方括号中的 IPv4 地址点
IPv4 address dot in square brackets
我被要求阻止以下形式的 IP 地址：
1.111.1[.]111
我从未在 IPv4 中遇到过方括号中的点。
它有什么意义或解释吗？
[根据 Espresso 明智的评论编辑答案]
可以在此处找到有关该主题的一些有价值的信息：https://inquest.readthedocs.io/projects/iocextract/en/latest/
引用：
It is common practice for malware analysts or endpoint software to “defang” IOCs such as URLs and IP addresses, in order to prevent accidental exposure to live malicious content. Being able to extract and aggregate these IOCs is often valuable for analysts. Unfortunately, existing “IOC extraction” tools often pass right by them, as they are not caught by standard regex.
For example, the simple defanging technique of surrounding periods with brackets: 127[.]0[.]0[.]1
Existing tools that use a simple IP address regex will ignore this IOC entirely.
总而言之，此表示法使 links/ip 不可能“错误”地单击或使用，以减轻与那些妥协指标相关的风险。
我被要求阻止以下形式的 IP 地址：
1.111.1[.]111
我从未在 IPv4 中遇到过方括号中的点。 它有什么意义或解释吗？
[根据 Espresso 明智的评论编辑答案]
可以在此处找到有关该主题的一些有价值的信息：https://inquest.readthedocs.io/projects/iocextract/en/latest/
引用：
It is common practice for malware analysts or endpoint software to “defang” IOCs such as URLs and IP addresses, in order to prevent accidental exposure to live malicious content. Being able to extract and aggregate these IOCs is often valuable for analysts. Unfortunately, existing “IOC extraction” tools often pass right by them, as they are not caught by standard regex.
For example, the simple defanging technique of surrounding periods with brackets: 127[.]0[.]0[.]1
Existing tools that use a simple IP address regex will ignore this IOC entirely.
总而言之，此表示法使 links/ip 不可能“错误”地单击或使用，以减轻与那些妥协指标相关的风险。