[79998] in North American Network Operators' Group
Promosis? Who are these guys?
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Wed Apr 20 03:09:14 2005
Date: Wed, 20 Apr 2005 12:38:18 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
Reply-To: Suresh Ramasubramanian <ops.lists@gmail.com>
To: Nanog <nanog@nanog.org>
Errors-To: owner-nanog@merit.edu
seen on a local linux mailing list -
> It looks like some one broke into VSNL's name server and done some
> harm to open source websites I'm now using Airtel's (mantraonline)
> name server and able to browser the sites mentioned above any one have
> any idea whats happening ??? while nslookup to the VSNL's name server
> I'm getting 66.151.179.147 for all those sites. the list includes,
> gnomefiles.org
> gnome-look.org
> gforge.org
> mantisbt.org
suresh@frodo 12:23:32 [~]$ whois 66.151.179.147
Internap Network Services PNAP-06-2001 (NET-66-150-0-0-1)
66.150.0.0 - 66.151.255.255
Promosis Inc. PNAP-BSN-PROMO-RM-01 (NET-66-151-179-128-1)
66.151.179.128 - 66.151.179.191
The promosis.com site, however, is an all flash site that says they've
developed promo campaigns for Bose, Oracle, art.com, Forbes etc.=20
Looks legit ..
Any idea? Something that works when NS is changed couldnt be spyware
on the guy's PC though he is a newbie to linux, and is surfing the net
using firefox on a windows PC
--=20
Suresh Ramasubramanian (ops.lists@gmail.com)
