Msn Messenger server has been 0wn3d?
Results 1 to 9 of 9

Thread: Msn Messenger server has been 0wn3d?

  1. #1
    Senior Member faust's Avatar
    Join Date
    Oct 2001
    Location
    Chicagoland/Murphysboro
    Posts
    105

    Msn Messenger server has been 0wn3d?

    messenger.hotmail.com resolves to 207.46.104.20

    Mail for messenger.hotmail.com is handled by mail.hotmail.com (10) 65.54.254.129 65.54.252.99 65.54.166.99 65.54.254.145 65.54.252.230

    whois -h magic messenger.hotmail.com
    Crsnic.net hasn't heard of hotmail.com

    Whois Server Version 1.3

    Domain names in the .com and .net domains can now be registered
    with many different competing registrars. Go to http://www.internic.net
    for detailed information.

    HOTMAIL.COM.IS.N0T.AS.1337.AS.GULLI.COM
    HOTMAIL.COM

    Tracing route to messenger.hotmail.com [207.46.104.20]
    over a maximum of 30 hops:

    12 31 ms 47 ms 47 ms pos0-0.core1.sea1.us.msn.net [207.46.33.13]
    13 * * * Request timed out.
    14 * * * Request timed out.
    15 * * * Request timed out.
    16 * * * Request timed out.
    17 * * * Request timed out.
    18 * * * Request timed out.

  2. #2
    haha, sweet. wonder if they know yet.

  3. #3
    Senior Member faust's Avatar
    Join Date
    Oct 2001
    Location
    Chicagoland/Murphysboro
    Posts
    105
    i dont think they know...

    Service Status
    Last updated: 4/17/2003 - 11:00 PM PST (Pacific Standard Time)
    This page will be updated every two hours or when information becomes available.

    Service Current Status
    .NET Messenger Service All systems go
    .NET Voice Service All systems go
    The gene pool has no life guard!

  4. #4
    Senior Member
    Join Date
    Mar 2002
    Location
    Snohomish WA
    Posts
    315
    Well...that certaintly explains why I've spent the past hour trying to figure out why I couldn't get my messenger working.
    It was fine earlier, then I installed Ghost Surf to try out and messenger wouldn't work, so I figured there was a conflict somewhere and have been playing with various settings to try and get messenger working again.......LMAO.
    Wish I'd thought to check here before wasting the time.
    Faqt


    If you want to make God laugh....make plans.

  5. #5
    Messenger is now back online tough
    Bill has the key to the \'blue\' screen
    by tux

  6. #6
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,884
    This same group haxored the WHOIS records for a bunch of AOL servers too. I found this out when a ton of garbage was being bounced off of AOL servers. I contacted their network security group but as of yet they haven't fixed the issue.

    03/28/03 16:25:23 whois rtc-ext1.ns.aol.com
    .com is a domain of USA & International Commercial
    Searches for .com can be run at http://www.crsnic.net/

    whois -h whois.crsnic.net aol.com ...

    Whois Server Version 1.3

    Domain names in the .com and .net domains can now be registered
    with many different competing registrars. Go to http://www.internic.net
    for detailed information.

    AOL.COM.SAYS.HARASS.SOFTY797.FOR.SUBVERTER.NET
    AOL.COM.RAPED.SUBVERTER.NET
    AOL.COM.IS.N0T.AS.1337.AS.GULLI.COM
    AOL.COM.CANT.STOP.US.IFUD.COM
    AOL.COM

    LOL, this is from the "magic" whois server in the SamSpade tool.
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  7. #7
    AntiOnline Senior Member souleman's Avatar
    Join Date
    Oct 2001
    Location
    Flint, MI
    Posts
    2,884
    ummmmmm.... where is the hack??? I don't see it. In either the hotmail or the aol case...

    HOTMAIL.COM.IS.N0T.AS.1337.AS.GULLI.COM <--- that is a gulli.com server, not a hotmail server

    AOL.COM.SAYS.HARASS.SOFTY797.FOR.SUBVERTER.NET <----subverter.net server
    AOL.COM.RAPED.SUBVERTER.NET <----another suberter.net server
    AOL.COM.IS.N0T.AS.1337.AS.GULLI.COM <---gulli.com server again
    AOL.COM.CANT.STOP.US.IFUD.COM <---- ifud.com server

    I dont see the hack anywhere in there. if it was you.suck.aol.com then the server was hacked, but anyone can do a host of aol.com.whatever.yourdomainhere.com Its just a subdomain, not a hack. Look at microsoft.com last time I checked, there was like 40 subdomains like this.

    The traceroute timing out... thats nothing new. Do a tracetroute to 63.146.109.212 (antionline.com). It will time out also. Thats because the router at the AO end does not respond to ICMP packets. It makes it so you can't ping the machine behind the router. A traceroute is just a series of pings with different TTL values.

    So will someone please show me where the hack is, cause I just don't see it anywhere.
    \"Ignorance is bliss....
    but only for your enemy\"
    -- souleman

  8. #8
    Now, RFC Compliant! Noia's Avatar
    Join Date
    Jan 2002
    Posts
    1,210
    Old News....fake DNS's.....do a little AO search...you'll find another thread just like this :P

    - Noia
    With all the subtlety of an artillery barrage / Follow blindly, for the true path is sketchy at best. .:Bring OS X to x86!:.
    Og ingen kan minnast dei linne drag i dronningas andlet den fagre dag Då landet her kvilte i heilag fred og alle hadde kjærleik å elske med.

  9. #9
    Junior Member
    Join Date
    Apr 2003
    Posts
    11
    I think they are upgrade server!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •