Tencent QQ server summary table and methods for disabling QQ

QQ is so successful, so surely my friends who work as network administrators in the Enterprise will be troubled by this. I am only one of them;
As we all know, QQ servers and ports are very large. So it is very troublesome to disable it. However, for some special reasons, it must be disabled. Here we will introduce some methods that are easier to prohibit. For your reference. I personally use 2505 + nR and 2605 of netcore routers. The same applies to other routes. You will find that prohibiting QQ is not a headache. However, if you have extra money, you can buy a jusheng Network Manager (www.grabsun.com!
I. In fact, QQ mainly uses TCP/UDP port 8000 during login. Therefore, we first disable access from all Intranet machines to port 8000 of the remote host. In the high-end vro of netcore, we can add rules in Internet Access Control. First, we can choose to apply the rules to all internal hosts (the next step can handle the situation, for example, you can choose to be valid for some hosts or a host ). Select valid for all internal hosts, specify valid for the following applications, specify TCP/UDP protocol, set port to 8000, and disable Internet access. In this way, all servers that use port 8000 to log on cannot log on.
2. Some servers use TCP port 80 and port 443 for login. All these servers will use the domain name to decrypt their IP addresses. The calculated domain names include tcpconn1.tencent.com, tcpconn2.tencent.com,
Tcpconn3.tencent.com, tcpconn4.tencent.com, tencent.com, and tencent.com.cn .. Then, it is valid for all applications on these servers or specified to be valid for TCP/UDP port 80 and port 443 to Prohibit Internet access.
3. At this time, QQ cannot be fully controlled, but most of them are then logged on using QQ Software to see which ports he will log on to from those servers. Restrict these servers separately.
4. In this way, the entire process of prohibiting QQ is completed.
5. List common Server IP addresses of MSN and QQ.
MSN server address
65.54.225.254 65.54.226.254 65.54.228.244 65.54.228.253 65.54.229.248
65.54.229.253 65.54.225.241 65.54.226.247
Qq server address
219.133.40.15 218.17.209.23 202.104.129.252 218.18.95.153 202.104.129.10961.144.238.145 202.104.129.253 61.141.194.203
202.104.129.254 218.18.95.165 61.144.238.146 219.133.40.91
211.248.99.252 218.17.217.66 61.144.238.156 219.133.40.89
219.133.40.115 219.133.40.90 219.133.40.113 219.133.40.114
210.22.12.126 61.141.194.223 61.172.249.135 202.104.128.233
202.96.170.164 218.17.217.103 218.66.59.233 61.141.194.207
202.96.170.163 202.96.170.166 202.96.140.18 202.96.140.119
202.96.140.8 202.96.140.12 218.18.95.221 219.133.45.15
61.141.194.425218.17.209.42 61.141.194.227 218.18.95.171
219.133.49.6 219.133.49.73 219.133.48.56 219.133.40.215
219.133.38.132 219.133.38.30 219.133.40.177 219.133.38..pdf
219.133.38.29 219.133.48.88 219.133.38.31 219.133.60.34
(The server will also increase. I hope my friends will find out that I have disabled so many IP addresses for the route, and I also need to filter some domain names)
Sz.tencent.com: 8000
Sz2.tencent.com: 8000
Sz3.tencent.com: 8000
Sz4.tencent.com: 8000
Sz5.tencent.com: 8000
Sz6.tencent.com: 8000
Sz7.tencent.com: 8000
Tcpconn.tencent.com: 80;
Tcpconn2.tencent.com: 80
Tcpconn3.tencent.com: 80
Tcpconn4.tencent.com: 80
Tcpconn2.tencent.com: 80
Tcpconn3.tencent.com: 80
Tcpconn4.tencent.com: 80
Http://http2.tencent.com/
Http://http.tencent.com: 443/
Qq servers are divided into three types:
1. UDP 8000 Port Class 13: the fastest speed, the most server.
QQ will send UDP data packets to the 11 servers online, and select the one with the fastest response speed as the connection server.
The names of the six servers start with SZ and the domain suffix is tencent.com. The domain name corresponds to the IP address
SZ sz2: 61.144.238.145 61.144.238.146 61.144.238.156
Sz3 sz4 sz6 sz7: 202.104.129.20.202.104.129.254 202.104.129.252
202.104.129.253
Sz5: 61.141.194.203 202.96.170.166 218.18.95.221 219.133.45.15
61.141.194.20.202.96.170.164
2. tcp http connects to four servers and uses HTTP 80 and 443 ports for connection
The names of the four servers start with tcpconn and the domain suffix is tencent.com. The domain name corresponds to the IP address
Tcpconn tcpconn3 218.17.209.23
Tcpconn2 tcpconn4 218.18.95.153 61.141.194.227 218.18.95.171
3. log on to the server as a VIP and use HTTP 443 for secure connection.
Server IP address 218.17.209.42
If you know the addresses of these servers, It will be OK if they are all blocked. No one can go to QQ, and the agent software will talk about it again ).
If yes, a new server is added! See killing one! Hey!
QQ: currently, the default port is 4000, which transfers UDP. However, and are also used for UDP transmission. No matter 3721, all are prohibited.