Posted by: oldmaven June 10, 2008
Kantipur server is hacked by some crooks.
Login in to Rate this Post:     0       ?        
.

RECHECK :

# dig kantipuronline.com ns
;; ANSWER SECTION:
kantipuronline.com.     172068  IN      NS      eliteinfotech.venus.orderbox-dns.com.
kantipuronline.com.     172068  IN      NS      eliteinfotech.mercury.orderbox-dns.com.
kantipuronline.com.     172068  IN      NS      ns1.kantipuronline.com.
kantipuronline.com.     172068  IN      NS      eliteinfotech.mars.orderbox-dns.com.
kantipuronline.com.     172068  IN      NS      eliteinfotech.earth.orderbox-dns.com.
kantipuronline.com.     172068  IN      NS      ns2.kantipuronline.com.

# dig @ns1.kantipuronline.com kantipuronline.com
;; ANSWER SECTION:
kantipuronline.com.     38400   IN      A       208.109.209.156

Damn , They Maintained ns1,ns2,www behind the same IP ? ( 208.109.209.156 )

We've got plenty NS added now, so if the server is down next : we can differentiate if it was a DNS problem.

BottomLine: It wasnt Hacked, Lack of BCPs!
Read Full Discussion Thread for this article