[35514] in North American Network Operators' Group
Re: .mn.rr.com dns possibly hacked?
daemon@ATHENA.MIT.EDU (John Payne)
Sat Mar 10 16:01:20 2001
Date: Sat, 10 Mar 2001 12:54:30 -0800
From: John Payne <john@sackheads.org>
To: Kevin Day <toasty@temphost.dragondata.com>
Cc: nanog@merit.edu
Message-ID: <20010310125430.S15171@haybaler.sackheads.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200103101928.NAA79358@temphost.dragondata.com>; from toasty@temphost.dragondata.com on Sat, Mar 10, 2001 at 01:28:06PM -0600
Errors-To: owner-nanog-outgoing@merit.edu
On Sat, Mar 10, 2001 at 01:28:06PM -0600, Kevin Day wrote:
>
> One of my customers, who's got a cable modem off of mn.rr.com is reporting
> that roughly half the DNS lookups being done on their servers are returning
> the IP to www.lolitasex.com. I have no idea how widespread this is, but
> apparently others in minneapolis are seeing the same thing.
Is he running his on caching nameserver, or roadrunners?
I expect someone needs to upgrade their nameserver.
--
John Payne http://www.sackheads.org/jpayne/ john@sackheads.org
http://www.sackheads.org/uce/ Fax: +44 870 0547954
To send me mail, use the address in the From: header
