| Subject: MS DNS servers hacked? | Date: Mon, 14 Jan 2002 12:29:13 -0600 | From: Tim Rushing <dshield@threenorth.com> | To: intrusions@incidents.org | Message-Id: <5.0.2.1.2.20020114122616.02f14090@pop3.jorsm.com> | X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 | X-Sender: dshield@mail.threenorth.com | | I just saw that part 2 of Laurie Zirkle's Jan 11 posts seemed to show port | 53 hack attempts from dcwu3dns1.windowsupdate.com (207.68.131.17). | | The Register had a story today about problems with the windows update site | since late last week. (http://www.theregister.co.uk/content/4/23666.html) | and I just had a "CNAME lookup failed temporarily. (#4.4.3)" from a mailing | list I run going to a USER@hotmail.com account. | | Anyone know anything else? | | ---Tim Rushing