Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [hijack]

19 questions
34
votes
3 answers

How did someone point a sub-domain of our domain to someone else's IP address?

We own a primary domain: businessdts.com I didn't know if our admins had created a sub-domain I had requested, "BDASERVER.businessdts.com.", so I just tried to connect to it with a browser and got a "not found". Then I pinged that sub-domain and…
CBruce
  • 465
  • 4
  • 7
6
votes
2 answers

Browser hijack uses a similar domain name to mine

I own the domain gimmeanswers.com unfortunately I've become aware of a browser hijack which uses the gimmeanswers.org (which I don't own) domain as a redirect. Searches for my legitimate domain name now return a large number of results for this…
clubbedseal
  • 61
  • 1
5
votes
6 answers

TCP Sessions and IP Changes

What happens to a TCP session when the IP of a client changes? I did a simple test of having netcat listen on a port, and connecting to that port from a client machine. I then changed the IP of the client while that nc session was open and sent…
Kyle Brandt
  • 82,107
  • 71
  • 302
  • 444
4
votes
2 answers

Outlook reads disconnected, all HTTPS/SSL traffic redirected

The problem came to me when a user complained they couldn't send or receive emails. Outlook 2010 reads "Disconnected" in the bottom right. I have tried everything to reconnect, but no luck. Tried: Repairing Network Connection Cached mode…
Jeff M
  • 43
  • 3
3
votes
4 answers

Possible NXDOMAIN hijacking?

I have two web servers at our colocation running CentOS 6.0. One runs our main marketing web site (production server) and the other is a staging server for the production server, so almost an exact replica. Both of them are behind a firewall and…
Safado
  • 4,726
  • 7
  • 35
  • 53
2
votes
1 answer

How do you avoid/detect DNS hijacking? (aka latest twitter hack)

It is all over the news today that Twitter was hacked by a DNS redirection/hijacking. My question is, what tools or techniques do you guys use to monitor your DNS/whois and detect this kind of attacks?
sucuri
  • 2,817
  • 1
  • 22
  • 22
2
votes
3 answers

DNS resolution fails in some countries

I am checking website via wordwide DNS checker. DNS resolution is incorrect in some countries. What is the cause of this problem? No problem in my other websites only this Web site: downvids.net System: Centos 7 Control Panel:…
kale20
  • 157
  • 7
2
votes
0 answers

Parkingcrew.net hijacking our domain

We are experiencing a very bizarre sort of hijack on our domain www.lbps.co.uk . It seems to render fine on desktop systems and on mobile devices over WIFI it also seems fine. However when WIFI is disabled on the mobile devices the site instead…
Justin Berkovi
  • 21
  • 1
  • 2
2
votes
2 answers

Websites get hijacked by parking page

Since a couple of weeks the websites on my hosting get hijacked by a webhosting parking page when requesting them. Sometimes it shows my actual website, but a couple of minutes after requesting it, when I revisit my site it shows a parking page…
Jesse Vlasveld
  • 29
  • 1
  • 2
1
vote
2 answers

website being mirrored by another domain

So my website is being mirrored by another domain name, I tried many ways to block the access from that specific domain but no hope, I am using cloudflare CDN and the website mirroring my site using it too, I tried to get the remote address of the…
kraus christopher
  • 13
  • 2
0
votes
1 answer

IP reuse and DNS (hijacking?) remediation

I'm not sure of the correct terminology, so please excuse the somewhat ambiguous title. We've recently taken a hit to our Google rankings. As far as we can tell, the sequence of events is as follows: We launched a server providing development…
Basic
  • 426
  • 2
  • 9
  • 23
0
votes
1 answer

Cisco 837 hijacking outgoing ssh connection?

I'm having a hell of a time configuring a Cisco 837. All I want is to set it up to forward port 22 to an internal IP. I've got that going, so I can ssh into the internal server. However, if I try to ssh from the internal server into my external IP…
stickmangumby
  • 526
  • 2
  • 5
  • 11
0
votes
1 answer

FreeDNS Subdomain Hijack

Recently, I found out that someone add subdomain without my company permission. My primary domain using freedns.affraid.org service as its domain tools. I've already set that status : Invisible so does the shared status. For illustrations: Domain …
Funky81
  • 295
  • 2
  • 13
0
votes
2 answers

How can one perform TCP hijacking?

I am developing with an ASP.NET application that uses Windows Authentication. I have setup the web.config file to deny all unauthenticated users, and only allow users from a certain role. Using Fiddler, I am able to fuzz my session ID, replay a…
John Rasch
  • 163
  • 4
  • 10
0
votes
1 answer

Prevent Hotlinking through CSS via .htaccess within the same website

The problems I'm facing is how to prevent hotlinking from within a website. What I want to do is to block www.website.com/user/xxx from hotlinking a CSS, but allow www.website.com/user/aaa to use the CSS using .htaccess. -Both user xxx and user aaa…
John Smith
  • 29
  • 2
1
2