<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
@font-face
{font-family:"Arial Black";
panose-1:2 11 10 4 2 1 2 2 2 4;}
@font-face
{font-family:Webdings;
panose-1:5 3 1 2 1 5 9 6 7 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>208.91.197.132 doesn’t have a PTR record associated with it, but a Whois query shows that it’s owned by Confluence Networks. However, check out what happens when you go to that IP address:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>$ nc -v 208.91.197.132 80<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Connection to 208.91.197.132 80 port [tcp/http] succeeded!<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>GET / HTTP/1.1<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Host: ben.edu<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>HTTP/1.1 200 OK<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Date: Sat, 27 Oct 2012 01:14:43 GMT<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Server: Apache/2.2.3 (Red Hat)<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>X-Powered-By: PHP/5.3.16<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Vary: Accept-Encoding,User-Agent<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Content-Length: 712<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'>Content-Type: text/html; charset=UTF-8<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'><frameset rows="100%,*" frameborder="no" border="0" framespacing="0"><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'> <frame src="http://ben.edu/?fp=Jg2bOCRGpmyIHeO3rTIpYJil8%2FmPB1JibWwClQntyhm4NkwKKuCk1tgtON7LOnmXFywl8MRjELrKlXFXgOfhOw%3D%3D&prvtof=lJY3O5r6C%2F4Iypq21CJp7a1LuqqIdOWvKdwx5Xsl1x8%3D&poru=S87wfqjj4W%2B%2Fm8dSEqpuWZr20KvK367%2BCoGC%2FHW2e9kL6N%2Fl3h3wnDx5AfKbrhlZ&"><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'></frameset><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'><noframes><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'> <body bgcolor="#ffffff" text="#000000"><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'> <a href="http://ben.edu/?fp=Jg2bOCRGpmyIHeO3rTIpYJil8%2FmPB1JibWwClQntyhm4NkwKKuCk1tgtON7LOnmXFywl8MRjELrKlXFXgOfhOw%3D%3D&prvtof=HFakvtiyy0kNqKrmL%2FCjJLePEMwdGWTZLZa5%2BZpNnP4%3D&poru=9vrhUGVKGCquHB6uFFMUXFNxz1c%2FgIaDOeCSvkLz5HCrH2FI%2Fixpxvr8LwjYT7uO&">Click here to proceed</a>.<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'> </body><o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Lucida Console"'></noframes><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I didn’t look beyond that, but it already looks fishy. Note that I used ben.edu in the hostname on that manual GET request. When I tried it with just the IP address, it said to go to searchremagnified.com.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Mike Phipps<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Media Genesis, Inc.<o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> outages-bounces@outages.org [mailto:outages-bounces@outages.org] <b>On Behalf Of </b>Tim Huffman<br><b>Sent:</b> Friday, October 26, 2012 9:04 PM<br><b>To:</b> outages@outages.org<br><b>Subject:</b> [outages] AT&T DNS problems?<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We are the primary DNS servers for the ben.edu domain. We seem to be having an issue with an AT&T server that is responding with incorrect A records for <a href="http://www.ben.edu">www.ben.edu</a> and ben.edu.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>What it SHOULD be the response:<o:p></o:p></p><p class=MsoNormal>nslookup <a href="http://www.ben.edu">www.ben.edu</a><o:p></o:p></p><p class=MsoNormal>Server: 63.250.224.66<o:p></o:p></p><p class=MsoNormal>Address: 63.250.224.66#53<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="http://www.ben.edu">www.ben.edu</a> canonical name = ben.edu.<o:p></o:p></p><p class=MsoNormal>Name: ben.edu<o:p></o:p></p><p class=MsoNormal>Address: 38.100.120.100<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>What 12.127.17.83 is responding with:<o:p></o:p></p><p class=MsoNormal>> <a href="http://www.ben.edu">www.ben.edu</a><o:p></o:p></p><p class=MsoNormal>Server: tbru.br.rs.els-gms.att.net<o:p></o:p></p><p class=MsoNormal>Address: 12.127.17.83<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Non-authoritative answer:<o:p></o:p></p><p class=MsoNormal>Name: <a href="http://www.ben.edu">www.ben.edu</a><o:p></o:p></p><p class=MsoNormal>Address: 208.91.197.132<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This appears to be affecting only iPhones and iPads on the AT&T network. Is anybody else having problems with this? Are there any AT&T people on this list that can help?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.25in'><span style='font-size:10.0pt;font-family:"Arial Black","sans-serif";color:#E36C0A'>Tim Huffman<br></span><b><i><span style='font-size:14.0pt;color:#E36C0A'>Business Only</span></i></b><b><i><span style='font-size:14.0pt;color:#365F91'> Broadband<br></span></i></b><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:black'>777 Oakmont Lane, Suite 2000, Westmont, IL 60559<b><br></b>Direct: 630.590.6012 | Main: 630.590.6000 | Fax: 630.986.2496<b> <br></b></span><span style='font-size:7.5pt;font-family:"Arial","sans-serif"'><a href="mailto:thuffman@bobbroadband.com">thuffman@bobbroadband.com</a><b><span style='color:#E36C0A'> </span><span style='color:maroon'>| </span></b></span><a href="http://www.bobbroadband.com/"><span style='font-size:7.5pt;font-family:"Arial","sans-serif"'>http://www.bobbroadband.com/</span></a><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#0D0D0D'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.25in'><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:black'>Cell: 630.340.1925 | </span><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:#0D0D0D'>Toll-Free Customer Support: 877.262.4553<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.25in'><img border=0 width=24 height=24 id="Picture_x0020_1" src="cid:image001.png@01CDB3BF.3383E620" alt="https://staticapp.icpsc.com/icp/loadimage.php/mogile/933825/747f0f3e66a4e0ce7633ff898bfc5121/image/png"> <a href="http://www.linkedin.com/company/business-only-broadband"><span style='font-size:8.5pt;font-family:"Arial","sans-serif";color:#1C4199'>Follow Us on LinkedIn</span></a> <span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:black'>| </span><span style='font-size:7.5pt;color:white'><img border=0 width=24 height=24 id="Picture_x0020_2" src="cid:image002.gif@01CDB3BF.3383E620" alt="https://files.icontact.com/templates/v2/CleanAndSimple/images/twitter.gif"></span><span style='font-size:8.5pt'> </span><a href="https://twitter.com/#%21/BOBbroadband"><span style='font-size:8.5pt;font-family:"Arial","sans-serif";color:#1C4199'>Follow Us on Twitter</span></a><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:#0D0D0D'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:18.0pt;font-family:Webdings;color:green'>P</span></b><b><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:navy'> </span></b><b><span style='font-size:7.5pt;font-family:"Arial","sans-serif";color:green'>please consider the environment prior to printing</span></b><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>