Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I just accidentally typed imadb.com and after 2 redirects (I think) I ended up at: http://dp.000.in/

You can imagine my surprise when I noticed I was seeing my webpages on my local host!

Can someone explain why dp.000.in points to the local host and what was the reasoning behind the redirects?

share|improve this question
add comment

3 Answers

up vote 3 down vote accepted

I believe it's called DNS rebinding attacks.

share|improve this answer
    
Holy cow! Is this very serious or can I ignore it? –  zaf Oct 18 '10 at 9:29
    
No need to be afraid, apart from that: smallnetbuilder.com/security/security-features/… . If you're using Firefox, install NoScript (see hackademix.net/2010/07/28/…) –  weeheavy Oct 18 '10 at 9:41
add comment

Someone must have registered that in public DNS with an A record of 127.0.0.1. I am seeing this too when I do an nslookup for dp.000.in.

whois for 000.in doesn't reveal much. Poking around with some similar fqdns (do.000.in and dq.ooo.in) brings up the IP address 64.74.223.36, but there aren't any websites there.

That doesn't really answer the question.

share|improve this answer
add comment

There are some answers for that:

  1. It's really convenient to do that when you are a site developer. You just make some changes locally and watch what will be in fact. And you don't need to just make some changes in production.

  2. Someone created a zone and forgot to change the default A record.

  3. This page should be only for internal use, but was accidentally put outside.

You shouldn't worry about that if you have right nslookup answer (and not from yours PC).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.