[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

This is a coordinated hacking. (Was Re: Need help in flushing DNS)

Subject: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
From: cabo at tzi.org (Carsten Bormann)
Date: Thu, 20 Jun 2013 23:10:30 +0200
In-reply-to: <CAAAwwbUnSTR2Z0nDMmVgqHFj_T+svLzerAG+MTcXhQqOm+Xveg@mail.gmail.com>
References: <CABL6YZQ7=92xa9d02g_mRR18UYWydgVS_JAnSuHDxhwb7a_fCw@mail.gmail.com> <[email protected]> <CABL6YZQH2iKFOFM4G59VAJYYZv57j-9ZZV6wUwgnz2A78jzGUA@mail.gmail.com> <CAK__KzuqyMsX27ow+FU_RPcmJ42+Z+v6SLpvcPjbBB2Wa67ajA@mail.gmail.com> <CABL6YZR2MsbD77rBD+mMd52fxSKT+hDCafe4WT8hpGi6hNXEfA@mail.gmail.com> <CAAAwwbUnSTR2Z0nDMmVgqHFj_T+svLzerAG+MTcXhQqOm+Xveg@mail.gmail.com>

Wild speculation:

netsol says this is a human error incurred during DDOS mitigation.
ztomy.com is a wild-card DNS provider that seems to use prolexic.
Now imagine someone at netsol or its DDOS service providers
fat-fingered their DDOS-averting routing in such a way that netsol
DNS traffic arrived at ztomy.com instead of a netsol server.
The ztomy.com server would know how to answer the queries...

I have no data to base this speculation on.

Gr??e, Carsten

Follow-Ups:
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: gabor at logmein.com (Gabor Tokaji)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: j at arpa.com (jamie rishaw)

References:
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: j at arpa.com (jamie rishaw)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: jared at puck.nether.net (Jared Mauch)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: j at arpa.com (jamie rishaw)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: george.herbert at gmail.com (George Herbert)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: j at arpa.com (jamie rishaw)
- This is a coordinated hacking. (Was Re: Need help in flushing DNS)
  - From: mysidia at gmail.com (Jimmy Hess)

Prev by Date: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
Next by Date: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
Previous by thread: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
Next by thread: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
Index(es):
- Date
- Thread