[77177] in North American Network Operators' Group
Re: panix.com hijacked
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Sun Jan 16 02:10:17 2005
Date: Sun, 16 Jan 2005 07:08:24 +0000 (GMT)
From: "Christopher L. Morrow" <christopher.morrow@mci.com>
In-reply-to: <200501160703.j0G73xLs022909@turing-police.cc.vt.edu>
To: Valdis.Kletnieks@vt.edu
Cc: Henry Yen <henry@AegisInfoSys.com>, nanog@nanog.org,
Mark Jeftovic <markjr@easydns.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Sun, 16 Jan 2005 Valdis.Kletnieks@vt.edu wrote:
> On Sun, 16 Jan 2005 01:32:46 EST, Henry Yen said:
>
> > from panix shell hosts motd:
> >
> > . panix.net usable as panix.com (marcotte) Sat Jan 15 10:44:57 2005
>
> So let's see.. the users will see this when they log into shell.panix.net
> (since shell.panix.com is borked).. Somehow, that doesn't seem to help much..
>
and the hijackers could be, potentially, running a box pretending to be
shell.panix.com, gathering userids and passwds :(
