3322.orgのバリエーション

Web改ざんの流行と同じもので、また、3322.orgのバリエーションです。

 e6t.3322.org
 s581.3322.org

 
 e6t.3322.org
 s581.3322.org
 ↓
 www.2009iiii.cn/xxx/xxx.htm
 ↓
 www.712sese.cn/xxx/xxx/htm
 ↓
 www.712sese.cn/ｘｘｘｘｘｘｘｘ
 www.712sese.cn/ｘｘｘｘｘｘｘｘ
 www.712sese.cn/ｘｘｘｘｘｘｘｘ

e6t.3322.orgとs581.3322.orgは同じIPアドレス。

 s581.3322.org.          60      IN      A       70.38.99.97
 
 ;; AUTHORITY SECTION:
 3322.org.               58      IN      NS      ns2.3322.net.
 3322.org.               58      IN      NS      ns1.3322.net.
 
 ;; ADDITIONAL SECTION:
 ns1.3322.net.           58      IN      A       61.177.95.106
 ns2.3322.net.           58      IN      A       60.191.83.242

 e6t.3322.org.           58      IN      A       70.38.99.97
 
 ;; AUTHORITY SECTION:
 3322.org.               90      IN      NS      ns2.3322.net.
 3322.org.               90      IN      NS      ns1.3322.net.
 
 ;; ADDITIONAL SECTION:
 ns1.3322.net.           89      IN      A       61.177.95.106
 ns2.3322.net.           89      IN      A       60.191.83.242

www.712sese.cnと www.2009iiii.cnは同じIPアドレス

 www.712sese.cn.         102     IN      A       59.34.197.115
 
 ;; AUTHORITY SECTION:
 www.712sese.cn.         102     IN      NS      ns.cdnhost.cn.
 www.712sese.cn.         102     IN      NS      ns2.dnsfamily.com.
 www.712sese.cn.         102     IN      NS      ns.dnsfamily.com.
 www.712sese.cn.         102     IN      NS      ns1.dnsfamily.com.
 
 ;; ADDITIONAL SECTION:
 ns.dnsfamily.com.       89      IN      A       125.65.112.26

 www.2009iiii.cn.        70      IN      A       59.34.197.115
 
 ;; AUTHORITY SECTION:
 www.2009iiii.cn.        70      IN      NS      ns.cdnhost.cn.
 www.2009iiii.cn.        70      IN      NS      ns1.dnsfamily.com.
 www.2009iiii.cn.        70      IN      NS      ns.dnsfamily.com.
 www.2009iiii.cn.        70      IN      NS      ns2.dnsfamily.com. 
 
 ;; ADDITIONAL SECTION:
 ns.dnsfamily.com.       70      IN      A       125.65.112.26
 

レジストラントも同じ人。

中国語が化けるので省略。

[カテゴリ:botnet観察日記]

by jyake