Internic 101

Fri Jan 26 19:29:44 MST 2000

jericho@attrition.org

Due to recent attacks against Microsoft, including Denial of Service attacks against their DNS servers, the masses have been quick to point out odd entries when doing 'whois' requests. The results have lead to a flood of mail and often times articles mentioning these sites were 'hacked'. This simply is NOT the case. In the case of Microsoft, many of these entries have been there for weeks if not months. These do NOT mean DNS servers or root name servers were hacked, rather it means you are not familiar with nameservers, Internic and domain registrations.

Look carefully at the domain names. Instead of 'host.domain.tld', they are just using subnetting to put the domain name in question in the host name. When whois results display, it shows them first.

As of Jan 26, 2001, the following entries can be found doing 'whois' requests.

[whois.internic.net]

MICROSOFT.COM.WILL.LIVE.FOREVER.BUT.LUNIX.SUCKS-BYBIRTH.ARTISTICCHEESE.COM MICROSOFT.COM.WAS.HACKED.TODAY.BY.JAMESSMALL.COM MICROSOFT.COM.TOLD.ME.TO.KILL.UR.PC.LIVE-EVIL.COM MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.COM MICROSOFT.COM.SE.FAIT.HAX0RIZER.PAR.TOUT.LE.ZOY.ORG MICROSOFT.COM.OWNED.BY.MAT.HACKSWARE.COM MICROSOFT.COM.N-AIME.BILL.QUE.QUAND.IL.N-EST.PAS.NU MICROSOFT.COM.MUST.STOP.TAKEDRUGS.ORG MICROSOFT.COM.ISNT.THIS.SILLY.AND.DONT.YOU.WANT.YOUR.OWN.808.ORG MICROSOFT.COM.IS.SOON.GOING.TO.THE.DEATHCORPORATION.COM MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET MICROSOFT.COM.IS.NOTHING.BUT.A.MONSTER.ORG MICROSOFT.COM.IS.NO.MATCH.FOR.THE.WANNABE.TERRORISTS.AT.JIMPHILLIPS.ORG MICROSOFT.COM.IS.GOD.BUT.LINUX.SUCKS-FOREVER.ARTISTICCHEESE.COM MICROSOFT.COM.IS.BORING.COMPARED.TO.TEENEXTREME.COM MICROSOFT.COM.IS.AT.THE.MERCY.OF.DETRIMENT.ORG MICROSOFT.COM.INSPIRES.COPYCAT.WANNABE.SUBVERSIVES.NET MICROSOFT.COM.HAS.NO.LINUXCLUE.COM MICROSOFT.COM.HACKED.BY.PSYKOJOKO.ON.A.ROOT-NETWORK.COM MICROSOFT.COM.HACKED.BY.HACKSWARE.COM MICROSOFT.COM.GUTS.NL MICROSOFT.COM.FAIT.VRAIMENT.DES.LOGICIELS.A.TROIS.FRANCS.DOUZE.ORG MICROSOFT.COM.ER.IKKE.NO.I.FORHOLD.TIL.LATHANS.NET MICROSOFT.COM.AINT.WORTH.SHIT.KLUGE.ORG MICROSOFT.COM YAHOO.COM.IS.TRYING.TO.STEAL.YAHOO.VU.HOW.ACIDULOUS.COM YAHOO.COM ANTIONLINE.COM.SHOULD.BE.DISGRACED.ORG ANTIONLINE.COM.IS.AT.THE.MERCY.OF.DETRIMENT.ORG ANTIONLINE.COM L0PHT.COM.IS.PRETTY.COOL.BUT.CHECK-OUT.JIMPHILLIPS.ORG L0PHT.COM SLASHDOT.ORG.SUCKS.COMPARED.TO.JIMPHILLIPS.ORG SLASHDOT.ORG AOL.COM.STOCKHOLDERS.GET.ORALSEXONDEMAND.COM AOL.COM.KCAUTOWEB.COM AOL.COM.IS.REGULARLY.HAX0RED.BY.INSIDE-AOL.COM AOL.COM.HACKED.BY.PSYKOJOKO.ON.A.ROOT-NETWORK.COM AOL.COM.EATMYSHIT.ORG AOL.COM.AMSLIQUIDATORS.COM AOL.COM AMAZON.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM AMAZON.COM.MORE.INFO.AT.WWW.BEYONDWHOIS.COM AMAZON.COM.IS.N0T.AS.1337.AS.WWW.GULLI.COM AMAZON.COM


main page ATTRITION feedback