DNS沉洞
Embed This Widget
Add the script tag and a data attribute to embed this widget.
Embed via iframe for maximum compatibility.
<iframe src="https://tldfyi.com/iframe/glossary/dns-sinkhole/" width="420" height="400" frameborder="0" style="border:0;border-radius:10px;max-width:100%" loading="lazy"></iframe>Paste this URL in WordPress, Medium, or any oEmbed-compatible platform.
https://tldfyi.com/glossary/dns-sinkhole/Add a dynamic SVG badge to your README or docs.
[](https://tldfyi.com/glossary/dns-sinkhole/)Use the native HTML custom element.
DNS沉洞是一种[[dns-zone|DNS区域]]或[[recursive-dns|解析器]]配置，针对与恶意软件、僵尸网络C&C服务器、钓鱼网站或其他恶意基础设施相关的域名返回不可路由或受控的IP地址。安全团队和ISP部署沉洞，将恶意流量重定向到受控端点而非其目标，以此中和威胁。沉洞还能进行流量分析：每一次针对沉洞IP的连接尝试都会暴露被感染的主机。Cloudflare Gateway、Quad9和企业DNS安全平台等商业服务将沉洞作为核心功能实现。
示例
When Quad9 (9.9.9.9) receives a query for a known malware C2 domain, it returns a sinkhole IP instead of the real address, preventing the infected host from communicating with the attacker's server.