[105061] in North American Network Operators' Group
Re: OT: www.Amazon.com down?
daemon@ATHENA.MIT.EDU (Jay Hennigan)
Fri Jun 6 15:32:57 2008
Date: Fri, 06 Jun 2008 12:30:04 -0700
From: Jay Hennigan <jay@west.net>
To: nanog@nanog.org
In-Reply-To: <20080606191923.GF22025@lola.aquick.org>
Errors-To: nanog-bounces@nanog.org
Adam Fields wrote:
> This is rather suspicious (and confirmed by three other people):
>
> ------------------------------------------------
> $ whois amazon.com
>
> AMAZON.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM
> AMAZON.COM.MORE.INFO.AT.WWW.BEYONDWHOIS.COM
> AMAZON.COM.IS.N0T.AS.1337.AS.WWW.GULLI.COM
> AMAZON.COM
> ------------------------------------------------
>
> whois for yahoo.com and google.com yield similar results.
>
> I expect this means that DNS has been compromised somewhere.
No compromise, just people getting cute by registering host records.
Microsoft.com is a mild example...
--
Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net
Impulse Internet Service - http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV
