NZNOG@Apr 21, 2009

Date: Tue, 21 Apr 2009 12:14:05 +1200
Subject: [nznog] msn.co.nz

So, I wouldn't normally make a post like this, but I figure one or two
people might notice this at some point in the next day or so:

mj@coalface:~$ whois msn.co.nz | egrep ^ns_name
ns_name_01: fatih1.turkguvenligi.info
ns_name_02: fatih2.turkguvenligi.info

mj@coalface:~$ whois msn.co.nz | egrep ^domain_datelastmodified
domain_datelastmodified: 2009-04-21T09:44:21+12:00

From my resolver's cache:

;; ANSWER SECTION:
msn.co.nz. 3282 IN A 202.58.48.29

;; AUTHORITY SECTION:
msn.co.nz. 20363 IN NS ns4.msft.net.
msn.co.nz. 20363 IN NS ns5.msft.net.
msn.co.nz. 20363 IN NS ns1.msft.net.
msn.co.nz. 20363 IN NS ns2.msft.net.
msn.co.nz. 20363 IN NS ns3.msft.net.

;; ADDITIONAL SECTION:
ns1.msft.net. 1571 IN A 207.68.160.190
ns2.msft.net. 1593 IN A 65.54.240.126
ns3.msft.net. 18367 IN A 213.199.161.77
ns4.msft.net. 18367 IN A 207.46.66.126
ns5.msft.net. 1302 IN A 65.55.238.126

From the new NS:

;; ANSWER SECTION:
msn.co.nz. 14400 IN A 95.211.11.163

;; AUTHORITY SECTION:
msn.co.nz. 86400 IN NS fatih1.turkguvenligi.info.
msn.co.nz. 86400 IN NS fatih2.turkguvenligi.info.

;; ADDITIONAL SECTION:
fatih1.turkguvenligi.info. 14400 IN A 95.211.11.163
fatih2.turkguvenligi.info. 14400 IN A 95.211.11.163

It's not still April Fools, is it?

-Mike


MSNニュージーランドがハイジャックされた模様。
SQLインジェクションでネームサーバが書き換えられたらしいとのこと。