From owner-freebsd-security  Wed Jan 23 17:31:31 2002
Delivered-To: freebsd-security@freebsd.org
Received: from cage.simianscience.com (cage.simianscience.com [64.7.134.1])
	by hub.freebsd.org (Postfix) with ESMTP id C609337B404
	for <freebsd-security@freebsd.org>; Wed, 23 Jan 2002 17:31:27 -0800 (PST)
Received: (from root@localhost)
	by cage.simianscience.com (8.11.6/8.11.6) id g0O1VQj00847;
	Wed, 23 Jan 2002 20:31:26 -0500 (EST)
	(envelope-from mike@sentex.net)
Received: from house.sentex.net (fcage [192.168.0.2])
	by cage.simianscience.com (8.11.6/8.11.6av) with ESMTP id g0O1VNF00838;
	Wed, 23 Jan 2002 20:31:23 -0500 (EST)
	(envelope-from mike@sentex.net)
Message-Id: <5.1.0.14.0.20020123202922.01a14310@192.168.0.12>
X-Sender: mdtancsa@192.168.0.12
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 23 Jan 2002 20:31:46 -0500
To: "Robert Herrold" <bobber@intense.net>
From: Mike Tancsa <mike@sentex.net>
Subject: Re: whois records hacked?
Cc: <freebsd-security@freebsd.org>
In-Reply-To: <052501c1a475$1105b480$6c01a8c0@mpcsecurity.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Virus-Scanned: by AMaViS perl-10
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


You are probably seeing all the joke NS host names registered.... Whois 
graffiti I guess...  Try,

whois -h whois.networksolutions.com "dom microsoft.com"

instead to narrow down your query.  Things like
MICROSOFT.COM.HACKED.BY.HACKSWARE.COM
is a registered host for HACKSWARE.COM.

For this sort of stuff, try the various general security lists (see 
www.securityfocus.com )


         ---Mike

At 07:18 PM 1/23/2002 -0600, Robert Herrold wrote:
>Did a whois on microsoft.com and not sure if it's something corrupted in my
>whois, or if Microsoft.com's whois record had been compromised. Any
>thoughts?
>
>Robert Herrold
>Senior Network Engineer
>Metropark Communications INC
>10405 Baur Blvd
>Suite A
>St Louis MO 63132
>
>
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message

--------------------------------------------------------------------
Mike Tancsa,                          	          tel +1 519 651 3400
Sentex Communications,     			  mike@sentex.net
Providing Internet since 1994                    www.sentex.net
Cambridge, Ontario Canada			  www.sentex.net/mike


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message