Domaint: qha.cc

Seen a scan for this domain.

Source:

80.82.70.239 AS29073 Ecatel Network

Seen before:

      2 evgeniy-marchenko.cc

      1 qha.cc

Response:

240 A records in the 204.46.43.x range

IPtables rule:

iptables --insert INPUT -p udp --dport 53 -m u32 --u32 "0x28&0xFFDFDFDF=0x03514841 && 0x2c&0xFFDFDFFF=0x02434300" -j DROP -m comment --comment "DROP DNS Q qha.cc"


More rules here

Name servers:

;; ANSWER SECTION:
qha.cc. 10800 IN NS c.dns.gandi.net.
qha.cc. 10800 IN NS b.dns.gandi.net.
qha.cc. 10800 IN NS a.dns.gandi.net.

;; ADDITIONAL SECTION:
c.dns.gandi.net. 86310 IN A 217.70.182.20
b.dns.gandi.net. 86310 IN A 217.70.184.40
a.dns.gandi.net. 86310 IN A 173.246.97.2

Whois:

domain: qha.cc
reg_created: 2013-08-22 16:35:05
expires: 2014-08-22 16:35:05
created: 2013-08-22 18:35:05
changed: 2013-08-22 18:36:34
transfer-prohibited: yes
ns0: a.dns.gandi.net
ns1: b.dns.gandi.net
ns2: c.dns.gandi.net
owner-c:
  nic-hdl: DD7253-GANDI
  owner-name: duck duck
  organisation: ~
  person: duck duck
  address: Lolkino
  zipcode: 123456
  city: Russhka
  country: Ukraine
  phone: +380.2282282288
  fax: ~
  email: 1da73e36cc887f074e8f9e877b796d54-1769481@contact.gandi.net
  lastupdated: 2013-08-22 18:10:02
admin-c:
  nic-hdl: DD7253-GANDI
  owner-name: duck duck
  organisation: ~
  person: duck duck
  address: Lolkino
  zipcode: 123456
  city: Russhka
  country: Ukraine
  phone: +380.2282282288
  fax: ~
  email: 1da73e36cc887f074e8f9e877b796d54-1769481@contact.gandi.net
  lastupdated: 2013-08-22 18:10:02
tech-c:
  nic-hdl: DD7253-GANDI
  owner-name: duck duck
  organisation: ~
  person: duck duck
  address: Lolkino
  zipcode: 123456
  city: Russhka
  country: Ukraine
  phone: +380.2282282288
  fax: ~
  email: 1da73e36cc887f074e8f9e877b796d54-1769481@contact.gandi.net
  lastupdated: 2013-08-22 18:10:02
bill-c:
  nic-hdl: DD7253-GANDI
  owner-name: duck duck
  organisation: ~
  person: duck duck
  address: Lolkino
  zipcode: 123456
  city: Russhka
  country: Ukraine
  phone: +380.2282282288
  fax: ~
  email: 1da73e36cc887f074e8f9e877b796d54-1769481@contact.gandi.net
  lastupdated: 2013-08-22 18:10:02