[nsp-sec] VoIP pwnage tool, recognise it?

[Rob Thomas]

Lawrence Baldwin wrote:
> Did you guys notice that the main 'uk2.net' domain resolves to this IP?
> 
> Name:    uk2.net
> Address:  83.170.69.14

Yes, and then some:

        stamp        |          qname          | class | type |    rdata
--------------------- ------------------------- ------- ------
--------------
 2010-02-21 02:20:25  |  www.uk2group.com         |  IN     |  A     |
83.170.69.14
 2010-02-21 03:10:29  |  uk2.net                  |  IN     |  A     |
83.170.69.14
 2010-02-23 09:23:23  |  uk2net.com               |  IN     |  A     |
83.170.69.14
 2010-02-23 12:35:44  |  amail.co.uk              |  IN     |  A     |
83.170.69.14
 2010-02-23 18:41:10  |  adial.co.uk              |  IN     |  A     |
83.170.69.14
 2010-02-28 17:26:34  |  www.chooseuk2.co.uk      |  IN     |  A     |
83.170.69.14
 2010-03-01 01:38:12  |  uk2group.com             |  IN     |  A     |
83.170.69.14
 2010-03-01 01:38:18  |  anews.co.uk              |  IN     |  A     |
83.170.69.14
 2010-03-01 01:38:18  |  uk2reviews.com           |  IN     |  A     |
83.170.69.14
 2010-03-02 22:15:13  |  uk2.com                  |  IN     |  A     |
83.170.69.14
 2010-03-04 17:34:20  |  www.webuywebhosts.co.uk  |  IN     |  A     |
83.170.69.14
 2010-03-19 15:24:15  |  uk2.co.uk                |  IN     |  A     |
83.170.69.14
 2010-03-29 11:05:13  |  uk2news.net              |  IN     |  A     |
83.170.69.14
 2010-04-12 08:28:24  |  secure.uk2.net           |  IN     |  A     |
83.170.69.14


-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");