[nsp-sec] Lambdanet person about? (AS13237)

Chris Morrow morrowc at ops-netman.net
Sun Mar 6 12:40:18 EST 2011


Hopefully there's someone around from lambdanet? Apparently a website
defacer managed to do some damaage to the Fijian registry :(

82.197.130.148

is currently hosting a vhost for www.google.com.fj.
It looks like the host is a larger vhost system so taking it entirely
offline would be bad :(

Also this server:
81.209.164.254

is currently trying to serve up dns responses for google.com.fj :( it's
on lambdanet as well. Bojan's passive-dns says:
81.209.164.254 -> ns5.awardspace.com
ns5.awardspace.com -> 81.209.164.254

half of the NS's for fj reply like this:
;; AUTHORITY SECTION:
google.com.fj.          86400   IN      NS      ns5.awardspace.com.
google.com.fj.          86400   IN      NS      ns6.awardspace.com.
google.com.fj.          86400   IN      NS      NS2.GOOGLE.com.
google.com.fj.          86400   IN      NS      NS1.GOOGLE.com.


so... the FJ registry bit is being tackled, if the lamdanet side could
be as well that'd rock :)

-Chris
(goog-sec-3 of 3)



More information about the nsp-security mailing list