关于139.exe病毒下载链接

三和大神

有没有哪位大佬愿意送点温暖过去？

前情提示：
https://www.hostloc.com/thread-775090-1-1.html
https://www.hostloc.com/thread-775194-1-1.html

1. nslookup wesleydonehue.me
   
2. 服务器:  dns.google
   
3. Address:  8.8.8.8
   
4. 
   
5. 非权威应答:
   
6. 名称:    wesleydonehue.me
   
7. Address:  8.208.99.64

复制代码

1. 31.44.184.139 - AS34665        31.44.184.0/24        net for Sherbakova hosting customer
   
2. 
   
3. 79.143.30.6 - AS49505        79.143.24.0/21        OOO "Network of data-centers "Selectel"
   
4. 79.143.30.6 - AS50340        79.143.28.0/22        OOO "Network of data-centers "Selectel"
   
5. 
   
6. 8.208.99.64 - AS45102        8.208.0.0/16        Aliyun Computing Co.LTD
   

复制代码

1. IP history results for wesleydonehue.me.
   
2. ==============
   
3. 
   
4. IP Address         IP Address Location        Last seen on this IP
   
5. 79.143.30.6        Russian        Selectel.ru         2020-12-01(55 min ago)
   
6. 47.254.169.80        Germany        Alibaba.com        2020-11-27
   
7. 34.102.136.180        America        Google LLC        2020-11-13
   
8. 184.168.221.42        America        GoDaddy.com        2020-07-03
   
9. 68.178.232.100        America        GoDaddy.com        2013-01-03

复制代码

1. > set type=ns
   
2. > wesleydonehue.me
   
3. 服务器:  UnKnown
   
4. Address:  119.29.29.29
   
5. 
   
6. 非权威应答:
   
7. wesleydonehue.me        nameserver = b.dnspod.com
   
8. wesleydonehue.me        nameserver = c.dnspod.com
   
9. wesleydonehue.me        nameserver = a.dnspod.com

复制代码

1. WHOIS Information for wesleydonehue.me
   
2. ==============
   
3. 
   
4. Domain Name: WESLEYDONEHUE.ME
   
5. Registry Domain ID: D108500000005276508-AGRS
   
6. Registrar WHOIS Server: whois.godaddy.com
   
7. Registrar URL: http://www.godaddy.com
   
8. Updated Date: 2020-11-19T12:59:24Z
   
9. Creation Date: 2012-09-09T20:09:33Z
   
10. Registry Expiry Date: 2021-09-09T20:09:33Z
    
11. Registrar Registration Expiration Date:
    
12. Registrar: GoDaddy.com, LLC
    
13. Registrar IANA ID: 146
    
14. Registrar Abuse Contact Email: abuse@godaddy.com
    
15. Registrar Abuse Contact Phone: +1.4806242505
    
16. Reseller:
    
17. Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
    
18. Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
    
19. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    
20. Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
    
21. Registrant Organization: Donehue Direct
    
22. Registrant State/Province: South Carolina
    
23. Registrant Country: US
    
24. Name Server: A.DNSPOD.COM
    
25. Name Server: C.DNSPOD.COM
    
26. DNSSEC: unsigned
    
27. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
    
28. >>> Last update of WHOIS database: 2020-12-01T05:35:03Z <<<
    
29. 
    
30. For more information on Whois status codes, please visit https://icann.org/epp

复制代码

1. Port scan results for 79.143.30.6
   
2. ==============
   
3. PORT        Status
   
4. 22        open
   
5. 80        open
   
6. 
   
7. Port scan results for 31.44.184.139
   
8. ==============
   
9. PORT        Service        Status
   
10. 139        NETBIOS        open
    
11. 3389        RDP        open
    

复制代码

abuse@godaddy.com
abuse@selectel.ru
abuse@pinspb.ru
abuse@dnspod.com


DNSPod域名举报：https://www.dnspod.cn/report
阿里云国际版举报：https://www.alibabacloud.com/zh/report#abuse



备注：47.254.169.80、79.143.30.6 已被空路由。

nat.ee

llmwxt 发表于 2020-12-1 13:48
我查了，没有所说的文件，火绒也没有报过毒

这是病毒看我是小白，所以懒得盗我资料？

火绒能杀毒吗？

kittyy487

大佬们牛皮啊
我这里好像打不开了...

douglasleft

没用过，吃瓜看戏

三和大神

兔斯基 发表于 2020-12-1 13:47
牛皮，大佬是怎么获取到ip的

当然是nslookup命令啊

wop

空路由是什么意思