Security Incidents mailing list archives

Re: fbi.gov weirdness?


From: Ryan Tucker <rtucker () netacc net>
Date: Thu, 11 Oct 2001 19:07:01 -0400


On Thursday, October 11, 2001, at 06:41 , cg wrote:

Hi All,
I hope I'm posting this to the right list. I'm most likely just paranoid
but is there something weird going on with the fbi.gov site?
1. The new warning that they put out was /pressrel/pressrel01/skyfall.htm
2. Then it was changed to /pressrel/pressrel01/101101.htm
3. So after seeing the first url change I tried to go back to skyfall.htm
and I got a Not Found error with a
[...]

Noticed that too.  skyfall.htm is... an interesting reference.

4. Now as I look further by looking at DNS at COSTE, UXN and geektools.com I find differing ip addresses. COSTE reports 216.200.14.114, while the two others (which look truer to me) 64.124.161.77.

Is anyone else seeing this??

fbi.gov is Akamai'd, which means that it'll come up with a different IP address pretty much everywhere...

[cydonia:~] rtucker% host www.fbi.gov
www.fbi.gov is a nickname for fbi.edgesuite.net
fbi.edgesuite.net is a nickname for a33.g.akamai.net
a33.g.akamai.net has address 208.153.34.215
a33.g.akamai.net has address 208.153.34.216

[rtucker@puck rtucker]$ host www.fbi.gov
www.fbi.gov is a nickname for fbi.edgesuite.net
fbi.edgesuite.net is a nickname for a33.g.akamai.net
a33.g.akamai.net has address 216.200.14.100
a33.g.akamai.net has address 216.200.14.114

You can see the same effect (and IP's, most likely) on www.akamai.com. :-)

Hope this helps.  -rt

--
Ryan Tucker <rtucker () netacc net>
Network Operations Manager, NetAccess, Inc.
http://www.netacc.net/ • (716)419-8252

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


Current thread: