The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean
Tags
attack-pattern: Data Cloud Account - T1087.004 Cloud Account - T1136.003 Cloud Services - T1021.007 Control Panel - T1218.002 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Vulnerabilities - T1588.006 Whois - T1596.002
Show in Graph
Common Information
Type Value
UUID 91d83eb0-dcd2-461f-b6b5-fed992e7cf04
Fingerprint e0003dd004b213c5
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 5, 2016, 8:30 a.m.
Added to db Jan. 18, 2023, 10:33 p.m.
Last updated Sept. 5, 2024, 1:46 a.m.
Headline The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean
Title The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean
Detected Hints/Tags/Attributes 61/1/19
Source URLs
Redirection Url
Details Source https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/
Details Source https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/index.html
URL Provider
Details Provider Source level domain
Details thehackerblog.com thehackerblog.com
Attributes
Details Type #Events CTI Value
Details Domain 4 
gtld-servers.net
Details Domain 1 
dns1.stabletransit.com
Details Domain 1 
dns2.stabletransit.com
Details Domain 4 
console.cloud.google.com
Details Domain 1 
www.rackspace.com
Details Domain 2 
support.rackspace.com
Details Domain 1 
community.rackspace.com
Details Domain 1 
a-nameserver-one.example.com
Details Domain 1 
a-nameserver-two.example.com
Details Domain 1 
a-nameserver-three.example.com
Details IPv4 1 
172.30.0.2
Details IPv4 1 
69.20.95.4
Details IPv4 1 
65.61.188.4
Details IPv4 2 
192.5.6.30
Details Url 1 
https://console.cloud.google.com/networking/dns
Details Url 1 
http://www.rackspace.com/information/legal/rsdp
Details Url 1 
https://support.rackspace.com
Details Url 1 
https://community.rackspace.com
Details Url 1 
http://www.rackspace.com/information/legal/aup