Domain: 37349.info

Domain: 37349.info

If you are seeing queries for this domain, than you are likely participating in DNS Amplification attacks and your DNS server is probably reachable from the internet and has recursion enabled.

If you are seeing responses for this domain.. unlucky. You are currently beeing DDOS-ed! Good luck.

IPtables:

There are two iptable rules available. If your distribution supports Iptables 'u32' module pick this one, otherwise use the 'string' rule.

U32:
iptables --insert INPUT -p udp --dport 53 -m u32 --u32 "0x28=0x05333733 && 0x2c&0xFFFFFFDF=0x34390449 && 0x30&0xDFDFDFFF=0x4e464f00" -j DROP -m comment --comment "DROP DNS Q 37349.info"

More U32 rules can be found here:

https://github.com/smurfmonitor/dns-iptables-rules/blob/master/domain-blacklist.txt

String:
iptables --insert INPUT -p udp --dport 53 -m string --from 40 --to 52 --algo bm --hex-string '|05333733343904696e666f00|' -j DROP -m comment --comment "DROP DNS Q 37349.info"
More Iptables rules for the STRING module can be found here:


https://github.com/smurfmonitor/dns-iptables-rules/blob/master/domain-blacklist-string.txt

Source:

No IP source for this domain

Name server:

;; ANSWER SECTION:
37349.info. 7200 IN NS ns1.sdfre.info.
37349.info. 7200 IN NS ns2.sdfre.info.

;; ADDITIONAL SECTION:
ns1.sdfre.info. 60925 IN A 64.62.186.125
ns1.sdfre.info. 60925 IN A 162.211.182.100
ns1.sdfre.info. 60925 IN A 162.211.182.101
ns1.sdfre.info. 60925 IN A 162.211.182.102
ns1.sdfre.info. 60925 IN A 162.211.182.103
ns1.sdfre.info. 60925 IN A 162.212.182.66
ns1.sdfre.info. 60925 IN A 162.212.182.67
ns1.sdfre.info. 60925 IN A 162.212.182.81
ns1.sdfre.info. 60925 IN A 162.212.182.163
ns1.sdfre.info. 60925 IN A 162.212.182.165
ns1.sdfre.info. 60925 IN A 64.62.186.77
ns1.sdfre.info. 60925 IN A 64.62.186.91
ns1.sdfre.info. 60925 IN A 64.62.186.110
ns2.sdfre.info. 60925 IN A 162.211.182.100
ns2.sdfre.info. 60925 IN A 162.211.182.101
ns2.sdfre.info. 60925 IN A 162.211.182.102
ns2.sdfre.info. 60925 IN A 162.211.182.103
ns2.sdfre.info. 60925 IN A 162.212.182.66
ns2.sdfre.info. 60925 IN A 162.212.182.67
ns2.sdfre.info. 60925 IN A 162.212.182.81
ns2.sdfre.info. 60925 IN A 162.212.182.163
ns2.sdfre.info. 60925 IN A 162.212.182.165
ns2.sdfre.info. 60925 IN A 64.62.186.77
ns2.sdfre.info. 60925 IN A 64.62.186.91
ns2.sdfre.info. 60925 IN A 64.62.186.110
ns2.sdfre.info. 60925 IN A 64.62.186.125

Response:

A 257
NS 2
SOA 1
Rsize 4211

Whois

Domain ID:D50794519-LRMS
Domain Name:37349.INFO
Created On:08-Oct-2013 08:05:47 UTC
Last Updated On:11-Oct-2013 16:03:32 UTC
Expiration Date:08-Oct-2014 08:05:47 UTC
Sponsoring Registrar:GoDaddy.com, LLC (R171-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CR152354753
Registrant Name:edson edson
Registrant Organization:
Registrant Street1:beijing
Registrant Street2:
Registrant Street3:
Registrant City:beijing
Registrant State/Province:beijing
Registrant Postal Code:511111
Registrant Country:CN
Registrant Phone:+1.5555555555
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:afanti6@gmail.com
Admin ID:CR152354755
Admin Name:edson edson
Admin Organization:
Admin Street1:beijing
Admin Street2:
Admin Street3:
Admin City:beijing
Admin State/Province:beijing
Admin Postal Code:511111
Admin Country:CN
Admin Phone:+1.5555555555
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:afanti6@gmail.com
Billing ID:CR152354756
Billing Name:edson edson
Billing Organization:
Billing Street1:beijing
Billing Street2:
Billing Street3:
Billing City:beijing
Billing State/Province:beijing
Billing Postal Code:511111
Billing Country:CN
Billing Phone:+1.5555555555
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:afanti6@gmail.com
Tech ID:CR152354754
Tech Name:edson edson
Tech Organization:
Tech Street1:beijing
Tech Street2:
Tech Street3:
Tech City:beijing
Tech State/Province:beijing
Tech Postal Code:511111
Tech Country:CN
Tech Phone:+1.5555555555
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:afanti6@gmail.com
Name Server:NS1.SDFRE.INFO
Name Server:NS2.SDFRE.INFO
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server: