www.cj2s.de Gehe zur Webseite

blueblog by Christian J Dietrich

Ermittelte Webseitenkriterien und Platzierungen

Globales Ranking:	7.482.870
Eingehende Links:	8
Sprache/Land:	EN
Webseiten Geschwindigkeit:	0.675 Sekunden

Bewertung Besucher 74 / Tag Wert 988 € SEO Score 40/100 NEU!

Besucher Entwicklung

Zeitraum	Platzierung	Veränderung
3 Monate	7.482.870	3.616.189

Wichtigste Keywords

blog Christian botnet using DNS botnet command root DNSSEC key traffic analysis botnets IP addresses message chunks target IP time period message lengths target IP address malware samples user interface takedown operation ARP requests Monday positive rate security following figure rogue software true positive figure shows false positive usr lib bind address configured local address local address configured chrooted BIND resource record domain name make sure chroot environment ANSWER SECTION Unicast reply named chroot February Friday carrier December CentOS resolution Wednesday March perf configuration takedowns provided

Die IP-Adresse lautet 80.67.28.202.

DNS-Daten

Host	Klasse	Typ	Ziel
cj2s.de	IN	AAAA
cj2s.de	IN	SOA	ns.namespace4you.de
cj2s.de	IN	NS	ns2.namespace4you.de
cj2s.de	IN	NS	ns.namespace4you.de
cj2s.de	IN	MX	mxlb.ispgateway.de
cj2s.de	IN	A	80.67.28.202

Server-Ping

PING cj2s.de (80.67.28.202) 56(84) bytes of data.
64 bytes from belucha.ispgateway.de (80.67.28.202): icmp_req=1 ttl=57 time=10.5 ms
64 bytes from belucha.ispgateway.de (80.67.28.202): icmp_req=2 ttl=57 time=10.5 ms
64 bytes from belucha.ispgateway.de (80.67.28.202): icmp_req=3 ttl=57 time=10.5 ms
64 bytes from belucha.ispgateway.de (80.67.28.202): icmp_req=4 ttl=57 time=10.7 ms

--- cj2s.de ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 603ms
rtt min/avg/max/mdev = 10.564/10.620/10.751/0.127 ms

Die Seite hat eine Ladezeit von 0.675 Sekunden. Die Verbinungszeit zum Server beträgt 10.5ms.

HTTP-Header

HTTP-Tag	Wert
http_version	HTTP/1.1
statuscode	200
date	Sat, 02 Aug 2014 18:38:03 GMT
server	Apache/2.2.3 (CentOS)
x-powered-by	PHP/5.1.6
status	200 OK
set-cookie	s9y_200580e79de84d15fbe3ba15e0fb2ac5=h5c02qpqaoe3tc6pmqegf9bc52; path=/
expires	0
cache-control	private, pre-check=0, post-check=0, max-age=0
pragma	no-cache
x-session-reinit	true
x-blog	Serendipity
content-encoding	gzip
vary	Accept-Encoding
connection	close
transfer-encoding	chunked
content-type	text/html; charset=UTF-8

Meta Tags

Meta-Tag	Wert
Powered-By	Serendipity v.1.7.8
Content-Type	text/html; charset=UTF-8

Interne Links

Anchor	URL
Skip to archive page	http://blog.cj2s.de/archives
Frontpage	http://blog.cj2s.de/index.php
Publications	http://blog.cj2s.de/pages/publications.html
About me	http://blog.cj2s.de/pages/about-cjd.html
Performance Profiling Analysis using perf	http://blog.cj2s.de/archives/33-Performance-Profiling-Analysis-using-perf.html
Christian J. Dietrich	http://blog.cj2s.de/authors/1-Christian-J-Dietrich
Botnets	http://blog.cj2s.de/categories/1-Botnets
Tracking the Command and Control Activity of Botnets	http://blog.cj2s.de/archives/32-Tracking-the-Command-and-Control-Activity-of-Botnets.html
CoCoSpot	http://blog.cj2s.de/archives/30-CoCoSpot-Recognizing-Botnet-CC-Channels-using-Traffic-Anal...
C&C activity of botnets over time	http://blog.cj2s.de/uploads/BotnetFamiliesOverTime.png
Exploiting Visual Appearance to Cluster and Detect Rogue Software	http://blog.cj2s.de/archives/31-Exploiting-Visual-Appearance-to-Cluster-and-Detect-Rogue-S...
Fake A/V screenshot of the Winwebsec family	http://blog.cj2s.de/uploads/Winwebsec1.png
Ransomware asking the user to pay (in German)	http://blog.cj2s.de/uploads/Ransom1.png
Campaigns of the Winwebsec Fake A/V malware family	http://blog.cj2s.de/uploads/winwebsec-overview.png
"Exploiting Visual Appearance to Cluster and Detect Rogue Software"	http://blog.cj2s.de/rogue-visual-malware-dietrich-rossow.pdf
manuscript of our journal article on CoCoSpot	http://blog.cj2s.de/cocospot-dietrich-rossow-pohlmann.pdf
Preventing ARP flux on Linux	http://blog.cj2s.de/archives/29-Preventing-ARP-flux-on-Linux.html
Securing Linux	http://blog.cj2s.de/categories/4-Securing-Linux
Feederbot - a bot using DNS as carrier for its C&C	http://blog.cj2s.de/archives/28-Feederbot-a-bot-using-DNS-as-carrier-for-its-CC.html
work on covert communication of botnet command and control channels	http://blog.cj2s.de/archives/27-DNS-as-carrier-for-botnet-CC.html

Externe Links

Anchor	URL
Mariposa takedown	http://www.net-security.org/secworld.php?id=8962
takedown	http://krebsonsecurity.com/2013/01/polish-takedown-targets-virut-botnet/
operation	http://www.spamhaus.org/news/article/690/cooperative-efforts-to-shut-down-virut-botnet
Virut	http://www.scmagazineuk.com/virut-botnet-takedown-sinkholes-23-domains/article/276813/
our yet-to-be-published research paper on P2P botnet resilience	http://www.christian-rossow.de/publications.php
Kelihos/Hlux	http://www.kaspersky.com/about/news/virus/2012/How_Kaspersky_Lab_and_CrowdStrike_Dismantle...
change aspects such as the C&C encryption	http://www.securelist.com/en/blog/208193431/Botnet_Shutdown_Success_Story_again_Disabling_...
takedown	https://www.securelist.com/en/blog/208193137/Botnet_Shutdown_Success_Story_How_Kaspersky_L...
Sciencedirect	http://www.sciencedirect.com/science/article/pii/S1389128612002472
Morto	http://www.symantec.com/connect/blogs/morto-worm-sets-dns-record