North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: .mn.rr.com dns possibly hacked?

  • From: Carlos Heller
  • Date: Sat Mar 10 19:44:37 2001

Hello,


maybe an spoofing Attack.....

cu
	(C)arlos

On Sat, Mar 10, 2001 at 01:28:06PM -0600, Kevin Day wrote:
> Delivered-To: [email protected]
> Delivered-To: [email protected]
> From: Kevin Day <[email protected]>
> Subject: .mn.rr.com dns possibly hacked?
> To: [email protected]
> Date: Sat, 10 Mar 2001 13:28:06 -0600 (CST)
> X-Mailer: ELM [version 2.5 PL3]
> Precedence: bulk
> Errors-To: [email protected]
> X-Loop: nanog
> 
> 
> One of my customers, who's got a cable modem off of mn.rr.com is reporting
> that roughly half the DNS lookups being done on their servers are returning 
> the IP to www.lolitasex.com. I have no idea how widespread this is, but
> apparently others in minneapolis are seeing the same thing.
> 
> If any of you have customers asking why their website is now a porn site,   
> this may be why. :)
> 
> -- Kevin
> 

-- 
___ ___ ___ ___
\C/ \O/ \L/ \T/ (C)arlos Heller ([email protected]) - COLT TELECOM GmbH
 V   V   V   V  Fon +49 69 95958 0 - Fax +49 69 959598 6350