MoinQ:

1. wo.icaa-cambodia.gov.kh/

https://icaa-cambodia.gov.kh

Cambodia Inter-country Adoption

lame delegation

icaa-cambodia.gov.kh hijack ?

https://wo.icaa-cambodia.gov.kh

https://anenthuc.wo.icaa-cambodia.gov.kh/

http://coals6lh.wo.icaa-cambodia.gov.kh/

1.1. whois

kh.                     172800  IN      NS      ns4.apnic.net.
kh.                     172800  IN      NS      dns1.online.com.kh.
kh.                     172800  IN      NS      ns1.dns.net.kh.
kh.                     172800  IN      NS      ns.camnet.com.kh.

gov.kh.                 10800   IN      NS      ns.camnet.com.kh.
gov.kh.                 10800   IN      NS      ns1.dns.net.kh.
gov.kh.                 10800   IN      NS      ns4.apnic.net.
gov.kh.                 10800   IN      NS      dns1.online.com.kh.

icaa-cambodia.gov.kh. 86400 IN SOA ns1.mysecurecloudhost.com. pom\.piseth.gmail.com. 2023071905 3600 1800 1209600 86400

$ dig -t soa icaa-cambodia.gov.kh @ns2.greenwebsolution.com

; <<>> DiG 9.18.12-0ubuntu0.22.04.2-Ubuntu <<>> -t soa icaa-cambodia.gov.kh @ns2.greenwebsolution.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60584
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 6e 30 31 36 2e 68 6e 64 33 2e 6d 79 73 65 63 75 72 65 63 6c 6f 75 64 68 6f 73 74 2e 63 6f 6d ("n016.hnd3.mysecurecloudhost.com")
;; QUESTION SECTION:
;icaa-cambodia.gov.kh.          IN      SOA

;; ANSWER SECTION:
icaa-cambodia.gov.kh.   86400   IN      SOA     ns1.mysecurecloudhost.com. pom\.piseth.gmail.com. 2023071905 3600 1800 1209600 86400

;; Query time: 11 msec
;; SERVER: 75.2.118.134#53(ns2.greenwebsolution.com) (UDP)
;; WHEN: Th

1.2. history

$ dig -t ns icaa-cambodia.gov.kh @ns1.dns.net.kh.

icaa-cambodia.gov.kh.   10800   IN      NS      ns2.greenwebsolution.com.
icaa-cambodia.gov.kh.   10800   IN      NS      ns1.greenwebsolution.com.

ns1.greenwebsolution.com. 900   IN      A       13.248.158.180
ns2.greenwebsolution.com. 20    IN      A       75.2.118.134

ns1.mysecurecloudhost.com. 7200 IN      A       13.248.158.180
ns2.mysecurecloudhost.com. 300  IN      A       75.2.118.134

この違いがなぜか。(名前の問題らしい。なぜこんなことを)

$ dig -t ns icaa-cambodia.gov.kh @ns1.greenwebsolution.com.

icaa-cambodia.gov.kh.   86400   IN      NS      ns3.mysecurecloudhost.com.
icaa-cambodia.gov.kh.   86400   IN      NS      ns1.mysecurecloudhost.com.
icaa-cambodia.gov.kh.   86400   IN      NS      ns4.mysecurecloudhost.com.
icaa-cambodia.gov.kh.   86400   IN      NS      ns2.mysecurecloudhost.com.

2 年前からとは。

ns1.mysecurecloudhost.com
ns2.mysecurecloudhost.com
ns3.mysecurecloudhost.com
ns4.mysecurecloudhost.com
        Amazon.com, Inc.
        2021-09-01 (2 years)    2023-09-14 (today)      2 years


CategoryDns CategoryWatch CategoryTemplate

MoinQ: DNS/hijacking/msc/wo.icaa-cambodia.gov.kh (last edited 2023-09-16 04:49:45 by ToshinoriMaeno)