tim's journal

Forbes hacked?

I followed a link from Yahoo to Forbes this evening and, huh? Hello, World! This is now server 192.168.1.87

Who is 192.168.1.87?

OrgName:    Internet Assigned Numbers Authority 
OrgID:      IANA
Address:    4676 Admiralty Way, Suite 330
City:       Marina del Rey
StateProv:  CA
PostalCode: 90292-6695
Country:    US

NetRange:   192.168.0.0 - 192.168.255.255 
CIDR:       192.168.0.0/16 
NetName:    IANA-CBLK1
NetHandle:  NET-192-168-0-0-1
Parent:     NET-192-0-0-0-0
NetType:    IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment:    This block is reserved for special purposes.
Comment:    Please see RFC 1918 for additional information.
Comment:    
RegDate:    1994-03-15
Updated:    2002-09-16

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName:   Internet Corporation for Assigned Names and Number 
OrgAbusePhone:  +1-310-301-5820
OrgAbuseEmail:  abuse@iana.org

OrgTechHandle: IANA-IP-ARIN
OrgTechName:   Internet Corporation for Assigned Names and Number 
OrgTechPhone:  +1-310-301-5820
OrgTechEmail:  abuse@iana.org

# ARIN WHOIS database, last updated 2005-03-11 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

From this it seems more as if there was some router or nameserver issue. I checked the domain registry and, as you might have guessed, forbes.com is well registered, with an expiration date in 2014.

Pinging the domain takes you to 63.240.4.17.

SAVVIS Communications Corporation SAVVIS8 (NET-64-240-0-0-1) 
                                  64.240.0.0 - 64.243.255.255
EBC SAVV-S214013-2 (NET-64-240-4-128-1) 
                                  64.240.4.128 - 64.240.4.255

# ARIN WHOIS database, last updated 2005-03-11 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Update. Hmm, maybe it is just me. I checked using a shell account and I can reach the forbes site using lynx using both forbes.com and 64.240.4.179. Interesting, forbes.com uses imrworldwide.com, a.k.a. RedSheriff, Nielsen's baby. Back to topic though, I checked using Remote Desktop from my work, and the site works fine. I think there is something funny with my computer. Reboot?

Update 2. It has something to do with the local network I am on. Both my desktop and my laptop are showing the same message. Strange.

Posted by torque at March 11, 2005 9:20 PM | TrackBack