[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

DNS poisoning at Google?

Subject: DNS poisoning at Google?
From: Matthew.Black at csulb.edu (Matthew Black)
Date: Wed, 27 Jun 2012 16:48:45 +0000
In-reply-to: <[email protected]>
References: <ED78B1C68B84A14FA706D13A230D7B431954DB1B@ITS-MAIL01.campus.ad.csulb.edu> <CABgOHgv0xZpot5oHG7RtfCJRBfMCj15GxYHR_kdJtL_PDua9YQ@mail.gmail.com> <ED78B1C68B84A14FA706D13A230D7B431954DD2F@ITS-MAIL01.campus.ad.csulb.edu> <[email protected]> <ED78B1C68B84A14FA706D13A230D7B431954E04E@ITS-MAIL01.campus.ad.csulb.edu> <CABgOHgt6_irJxyug9+zY+0-P==ywnuRCCOqroh=DMMttfe37WA@mail.gmail.com> <ED78B1C68B84A14FA706D13A230D7B431954EC3F@ITS-MAIL01.campus.ad.csulb.edu> <CAPiURgUwLo9o4bWJ9TmPDArBhpRfQwG6S4Xf1pvd4DynZhTXuw@mail.gmail.com> <ED78B1C68B84A14FA706D13A230D7B431954ED35@ITS-MAIL01.campus.ad.csulb.edu> <CAPiURgXHU1-xa4bLfyrCOe7v-Qcj1am3vDUmrSWfBP2wOfzQrA@mail.gmail.com> <ED78B1C68B84A14FA706D13A230D7B431954F436@ITS-MAIL01.campus.ad.csulb.edu> <[email protected]>

Yes, we did that and also noted the username and IP address from where the FTP upload originated.

matthew black
information technology services
california state university, long beach



-----Original Message-----
From: Michael J Wise [mailto:mjwise at kapu.net] 
Sent: Wednesday, June 27, 2012 12:37 AM
To: nanog at nanog.org
Subject: Re: DNS poisoning at Google?


On Jun 27, 2012, at 12:06 AM, Matthew Black wrote:

> We found the aberrant .htaccess file and have removed it. What a mess!


Trusting you carefully noted the date/time stamp before removing it, as that's an important bit of forensics.

Aloha,
Michael.
-- 
"Please have your Internet License             
 and Usenet Registration handy..."

Follow-Ups:
- DNS poisoning at Google?
  - From: sparctacus at gmail.com (Bryan Irvine)

References:
- DNS poisoning at Google?
  - From: Matthew.Black at csulb.edu (Matthew Black)
- DNS poisoning at Google?
  - From: lstewart at superb.net (Landon Stewart)
- DNS poisoning at Google?
  - From: Matthew.Black at csulb.edu (Matthew Black)
- DNS poisoning at Google?
  - From: Matthew.Black at csulb.edu (Matthew Black)
- DNS poisoning at Google?
  - From: lstewart at superb.net (Landon Stewart)
- DNS poisoning at Google?
  - From: Matthew.Black at csulb.edu (Matthew Black)
- DNS poisoning at Google?
  - From: shortdudey123 at gmail.com (Grant Ridder)
- DNS poisoning at Google?
  - From: shortdudey123 at gmail.com (Grant Ridder)
- DNS poisoning at Google?
  - From: Matthew.Black at csulb.edu (Matthew Black)
- DNS poisoning at Google?
  - From: mjwise at kapu.net (Michael J Wise)

Prev by Date: DNS poisoning at Google?
Next by Date: No DNS poisoning at Google (in case of trouble, blame the DNS)
Previous by thread: DNS poisoning at Google?
Next by thread: DNS poisoning at Google?
Index(es):
- Date
- Thread