Unverified50% confidenceFactExact time
DNS tunnel encoding typically uses Base32 or Base64, because domain name labels only allow letters, digits, and hyphens.
1
Sources
50%
Confidence
Long-term
Relevance
9/27/2026
First Seen
Sources
Related Entities
Related Claims
Unverified若设备使用硬编码IP而非域名，DNS层封锁无效，还需配合路由器防火墙的出站规则68% similarUnverifiedDNS tunneling is a classic covert data exfiltration technique that encodes data into DNS query requests; because the DNS protocol must be allowed through in almost all network environments, traditional firewalls find it very difficult to block completely.65% similarUnverifiedMalware typically does not hard-code IP addresses, but instead locates C2 servers through domain name resolution to enable rapid switching after an IP is blocked; the related techniques are known as Fast Flux or Domain Generation Algorithms (DGA).60% similarUnverifiedDNS在诞生前依赖由SRI-NIC维护的集中式HOSTS.TXT文件进行主机名到地址的映射59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/953002API
curl https://kongchang.com/api/v1/knowledge/claims/953002MCP
get_claim(id=953002)