<tr>\n<td><strong>\u53c3\u8003\u8cc7\u6599<\/strong><\/td>\n<td colspan=\"3\">\u7121<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>\u672c\u6821\u8655\u7406\u60c5\u5f62\uff1a<\/h3>\n<ul>\n<li>\u767b\u5165\u300c<a href=\"https:\/\/info.cert.tanet.edu.tw\/\">\u6559\u80b2\u6a5f\u69cb\u8cc7\u901a\u5b89\u5168\u61c9\u8b8a\u7db2\u7ad9<\/a>\u300d\uff0c\u4e86\u89e3\u4e8b\u4ef6\u767c\u751f\u60c5\u5f62\u3002<\/li>\n<li>\u767b\u5165\u300c\u65b0\u5317\u5e02\u6821\u5712\u7db2\u8def\u7ba1\u7406\u5e73\u53f0\u300d\u6aa2\u8996 163.20.169.39 \u9023\u7dda\u72c0\u6cc1\u3002<\/li>\n<li>\u78ba\u8a8d 163.20.169.39 \u96fb\u8166\u9023\u7dda\u7570\u5e38\uff0c\u9023\u7dda\u6578\u8d85\u904e 7000\u3002<\/li>\n<li>\u67e5\u660e\u00a0 163.20.169.39 \u70ba\u6587\u66f8\u7d44\u9577\u884c\u653f\u96fb\u8166\uff0c\u96fb\u8a71\u544a\u77e5\u96fb\u8166\u906d\u5165\u4fb5\u4e8b\u4ef6\uff0c\u60c5\u6cc1\u56b4\u91cd\uff0c\u53f0\u7063\u5b78\u8853\u7db2\u8def\u5371\u6a5f\u8655\u7406\u4e2d\u5fc3(TACERT) \u5df2\u5c0d\u672c\u6821\u767c\u4f48\u8cc7\u5b89\u901a\u5831-\u4eba\u4fb5\u4e8b\u4ef6\u8b66\u8a0a\uff0c\u8acb\u5176\u5c07\u66ab\u5c07\u96fb\u8166\u95dc\u6a5f\u6216\u62d4\u9664\u7db2\u8def\u7dda\u3002<\/li>\n<li>\u5c07\u672c\u6821\u96fb\u8166\u906d\u5165\u4fb5\u4e8b\u4ef6\u61c9\u8b8a\u60c5\u5f62\uff0c\u56de\u5831<a href=\"https:\/\/info.cert.tanet.edu.tw\/\">\u6559\u80b2\u6a5f\u69cb\u8cc7\u901a\u5b89\u5168\u61c9\u8b8a\u7db2\u7ad9<\/a>\u3002<\/li>\n<\/ul>\n<h3>\u96fb\u8166\u6aa2\u67e5\u7d50\u679c\uff1a<\/h3>\n<ul>\n<li>\u9632\u6bd2\u8edf\u9ad4\u906d\u505c\u7528\uff0c\u4f46\u7121\u6cd5\u555f\u7528\u3002<\/li>\n<li>\u6709\u4e0d\u660e\u5e33\u6236\u5efa\u7f6e\u65bc\u7cfb\u7d71\u4e2d\u3002<\/li>\n<li>guest \u5e33\u6236\u88ab\u555f\u7528\u3002<\/li>\n<li>\u7cfb\u7d71\u5b89\u88dd\u4e86\u4e00\u4e9b\u4e0d\u660e\u7684\u8edf\u9ad4\u3002<\/li>\n<li>\u96fb\u8166\u9632\u706b\u7246\u958b\u4e86\u4e00\u4e9b\u5f8c\u9580\uff0c\u4f46\u79fb\u9664\u4e0d\u6389\u3002<\/li>\n<\/ul>\n<h3>\u96fb\u8166\u8655\u7406\u904e\u7a0b\uff1a<\/h3>\n<ul>\n<li>\u91cd\u958b\u6a5f\uff0c\u4e26\u4ee5\u5b89\u5168\u6a21\u5f0f\u767b\u5165\u7cfb\u7d71\u3002<\/li>\n<li>\u6253\u958b regedit.exe \u7a0b\u5f0f\u5c07\u81ea\u52d5\u555f\u52d5\u7684\u4e0d\u660e\u7a0b\u5f0f\u79fb\u9664\u3002<\/li>\n<li>\u79fb\u9664\u4e0d\u660e\u8edf\u9ad4\u3002<\/li>\n<li>\u79fb\u9664\u4e0d\u660e\u5e33\u6236\u3002<\/li>\n<li>\u505c\u7528guest \u5e33\u6236\u3002<\/li>\n<li>\u96fb\u8166\u9632\u706b\u7246\u6062\u5fa9\u6210\u7cfb\u7d71\u9810\u8a2d\u503c\u3002<\/li>\n<li>\u79fb\u9664\u6240\u6709\u7cfb\u7d71\u3001\u4f7f\u7528\u8005\u53ca\u5404\u7db2\u8def\u700f\u89bd\u5668\u66ab\u5b58\u6a94\u3001\u79fb\u9664\u4e0d\u5fc5\u8981\u7684\u64f4\u5145\u7a0b\u5f0f\u3002<\/li>\n<li>\u5b89\u88dd\u4e26\u57f7\u884c\u7cfb\u7d71\u512a\u5316\u4e26\u79fb\u9664\u60e1\u610f\u7a0b\u5f0f\u7684\u5de5\u5177\u7a0b\u5f0f\u3002<\/li>\n<li>\u6253\u958b\u7cfb\u7d71\u670d\u52d9\u7a0b\u5f0f\uff0c\u91cd\u65b0\u8a2d\u5b9a\u9632\u6bd2\u8edf\u9ad4\u70ba\u81ea\u52d5\u555f\u52d5\u72c0\u614b\uff0c\u4e26\u4e88\u4ee5\u555f\u52d5\u3002<\/li>\n<li>\u9632\u6bd2\u8edf\u9ad4\u624b\u52d5\u7dda\u4e0a\u66f4\u65b0\uff0c\u66f4\u65b0\u5f8c\uff0c\u9032\u884c\u5168\u6a5f\u786c\u789f\u6383\u63cf\uff0c\u79fb\u9664\u591a\u9805\u60e1\u610f\u5a01\u8105\u7a0b\u5f0f\u3002<\/li>\n<li>\u91cd\u958b\u6a5f\uff0c\u4ee5\u6b63\u5e38\u555f\u52d5\u6a21\u5f0f\u767b\u5165\u7cfb\u7d71\u3002<\/li>\n<li>\u518d\u6b21\u4ee5\u9632\u6bd2\u8edf\u9ad4\u9032\u884c\u5168\u6a5f\u786c\u789f\u6383\u63cf\uff0c\u78ba\u8a8d\u4e0d\u518d\u6709\u4efb\u4f55\u4e2d\u6bd2\u73fe\u8c61\u3002<\/li>\n<li>\u518d\u6b21\u767b\u5165\u300c\u65b0\u5317\u5e02\u6821\u5712\u7db2\u8def\u7ba1\u7406\u5e73\u53f0\u300d\u6aa2\u8996 163.20.169.39 \u9023\u7dda\u72c0\u6cc1\uff0c\u9023\u7dda\u6578\u5df2\u964d\u81f3 20 \u4ee5\u4e0b\u3002\u6aa2\u8996\u5176\u9023\u7dda\u4e2d\uff0c\u6709\u7121\u4e0d\u6b63\u5e38\u7684\u9023\u7dda\u3002<\/li>\n<li>\u66f4\u65b0\u8edf\u9ad4\u3001\u7cfb\u7d71\u3002<\/li>\n<li>\u8a2d\u5b9a admin \u5bc6\u78bc\u70ba\u8907\u96dc\u5ea6\u8f03\u9ad8\u7684\u5bc6\u78bc\u3002<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u53f0\u7063\u5b78\u8853\u7db2\u8def\u5371\u6a5f\u8655\u7406\u4e2d\u5fc3(TACERT) \u5c0d\u672c\u6821\u767c\u4f48\u8cc7\u5b89\u901a\u5831-\u5165\u4fb5\u4e8b\u4ef6\u8b66\u8a0a\uff1a \u767c\u4f48\u7de8\u865f ASOC-INT-201704-3984 \u767c\u4f48\u6642\u9593 2017-04-25 11:50:19 \u4e8b\u4ef6\u985e\u578b \u7cfb\u7d71\u88ab\u5165\u4fb5 \u767c\u73fe\u6642\u9593 2017-04-25 11:34:49 \u4e8b\u4ef6\u4e3b\u65e8 \u901a\u5831:[\u65b0\u5317\u5e02\u4e09\u91cd\u5340\u78a7\u83ef\u570b\u6c11\u5c0f\u5b78]163.20.169.39 MS.RDP.Connection.Brute.Force \u4e8b\u4ef6\u63cf\u8ff0 ASOC\u767c\u73fe\u8cb4\u55ae\u4f4d(\u65b0\u5317\u5e02\u4e09\u91cd\u5340\u78a7\u83ef\u570b\u6c11\u5c0f\u5b78)\u6240\u5c6c 163.20.169.39 \u7591\u4f3c\u5c0d\u5916\u9032\u884c MS.RDP.Connection.Brute.Force \u653b\u64ca \u624b\u6cd5\u7814\u5224 \u8cb4\u55ae\u4f4d\u7591\u4f3c\u5c0d\u5916\u9032\u884c\u975e\u6cd5\u653b\u64ca\u884c\u70ba\uff0c\u9060\u7aef\u653b\u64ca\u8005\u5c0dMicrosoft RDP(Remote Desktop Protocol)\u9032\u884c\u66b4\u529b\u7684\u5bc6\u78bc\u731c\u6e2c\u653b\u64ca\uff0c\u653b\u64ca\u8005\u572810\u79d2\u5167\u9032\u884c200\u6b21\u7684\u767b\u5165\u8acb\u6c42\uff0c\u5982\u6210\u529f\u5229\u7528\u5c07\u53ef\u4ee5\u9023\u5165\u672a\u7d93\u6388\u6b0a\u7684\u7cfb\u7d71\uff0c\u9032\u884c\u975e\u6cd5\u7684\u5b58\u53d6\u3002 \u8655\u7406\u5efa\u8b70 \u60e0\u8acb\u8cb4\u55ae\u4f4d\uff1a<\/p>\n<p> \u6aa2\u67e5\u9632\u706b\u7246\u7d00\u9304\uff1a\u67e5\u770b\u5167\u90e8\u662f\u5426\u6709\u958b\u555f\u7570\u5e38\u6216\u672a\u7d93\u8a31\u53ef\u7684\u9023\u63a5\u57e0\uff0c\u4e26\u67e5\u770b\u8a18\u9304\u662f\u5426\u6709\u5916\u754c\u5c0d\u8cb4\u55ae\u4f4d\u5167\u90e8IP\u4e4b\u7570\u5e38\u9023\u7dda\u3002 \u5982\u767c\u73fe\u70ba\u975e\u6388\u6b0a\u7684\u9023\u7dda\uff0c\u5efa\u8b70\u5c07\u8a72IP\u65bc\u9632\u706b\u7246\u963b\u64cb\u3002 \u5efa\u8b70\u91dd\u5c0d\u88ab\u653b\u64ca\u7684\u4e3b\u6a5f\u505a\u597d\u76f8\u95dc\u4e3b\u6a5f\u7cfb\u7d71\u670d\u52d9\u6aa2\u67e5\u53ca\u5f31\u9ede\u4fee\u88dc\u78ba\u8a8d\u7684\u5de5\u4f5c\uff0c\u4e26\u95dc\u9589\u4e0d\u9700\u8981\u7684\u670d\u52d9\u3002 \u5c07\u6240\u4f7f\u7528\u7684\u5bc6\u78bc\u8907\u96dc\u5ea6\u63d0\u9ad8\u3002 \u53c3\u8003\u8cc7\u6599 \u7121 \u672c\u6821\u8655\u7406\u60c5\u5f62\uff1a \u767b\u5165\u300c\u6559\u80b2\u6a5f\u69cb\u8cc7\u901a\u5b89\u5168\u61c9\u8b8a\u7db2\u7ad9\u300d\uff0c\u4e86\u89e3\u4e8b\u4ef6\u767c\u751f\u60c5\u5f62\u3002 \u767b\u5165\u300c\u65b0\u5317\u5e02\u6821\u5712\u7db2\u8def\u7ba1\u7406\u5e73\u53f0\u300d\u6aa2\u8996 163.20.169.39 \u9023\u7dda\u72c0\u6cc1\u3002 \u78ba\u8a8d 163.20.169.39 \u96fb\u8166\u9023\u7dda\u7570\u5e38\uff0c\u9023\u7dda\u6578\u8d85\u904e 7000\u3002 \u67e5\u660e 163.20.169.39 \u70ba\u6587\u66f8\u7d44\u9577\u884c\u653f\u96fb\u8166\uff0c\u96fb\u8a71\u544a\u77e5\u96fb\u8166\u906d\u5165\u4fb5\u4e8b\u4ef6\uff0c\u60c5\u6cc1\u56b4\u91cd\uff0c\u53f0\u7063\u5b78\u8853\u7db2\u8def\u5371\u6a5f\u8655\u7406\u4e2d\u5fc3(TACERT) \u5df2\u5c0d\u672c\u6821\u767c\u4f48\u8cc7\u5b89\u901a\u5831-\u4eba\u4fb5\u4e8b\u4ef6\u8b66\u8a0a\uff0c\u8acb\u5176\u5c07\u66ab\u5c07\u96fb\u8166\u95dc\u6a5f\u6216\u62d4\u9664\u7db2\u8def\u7dda\u3002 \u5c07\u672c\u6821\u96fb\u8166\u906d\u5165\u4fb5\u4e8b\u4ef6\u61c9\u8b8a\u60c5\u5f62\uff0c\u56de\u5831\u6559\u80b2\u6a5f\u69cb\u8cc7\u901a\u5b89\u5168\u61c9\u8b8a\u7db2\u7ad9\u3002 \u96fb\u8166\u6aa2\u67e5\u7d50\u679c\uff1a \u9632\u6bd2\u8edf\u9ad4\u906d\u505c\u7528\uff0c\u4f46\u7121\u6cd5\u555f\u7528\u3002 \u6709\u4e0d\u660e\u5e33\u6236\u5efa\u7f6e\u65bc\u7cfb\u7d71\u4e2d\u3002 guest \u5e33\u6236\u88ab\u555f\u7528\u3002 \u7cfb\u7d71\u5b89\u88dd\u4e86\u4e00\u4e9b\u4e0d\u660e\u7684\u8edf\u9ad4\u3002 \u96fb\u8166\u9632\u706b\u7246\u958b\u4e86\u4e00\u4e9b\u5f8c\u9580\uff0c\u4f46\u79fb\u9664\u4e0d\u6389\u3002 [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[35,6],"tags":[],"_links":{"self":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts\/6456"}],"collection":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/comments?post=6456"}],"version-history":[{"count":0,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts\/6456\/revisions"}],"wp:attachment":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/media?parent=6456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/categories?post=6456"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/tags?post=6456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}