[MASOCH-L] RES: http://5y5.us

[Renato Frederick]

Tem cara de ser um malware

O IP é deste provedor: http://www.kornet.net/, parece ser uma "Telemar",
"speedy" da koreia.

O whois retorna ip at krnic.kornet.net como contato administrativo.

Tente mandar um email prá este pessoal.. Por via das dúvidas, até
responderem, uma rota para 121.128.0.0 - 121.191.255.255 indo pro /dev/null
não faria mal(drástico né) :-)

> -----Mensagem original-----
> De: masoch-l-bounces at eng.registro.br [mailto:masoch-l-
> bounces at eng.registro.br] Em nome de Lao DanTong
> Enviada em: quinta-feira, 31 de maio de 2007 12:06
> Para: Mail Aid and Succor, On-line Comfort and Help
> Assunto: Re: [MASOCH-L] http://5y5.us
> 
> On Thu, 31 May 2007 david at infonet.com.br wrote:
> 
> >    Alguém está sabendo de alguma nova praga que congestiona o link de
> > internet? Estou com diversos pontos com este problema, e atravez dos
> > logs do firewall, vejo que sai um grande volume de acesso para o
> > endereço 'http://5y5.us', pesquisando no google sobre só acho
> material
> > que vem da china, e pelas datas de postagem são recentes. Anti-vírus
> e
> > Ad-wares diversos não encontram nada nas estações.
> 
> pode ser algum 'ET phoning home'.
> 
> whois 5y5.us retorna:
> Domain Name:                                 5Y5.US
> Domain ID:                                   D12597980-US
> Sponsoring Registrar:                        ENOM, INC.
> Domain Status:                               clientTransferProhibited
> Registrant ID:                               707C218CD76B2A53
> Registrant Name:                             fujian xiaobi
> Registrant Organization:                     fujian
> Registrant Address1:                         fujianbiwolaile
> Registrant City:                             fujianbiwolaile
> Registrant State/Province:                   fujian
> Registrant Postal Code:                      520025
> Registrant Country:                          Congo
> Registrant Country Code:                     CG
> Registrant Phone Number:                     +10.25689521
> Registrant Email:                            weiyudns at 56.com
> Registrant Application Purpose:              P1
> Registrant Nexus Category:                   C32/CN
> Administrative Contact ID:                   707C218CD76B2A53
> Administrative Contact Name:                 fujian xiaobi
> Administrative Contact Organization:         fujian
> Administrative Contact Address1:             fujianbiwolaile
> Administrative Contact City:                 fujianbiwolaile
> Administrative Contact State/Province:       fujian
> Administrative Contact Postal Code:          520025
> Administrative Contact Country:              Congo
> Administrative Contact Country Code:         CG
> Administrative Contact Phone Number:         +10.25689521
> Administrative Contact Email:                weiyudns at 56.com
> Administrative Application Purpose:          P1
> Administrative Nexus Category:               C32/CN
> Billing Contact ID:                          707C218CD76B2A53
> Billing Contact Name:                        fujian xiaobi
> Billing Contact Organization:                fujian
> Billing Contact Address1:                    fujianbiwolaile
> Billing Contact City:                        fujianbiwolaile
> Billing Contact State/Province:              fujian
> Billing Contact Postal Code:                 520025
> Billing Contact Country:                     Congo
> Billing Contact Country Code:                CG
> Billing Contact Phone Number:                +10.25689521
> Billing Contact Email:                       weiyudns at 56.com
> Billing Application Purpose:                 P1
> Billing Nexus Category:                      C32/CN
> Technical Contact ID:                        707C218CD76B2A53
> Technical Contact Name:                      fujian xiaobi
> Technical Contact Organization:              fujian
> Technical Contact Address1:                  fujianbiwolaile
> Technical Contact City:                      fujianbiwolaile
> Technical Contact State/Province:            fujian
> Technical Contact Postal Code:               520025
> Technical Contact Country:                   Congo
> Technical Contact Country Code:              CG
> Technical Contact Phone Number:              +10.25689521
> Technical Contact Email:                     weiyudns at 56.com
> Technical Application Purpose:               P1
> Technical Nexus Category:                    C32/CN
> Name Server:                                 DNS1.NAME-SERVICES.COM
> Name Server:                                 DNS2.NAME-SERVICES.COM
> Name Server:                                 DNS3.NAME-SERVICES.COM
> Name Server:                                 DNS4.NAME-SERVICES.COM
> Created by Registrar:                        ENOM, INC.
> Last Updated by Registrar:                   ENOM, INC.
> Domain Registration Date:                    Tue May 15 08:22:25 GMT
> 2007
> Domain Expiration Date:                      Wed May 14 23:59:59 GMT
> 2008
> Domain Last Updated Date:                    Tue May 15 08:22:29 GMT
> 2007
> 
> Congo? bwana, deve ser picaretagem da boa! e teus micros devem estar
> todos
> bichados.
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l