The following is a log file of whois information collected during the analysis of the Judin.ru exploit. The log file was created on the 27th and 28th of June 2005.
Registrant:
Vlad doBLOCKEDmain@vladzone.com +1.8129000000
VladZone
SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
DENIA,ALICANTE,ES 03700
Domain Name:moonri.com
Record last updated at 2004-11-03 20:01:05
Record created on 2004/11/3
Record expired on 2005/11/3
Domain servers in listed order:
ns1.dns-diy.com ns2.dns-diy.com
Administrator:
name: Vlad
mail: domain@vladzone.com tel: +1.8129000000
org: VladZone
address: SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
city: DENIA
,province: ALICANTE
,country: ES
postcode: 03700
Technical Contactor:
name: Vlad
mail: domBLOCKEDain@vladzone.com tel: +1.8129000000
org: VladZone
address: SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
city: DENIA
,province: ALICANTE
,country: ES
postcode: 03700
Billing Contactor:
name: Vlad
mail: domBLOCKEDain@vladzone.com tel: +1.8129000000
org: VladZone
address: SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
city: DENIA
,province: ALICANTE
,country: ES
postcode: 03700
Registration Service Provider:
name: TeleCom
tel: +2.1671962313
fax: +2.1671962313
web:http://www.modget.com
Registrant:
Vlad lotrBLOCKED@pisem.net +7.09500000
VCom"
1st Street
Moscow,RU,RU 111000""
Domain Name:vladzone.com
Record last updated at 2004-11-01 11:19:22
Record created on 2004/1/15
Record expired on 2006/1/15
Domain servers in listed order:
ns1.dns-diy.com ns2.dns-diy.com
Administrator:
1st Street
Moscow
RU,
RU
111000
name:(Vlad")
mail:(lotrBLOCKED@pisem.net) +7.09500000
VCom"
Technical Contactor:
1st Street
Moscow
RU,
RU
111000
name:(Vlad")
mail:(lotrBLOCKED@pisem.net) +7.09500000
VCom"
Billing Contactor:
1st Street
Moscow
RU,
RU
111000
name:(5472")
mail:(lotrBLOCKED@pisem.net) +7.09500000
VCom"
Registration Service Provider:
name: Rustelekom Ltd.
tel: +1.8666254678
fax: +1.9782465632
web:http://nameservers.ru
Domain ID:D104481524-LROR
Domain Name:PANET.ORG
Created On:01-Jun-2004 00:00:13 UTC
Last Updated On:01-Jun-2005 01:44:23 UTC
Expiration Date:01-Jun-2006 00:00:13 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:ONLC-1180196-4
Registrant Name:ANDREY SHCHEGOLIKHIN
Registrant Organization:VladZone
Registrant Street1:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Registrant Street2:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Registrant Street3:
Registrant City:DENIA
Registrant State/Province:ALICANTE
Registrant Postal Code:03700
Registrant Country:ES
Registrant Phone:+1.8129000000
Registrant Phone Ext.:1111
Registrant FAX:+1.8129000000
Registrant FAX Ext.:
Registrant Email:domaBLOCKEDin@vladzone.com
Admin ID:ONLC-1180196-1
Admin Name:ANDREY SHCHEGOLIKHIN
Admin Organization:VladZone
Admin Street1:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Admin Street2:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Admin Street3:
Admin City:DENIA
Admin State/Province:ALICANTE
Admin Postal Code:03700
Admin Country:ES
Admin Phone:+1.8129000000
Admin Phone Ext.:1111
Admin FAX:+1.8129000000
Admin FAX Ext.:
Admin Email:domBLOCKEDain@vladzone.com
Tech ID:ONLC-1180196-2
Tech Name:ANDREY SHCHEGOLIKHIN
Tech Organization:VladZone
Tech Street1:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Tech Street2:SERVIBOX, BUZON N 442, PATRISIO FERRANDIZ 40
Tech Street3:
Tech City:DENIA
Tech State/Province:ALICANTE
Tech Postal Code:03700
Tech Country:ES
Tech Phone:+1.8129000000
Tech Phone Ext.:1111
Tech FAX:+1.8129000000
Tech FAX Ext.:
Tech Email:doBLOCKEDmain@vladzone.com
Name Server:NS2.DNS-DIY.COM
Name Server:NS1.DNS-DIY.COM
domain: JPS.RU
type: CORPORATE
descr: JpS projects
nserver: ns1.nameself.com.
nserver: ns2.nameself.com.
state: REGISTERED, DELEGATED
person: Dmitry V Shipulin
phone: +7 8120000000
e-mail: nettiBLOCKEDme@jps.ru
registrar: RUCENTER-REG-RIPN
created: 2002.08.04
paid-till: 2005.08.04
source: TC-RIPN
Last updated on 2005.06.28 14:48:14
MSK/MSD
domain: WEBBET.RU
type: CORPORATE
descr: webbet project
nserver: ns1.nameself.com.
nserver: ns2.nameself.com.
state: REGISTERED, DELEGATED
person: Vyacheslav N Maximov
phone: +7 9052063456
fax-no: +7 9052063456
e-mail: webnaBLOCKEDmes@vladzone.com
registrar: REGTIME-REG-RIPN
created: 2005.02.08
paid-till: 2006.02.08
source: TC-RIPN
Last updated on 2005.06.28 14:48:14
MSK/MSD