[163864] in North American Network Operators' Group
RE: Need help in flushing DNS
daemon@ATHENA.MIT.EDU (Frank Bulk)
Thu Jun 20 11:37:28 2013
From: "Frank Bulk" <frnkblk@iname.com>
To: "NANOG list" <nanog@nanog.org>
In-Reply-To: <CAAAwwbU+ZXp08=6kN8V34yYOHjARcP1b98B7dLLPqO9YkX6d8Q@mail.gmail.com>
Date: Thu, 20 Jun 2013 10:36:20 -0500
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Some news coverage here with pretty pictures of LinkedIn access:
http://techcrunch.com/2013/06/19/linkedin-outage-due-to-possible-dns-hijacki
ng/
Frank
-----Original Message-----
From: Jimmy Hess [mailto:mysidia@gmail.com]
Sent: Thursday, June 20, 2013 1:23 AM
To: Paul Ferguson
Cc: NANOG list
Subject: Re: Need help in flushing DNS
On 6/20/13, Paul Ferguson <fergdawgster@gmail.com> wrote:
> On Wed, Jun 19, 2013 at 10:44 PM, Tom Paseka <tom@cloudflare.com> wrote:
>> On Wed, Jun 19, 2013 at 10:32 PM, Patrick W. Gilmore
I think "ztomy.com" smells really bad for some reason, looks like
100% advertising;
sure doesn't "appear" to be a DNS hosting provider, I sure can't
imagine two major domains entering incorrect authoritative
nameserver list changes on the same day...
http://www.dailychanges.com/ztomy.com/#transferred-in
"The domain ztomy.com was registered on November 22, 2007, and we have
nameserver history going back to December 9, 2007. It is listed as a
nameserver for 182,174 domains
Currently displaying 50 of 1,602 domain names transferred into
ztomy.com on June 19, 2013."
>> <patrick@ianai.net>wrote:
>>> On Jun 20, 2013, at 01:30 , Grant Ridder <shortdudey123@gmail.com>
>>> wrote:
>>> > Yelp is evidently also affected
>>> Not from here.
>> Patrick:
>> $ dig NS yelp.com @8.8.8.8 +short
>> ns1620.ztomy.com.
>> ns2620.ztomy.com.
--
-JH