[35512] in North American Network Operators' Group
.mn.rr.com dns possibly hacked?
daemon@ATHENA.MIT.EDU (Kevin Day)
Sat Mar 10 14:28:19 2001
From: Kevin Day <toasty@temphost.dragondata.com>
Message-Id: <200103101928.NAA79358@temphost.dragondata.com>
To: nanog@merit.edu
Date: Sat, 10 Mar 2001 13:28:06 -0600 (CST)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
One of my customers, who's got a cable modem off of mn.rr.com is reporting
that roughly half the DNS lookups being done on their servers are returning
the IP to www.lolitasex.com. I have no idea how widespread this is, but
apparently others in minneapolis are seeing the same thing.
If any of you have customers asking why their website is now a porn site,
this may be why. :)
-- Kevin
