TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Google.ie DNS was hacked (now fixed)

80 pointsby thepiesover 12 years ago
domain: google.ie descr: Google, Inc descr: Body Corporate (Ltd,PLC,Company) descr: Registered Trade Mark Name admin-c: KR59-IEDR tech-c: CCA7-IEDR registration: 21-March-2002 renewal: 21-March-2013 status: Active nserver: ns1.farahatz.net nserver: ns2.farahatz.net source: IEDR

14 comments

AlexMuirover 12 years ago
Unfortunately last year Google Ireland barely broke even. A tiny €24mil profit on a turnover of €12.5 BILLION [1]<p>Perhaps some charitable Irish taxpayer could sort their domain name out for them?<p>1: <a href="http://www.irishtimes.com/newspaper/finance/2012/1006/1224324959631.html" rel="nofollow">http://www.irishtimes.com/newspaper/finance/2012/1006/122432...</a>
评论 #4631353 未加载
评论 #4631494 未加载
评论 #4631748 未加载
freehunterover 12 years ago
[IPv6 Ready] Whois Search Results PDF Print E-mail<p>[Querying whois.domainregistry.ie] [whois.domainregistry.ie]<p>% You have issued 1000 queries today. You have 0 queries per rolling 1 hours.<p>% You have reached your 1 hour limit.<p>Looks like they're blocking lookups for google.ie<p><i></i>Edit - actually looks like they're not doing any lookups. Searching anything gives the same error. I haven't done any lookups today for anything, but it thinks I did 1000.
评论 #4631286 未加载
评论 #4631269 未加载
bscanlanover 12 years ago
$ dig +trace www.google.ie ... google.ie. 172800 IN NS ns1.farahatz.net.<p>google.ie. 172800 IN NS ns2.farahatz.net.<p>;; Received 79 bytes from 193.1.142.2#53(193.1.142.2) in 4 ms<p>www.google.ie. 14400 IN CNAME google.ie.<p>google.ie. 14400 IN A 119.235.27.219<p>google.ie. 86400 IN NS ns2.farahatz.net.<p>google.ie. 86400 IN NS ns1.farahatz.net.<p>$ whois 119.235.27.219<p>...<p>route: 119.235.16.0/20<p>descr: Route object of PT Inet Global Indo<p>descr: ISP<p>descr: Jakarta Barat<p>country: ID<p>origin: AS18351<p>mnt-by: MAINT-ID-INET<p>changed: hostmaster@idnic.net 20090211<p>source: APNIC<p>person: Santoso Halim<p>address: Pluit Permai 8 No.3A<p>address: Jakarta-Utara<p>address: Indonesia<p>country: ID<p>phone: +62-21-30047799<p>fax-no: +62-21-30047798<p>e-mail: hostmaster@inet.net.id<p>nic-hdl: SH1061-AP<p>mnt-by: MAINT-ID-INET<p>changed: halim@inet.net.id 20061020<p>source: APNIC
评论 #4631335 未加载
kiallmacinnesover 12 years ago
# dig +short @8.8.8.8 google.ie (Google DNS #1)<p>74.125.132.94<p># dig +short @8.8.4.4 google.ie (Google DNS #2)<p>74.125.132.94<p># dig +short @208.67.222.222 google.ie (Open DNS #1)<p>119.235.27.219<p># dig +short @208.67.220.220 google.ie (Open DNS #2)<p>119.235.27.219<p># dig +short @ns1.farahatz.net google.ie<p>;; connection timed out; no servers could be reached<p># dig +short @ns2.farahatz.net google.ie<p>;; connection timed out; no servers could be reached<p># whois 74.125.132.94<p>...<p>NetName: GOOGLE<p>...<p># whois 119.235.27.219<p>...<p>netname: LINTASLINK-ID<p>...
评论 #4631387 未加载
toygover 12 years ago
If the likes of Google (tech-savvy, security-savvy, loads of cash) can't stay safe, the problem is huge.
评论 #4631392 未加载
评论 #4631804 未加载
rolmosover 12 years ago
This reminds me of Google Bolivia giving a certificate error because it points to Google.com:<p><a href="https://www.google.bo/" rel="nofollow">https://www.google.bo/</a>
评论 #4631441 未加载
unbeliover 12 years ago
yahoo.ie was hijacked too. Both are back to normal now, the incident duration was about 1h.
评论 #4631579 未加载
anons2011over 12 years ago
<a href="http://www.whois.com/whois/google.ie" rel="nofollow">http://www.whois.com/whois/google.ie</a><p>shows<p>status: Active nserver: ns1.google.com nserver: ns2.google.com nserver: ns3.google.com source: IEDR<p>Domaintools.com shows something else<p><a href="http://whois.domaintools.com/google.ie" rel="nofollow">http://whois.domaintools.com/google.ie</a><p>Something else that's worth a look at: <a href="http://host.robtex.com/ns1.farahatz.net.html#graph" rel="nofollow">http://host.robtex.com/ns1.farahatz.net.html#graph</a>
评论 #4631296 未加载
thepiesover 12 years ago
resolving to<p>nserver: ns1.farahatz.net nserver: ns2.farahatz.net
thepiesover 12 years ago
I noticed this as I was getting an error similar to<p>SSL received a record that exceeded the maximum permissible length<p>I then did a bit of checking.<p>I am using OpenDNS, which shows 119.235.27.219 as the IP now<p>Even when browser tries to redirect to google.com, it is hanging<p>The IEDR reloads the zonefile next at 5pm, although I suspect they may be a bit quicker about it today...
wulczerover 12 years ago
Interesting:<p><pre><code> $ dig +short @8.8.8.8 google.ie 173.194.39.119 173.194.39.127 173.194.39.120 $ dig +short @ns1.farahatz.net google.ie 119.235.27.219 $ whois 119.235.27.219 (...) descr: PT. TEKNOLOGI LINTASLINK (...)</code></pre>
edbloomover 12 years ago
well that can't be good! domain not due to expire until 21 March 2013 so looks like their dns records have been hijacked per the original submitter. A records are still going to google for me right now.
bashzorover 12 years ago
I'm sorry but what exactly indicates that it's hacked? It says it belongs to Google Inc, the nameservers end in .google.com, what's wrong here?
评论 #4631989 未加载
aliksover 12 years ago
Please Google dont F<i></i> with - white Seo