Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » US Cable Support » Comcast » Comcast HSI » Comcast hacked?
Uniqs:
78092
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
[Connectivity] Intermittent drop in League City, TX »
« [Speed] Comcast slow in San Jose - Sunday 6/1/08  
page: 1 · 2 · 3 · 4 ...10 · 11 · 12

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD

1 edit

Comcast hacked?

I'm getting a funny message on comcast.net:

KRYOGENIKS EBK and DEFIANT RoXed COMCAST
sHouTz To VIRUS Warlock elul21 coll1er seven and Slacker

Page source says it comes from:
"http://www.freewebs.com/kryogeniks911/"

mady
fphamm

join:2006-05-25
Issaquah, WA

Re: Comcast hacked?

Same here on the west coast, started around 8:00pm pt here

EG
The wings of love
Premium
join:2006-11-18
Union, NJ

1 edit

Re: Comcast hacked?

I'm getting a "Page Under Construction" message at the Portal site mady.
BlueJay

join:2007-11-06

Re: Comcast hacked?

and I'm getting a notice from Network Solutions-site under construction-- with foreign languages in a box.. Can't get into the Help or community forums... Webmail was accessed..

ciao, bj

EG
The wings of love
Premium
join:2006-11-18
Union, NJ

Re: Comcast hacked?

said by BlueJay See Profile :

and I'm getting a notice from Network Solutions-site under construction-- with foreign languages in a box.. Can't get into the Help or community forums... Webmail was accessed..

ciao, bj
Hey BJ, nice ta see ya here !

Yep. My direct link to the Help Forums is kaput now as well...

I'm goin' ta bed !
BlueJay

join:2007-11-06

Re: Comcast hacked?

Back at ya, EG.. And here I was all set to blame you and trying to get that link that you posted to work..

ciao, bj

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD

Re: Comcast hacked?

Gee guys, you make me feel invisible.

mady
--
Honi soit qui mal y pense

EG
The wings of love
Premium
join:2006-11-18
Union, NJ


1 edit

Re: Comcast hacked?

said by madylarian See Profile :

Gee guys, you make me feel invisible.

mady
You could never be invisible mady !!

Cabal
Premium
join:2007-01-21
Boston, MA

I see the real site at comcast.net, but a NetSol template page at www.comcast.net. A whois yields:

quote:
Registrant:
Comcast Corporation
1500 Market Street
Philadelphia, PA 19102
US

Domain Name: COMCAST.NET

------------------------------------------------------------------------
Promote your business to millions of viewers for only $1 a month
Learn how you can get an Enhanced Business Listing here for your domain name.
Learn more at »www.NetworkSolutions.com/
------------------------------------------------------------------------

Administrative Contact:
Domain Registrations, Comcast kryogenicsdefiant@gmail.com
Defiant still raping 2k8 ebk
69 dick tard lane
dildo room
PHILADELPHIA, PA 19103
US
4206661870 fax: 6664200187


Technical Contact:
Comcast Corporation kryogenicsdefiant@gmail.com
1500 Market Street
Philadelphia, PA 19102
US
215-320-8774 fax: 215-564-0132

Record expires on 24-Sep-2008.
Record created on 25-Sep-1997.
Database last updated on 28-May-2008 23:48:08 EDT.

Domain servers in listed order:

NS21.WORLDNIC.COM 205.178.190.11
NS22.WORLDNIC.COM 205.178.144.11
--
Interested in open source engine management for your Subaru?

espaeth
Digital Plumber
Premium,MVM
join:2001-04-21
Minneapolis, MN
·voip.ms
·Vitelity VOIP
·Callcentric
·VoiceStick
·ViaTalk
·Comcast
·Embarq

Re: Comcast hacked?

said by Cabal See Profile :

I see the real site at comcast.net, but a NetSol template page at www.comcast.net. A whois yields:
Good find! It looks like Comcast's Network Solutions account actually got hacked.

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL
·Comcast
·Vonage


1 edit
Click for full size
OH yeah.. Someone definitely breached Comcast.net. This is what I see

Cabal
Premium
join:2007-01-21
Boston, MA

Re: Comcast hacked?

Seems more like a breach of Network Solutions (or Comcast's NetSol credentials) than Comcast itself and redirecting the domain.
--
Interested in open source engine management for your Subaru?
stewie316

join:2007-04-11
Jackson, MI
Comcast.net is down 0o -_-"

wvdf96a

@comcast.net
I'm also seeing the Kryogeniks message...sure looks like they've been hacked....

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD
I just got off the phone with Comcast to let them know. We'll see what happens.

mady
--
Honi soit qui mal y pense

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL
·Comcast
·Vonage


3 edits
oh yeah... What a big mess this is . They even rerouted thier IP address:

C:\Documents and Settings>tracert www.comcast.net

Tracing route to www.comcast.net [205.178.189.131]
over a maximum of 30 hops:

1 2 ms 1 ms 1 ms 192.168.15.1
2 * * * Request timed out.
3 8 ms 12 ms 9 ms ge-1-37-ur01.chicago201.il.chicago.comcast.net [68.86.115.21]
4 9 ms 10 ms 9 ms te-8-3-ur02.chicago201.il.chicago.comcast.net [68.87.230.186]
5 7 ms 11 ms 9 ms te-3-1-ur01.chicago302.il.chicago.comcast.net [68.87.230.181]
6 8 ms 11 ms 8 ms te-8-3-ur02.chicago302.il.chicago.comcast.net [68.87.230.178]
7 8 ms * 24 ms te-3-1-ar01.chartford.ct.hartford.comcast.net [68.86.90.58]
8 13 ms 8 ms 9 ms pos-0-3-0-0-cr01.chicago.il.ibone.comcast.net [68.86.90.57]
9 45 ms 48 ms 55 ms pos-0-14-0-0-cr01.newyork.ny.ibone.comcast.net [68.86.85.105]
10 53 ms 46 ms 46 ms 204.70.144.1
11 55 ms 43 ms 45 ms cr1-pos-0-7-3-1.newyork.savvis.net [204.70.195.93]
12 50 ms 50 ms 50 ms cr1-tengig-0-15-0-0.Washington.savvis.net [204.70.196.101]
13 47 ms 50 ms 51 ms hr1-tengig9-1.sterling2dc2.savvis.net [204.70.197.74]
14 48 ms 47 ms 48 ms bhr1-gigabitethernet14-1.sterlingdc2.savvis.net [204.70.199.9
15 49 ms 51 ms 48 ms csr21-ve242.Sterlingdc2.savvis.net [216.33.98.11]
16 50 ms 49 ms 50 ms csr22-ve241.Sterlingdc2.savvis.net [216.33.98.19]
17 * *

Looks German to me. At first I thought my computer was hijaacked

Logster

@comcast.net
KRYOGENIKS Defiant and EBK RoXed COMCAST
sHouTz To VIRUS Warlock elul21 coll1er seven

Here too, Eastern Washington reporting in.

Sgtbass

@myvzw.com
Same here. Hacked at 2355hrs.

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL
·Comcast
·Vonage


1 edit

Re: Comcast hacked?


Is this the normal server for Comcast accounts?

Omg becareful trying to access your email accounts.

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL
·Comcast
·Vonage


3 edits

Re: Comcast hacked?

said by CUBS_FAN See Profile :

Omg becareful trying to access your email accounts.
What scares the heck out of me is that this is the WHOis on ev1servers.net and nowhere in there do I see anything resembling Comcast's name.

Registrar: TUCOWS INC.
Status: clientTransferProhibited
Dates: Created 31-jul-2003 Updated 30-nov-2006 Expires 31-jul-2015
DNS Servers: NS2.EV1SERVERS.NET NS1.EV1SERVERS.NET

Registrant:
EV1Servers.net
390 Benmar Drive
Suite 200
Houston, TX 77060
US

Domain name: EV1SERVERS.NET

Administrative Contact:
Manager, Domain *************@ev1servers.net
390 Benmar Drive
Suite 200
Houston, TX 77060
US
+1.7133337873 Fax: +1.7139429332

Technical Contact:
Manager, Domain *************@ev1servers.net
390 Benmar Drive
Suite 200
Houston, TX 77060
US
+1.7133337873 Fax: +1.7139429332

espaeth
Digital Plumber
Premium,MVM
join:2001-04-21
Minneapolis, MN
·voip.ms
·Vitelity VOIP
·Callcentric
·VoiceStick
·ViaTalk
·Comcast
·Embarq

Re: Comcast hacked?

said by CUBS_FAN See Profile :

What scares the heck out of me is that this is the WHOis on ev1servers.net and nowhere in there do I see anything resembling Comcast's name.
EV1Servers merged with ThePlanet a few months ago. It's a company that owns multiple data centers and leases servers.

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL
·Comcast
·Vonage

Re: Comcast hacked?

said by espaeth See Profile :

EV1Servers merged with ThePlanet a few months ago. It's a company that owns multiple data centers and leases servers.
IS theplanet affiliated with Comcast? This still means that I was trying to log my UN+PW into a 3rd party server run by who knows.

espaeth
Digital Plumber
Premium,MVM
join:2001-04-21
Minneapolis, MN
·voip.ms
·Vitelity VOIP
·Callcentric
·VoiceStick
·ViaTalk
·Comcast
·Embarq

Re: Comcast hacked?

said by CUBS_FAN See Profile :

IS theplanet affiliated with Comcast? This still means that I was trying to log my UN+PW into a 3rd party server run by who knows.
ThePlanet is just a utility provider of server and hosting resources, they have tens of thousands of customers.

There would be no reason for Comcast to have a server there though -- they have their own hosting facilities in multiple states. It was also the compromised DNS resolvers that were pointing A records in to ThePlanet address space, so Comcast wasn't in control when traffic was being directed there.

Viden

@comcast.net
yea, on my notebook, i get under construction, but on my deskto i get the hacked message. This isn't good.

CeeDub

@comcast.net
Same thing here in Portland, Oregon. Notice the problem arount 8:00PM

Chiyo
Save Me Konata-Chan
Premium
join:2003-02-20
Minneapolis, MN
clubs:
·Comcast

Damn what did Comcast ever do to Germany? maybe it has something to do with BT :P anyways i'm LOL'ing wonder how quicky it will be fixed
--
My Blog:
»abanzai.animeblogger.net/

sansri88
Go digtal you analog laggards
Premium
join:2005-12-17
New York, NY
clubs:
hax0rzd!

Getting the Network Solutions page...

actor90
Never a dull moment
Premium
join:2003-07-21
L.E.H.T., NJ
·Comcast

Click for full size
Comcast.net Hacked
I'm getting the hacked message as well.

CUBS_FAN
Next Year Again..

join:2005-04-28
Chicago, IL

Re: Comcast hacked?

WTF!!!! I have automatic UN+PW for my email account setup on Outlook. Who knows if they got my account info and is using it...

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD

Re: Comcast hacked?

said by CUBS_FAN See Profile :

WTF!!!! I have automatic UN+PW for my email account setup on Outlook. Who knows if they got my account info and is using it...
That was my concern as well and I mentioned it to CSR.

mady
--
Honi soit qui mal y pense

Cabal
Premium
join:2007-01-21
Boston, MA

said by CUBS_FAN See Profile :

WTF!!!! I have automatic UN+PW for my email account setup on Outlook. Who knows if they got my account info and is using it...
Be careful, mail.comcast.net has indeed been changed (though probably not to a malicious site, yet).

$ host mail.comcast.net
mail.comcast.net has address 205.178.189.131
$ host 205.178.189.131
131.189.178.205.in-addr.arpa domain name pointer wf.networksolutions.com.
--
Interested in open source engine management for your Subaru?

pat0227

@comcast.net
Same thing happening here in the middle of nowhere in the US. I heard if you call they just hang up!

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD

Re: Comcast hacked?

said by pat0227 :

Same thing happening here in the middle of nowhere in the US. I heard if you call they just hang up!
They didn't hang up on me. In fact, I had a very nice conversation with someone in the Canadian call center.

mady

mr Tee

@rr.com

Re: Comcast hacked?

what did they say?

madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD

Re: Comcast hacked?

said by mr Tee :

what did they say?
There was not a lot he could say. There wasn't anything on his board about it but he went to the site and saw the hacker's message. I just told him he'd better notify their security section or whatever they call it.

mady
--
Honi soit qui mal y pense

Chiyo
Save Me Konata-Chan
Premium
join:2003-02-20
Minneapolis, MN
clubs:

1 edit
Best topic EVA... DIGG OMGZ111!

I guess the BMW hit a pole!

carson10us

@jillyred.net
same thing in chicago... Gmail backup FTW!

bpvwebdesigns

@comcast.net

Having the same issue here in the Chicagoland Area.

The DNS seems to be pointing to a non comcast address. Looks like someone poisoned a nameserver on the comcast network somehow. Notice the trace results below.


espaeth
Digital Plumber
Premium,MVM
join:2001-04-21
Minneapolis, MN

Re: Comcast hacked?

Someone hacked Comcast's registrar account at Network Solutions and changed the authoritative DNS servers for comcast.net.

EG
The wings of love
Premium
join:2006-11-18
Union, NJ

Re: Comcast hacked?

said by espaeth See Profile :

Someone hacked Comcast's registrar account at Network Solutions and changed the authoritative DNS servers for comcast.net.
A scary vulnerability..

ccggc

@rr.com
what are the chances of any malicious scripts being run on the hacked site? Anyone checked this out?

BunnyFoo

@comcast.net

Re: Comcast hacked?

»www.seantorbett.com/2008/05/28/c···-script/

Looks like someone caught a script that tried to run.
quatrix
Premium
join:2005-02-11
Davie, FL

Re: Comcast hacked?

said by BunnyFoo :

»www.seantorbett.com/2008/05/28/c···-script/

Looks like someone caught a script that tried to run.
People should really learn how scripts, cookies, etc. work before they spread their paranoia.

Kett2000
Kett2000

join:2002-04-23
Atlanta, GA
clubs:

Click for full size
I am also getting the hacked message in the Atlanta area.

xpkranger
RIP Georgia Theater
Premium
join:2000-10-27
Atlanta, GA
clubs:
·Comcast

Re: Comcast hacked?

said by Kett2000 See Profile :

I am also getting the hacked message in the Atlanta area.
In my area of Atlanta (30345 / North of Decatur) service just went out 12:03 this morning. I was on a VPN before that so I'm I'm not too worried about it.
--
The early bird may get the worm, but the second rat gets the cheese.
Forums » US Cable Support » Comcast » Comcast HSI[Connectivity] Intermittent drop in League City, TX »
« [Speed] Comcast slow in San Jose - Sunday 6/1/08  
page: 1 · 2 · 3 · 4 ...10 · 11 · 12


Wednesday, 02-Dec 11:26:49 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [159] Comcast Releasing Promised Usage Meter
· [71] Latest Consumer Reports Survey Not Kind To AT&T
· [69] Baltimore To Ban Lazy Cable Installs
· [60] Broadband Killed The Game Console
· [52] Rogers Unveils The ISP Dream Model
· [45] ACTA: Global Three Strikes
· [41] Rural Carriers Quickly Embracing Fiber
· [36] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [35] Charter Exits Chapter 11
· [33] AT&T Top Lobbyist Cicconi Has His Feelings Hurt
Most people now reading
· Am I the only one that loves to work in IT? [No, I Will Not Fix Your #@$!! Computer]
· So I found a gold mine... [World of Warcraft]
· Data Usage Meter Launched [Comcast HSI]
· Options if ACTA is ratified [TekSavvy]
· Need a better layout.. [Home Repair & Improvement]
· LFM Overkill [World of Warcraft]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Windows 7 boot manager editing questions [Microsoft Help]
· A little freaky, not sure if its legit. [Spam, Scam and Phishbusters]
· PVP in wow today [World of Warcraft]