IPtables:
iptables --insert INPUT -p udp --dport 53 -m u32 --u32 "0x28&0xFFDFDFDF=0x05434d49 && 0x2c&0xDFDFFFDF=0x55490343 && 0x30&0xDFDFFFFF=0x4f4d0000" -j DROP -m comment --comment "DROP DNS Q cmiui.com"
Source:
96.46.2.82 - AS19853 USONL-2 - US Online Sales, Inc.
Also seen this IP for:
16-Aug-2013 - bfhmm.com in TXT
19-Aug-2013 - bfhmm.com in AAAA
Name server:
cmiui.com. 1334 IN NS pdns03.domaincontrol.com.
cmiui.com. 1334 IN NS pdns04.domaincontrol.com.
Response:
TXT "\"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\""
Whois
Registrars.
Domain Name: CMIUI.COM
Registrar URL: http://www.godaddy.com
Updated Date: 2013-09-24 23:55:27
Creation Date: 2013-09-23 13:19:22
Registrar Expiration Date: 2014-09-23 13:19:22
Registrar: GoDaddy.com, LLC
Registrant Name: Peter Wang
Registrant Organization:
Registrant Street: No.10 Nanjing Rd, Huangpu DIST
Registrant City: Shanghai
Registrant State/Province: Shanghai
Registrant Postal Code: 200010
Registrant Country: China
Admin Name: Peter Wang
Admin Organization:
Admin Street: No.10 Nanjing Rd, Huangpu DIST
Admin City: Shanghai
Admin State/Province: Shanghai
Admin Postal Code: 200010
Admin Country: China
Admin Phone: +0.862065739586
Admin Fax:
Admin Email: jjhenteng@gmail.com
Tech Name: Peter Wang
Tech Organization:
Tech Street: No.10 Nanjing Rd, Huangpu DIST
Tech City: Shanghai
Tech State/Province: Shanghai
Tech Postal Code: 200010
Tech Country: China
Tech Phone: +0.862065739586
Tech Fax:
Tech Email: jjhenteng@gmail.com
Name Server: PDNS03.DOMAINCONTROL.COM
Name Server: PDNS04.DOMAINCONTROL.COM
No comments:
Post a Comment