Msn Messenger server has been 0wn3d?

messenger.hotmail.com resolves to 207.46.104.20

Mail for messenger.hotmail.com is handled by mail.hotmail.com (10) 65.54.254.129 65.54.252.99 65.54.166.99 65.54.254.145 65.54.252.230

whois -h magic messenger.hotmail.com
Crsnic.net hasn't heard of hotmail.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

HOTMAIL.COM.IS.N0T.AS.1337.AS.GULLI.COM
HOTMAIL.COM

Tracing route to messenger.hotmail.com [207.46.104.20]
over a maximum of 30 hops:

12 31 ms 47 ms 47 ms pos0-0.core1.sea1.us.msn.net [207.46.33.13]
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.

haha, sweet. wonder if they know yet.

i dont think they know...

Service Status
Last updated: 4/17/2003 - 11:00 PM PST (Pacific Standard Time)
This page will be updated every two hours or when information becomes available.

Service Current Status
.NET Messenger Service All systems go
.NET Voice Service All systems go

Well...that certaintly explains why I've spent the past hour trying to figure out why I couldn't get my messenger working.
It was fine earlier, then I installed Ghost Surf to try out and messenger wouldn't work, so I figured there was a conflict somewhere and have been playing with various settings to try and get messenger working again.......LMAO.
Wish I'd thought to check here before wasting the time.

Messenger is now back online tough

This same group haxored the WHOIS records for a bunch of AOL servers too. I found this out when a ton of garbage was being bounced off of AOL servers. I contacted their network security group but as of yet they haven't fixed the issue.

03/28/03 16:25:23 whois rtc-ext1.ns.aol.com
.com is a domain of USA & International Commercial
Searches for .com can be run at http://www.crsnic.net/

whois -h whois.crsnic.net aol.com ...

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

AOL.COM.SAYS.HARASS.SOFTY797.FOR.SUBVERTER.NET
AOL.COM.RAPED.SUBVERTER.NET
AOL.COM.IS.N0T.AS.1337.AS.GULLI.COM
AOL.COM.CANT.STOP.US.IFUD.COM
AOL.COM

LOL, this is from the "magic" whois server in the SamSpade tool.

ummmmmm.... where is the hack??? I don't see it. In either the hotmail or the aol case...

HOTMAIL.COM.IS.N0T.AS.1337.AS.GULLI.COM <--- that is a gulli.com server, not a hotmail server

AOL.COM.SAYS.HARASS.SOFTY797.FOR.SUBVERTER.NET <----subverter.net server
AOL.COM.RAPED.SUBVERTER.NET <----another suberter.net server
AOL.COM.IS.N0T.AS.1337.AS.GULLI.COM <---gulli.com server again
AOL.COM.CANT.STOP.US.IFUD.COM <---- ifud.com server

I dont see the hack anywhere in there. if it was you.suck.aol.com then the server was hacked, but anyone can do a host of aol.com.whatever.yourdomainhere.com Its just a subdomain, not a hack. Look at microsoft.com last time I checked, there was like 40 subdomains like this.

The traceroute timing out... thats nothing new. Do a tracetroute to 63.146.109.212 (antionline.com). It will time out also. Thats because the router at the AO end does not respond to ICMP packets. It makes it so you can't ping the machine behind the router. A traceroute is just a series of pings with different TTL values.

So will someone please show me where the hack is, cause I just don't see it anywhere.

Old News....fake DNS's.....do a little AO search...you'll find another thread just like this :P

- Noia

I think they are upgrade server!