[Dshield] Apparent DNS Cache poisoning on Bellsouth name servers

Yiming Gong gongym at gmail.com
Tue Jan 16 22:30:13 GMT 2007


It has nothing to do with DNS Cache poisoning,

You are expected to see many famous sites under "akamai.net", since
akamai is a content cache service provider.

Yiming Gong

On 1/16/07, Mikel Williams <mikelw at ruffinbuildingsystems.com> wrote:
> We have been having some intermittent connection problems with some sites
> today.
>
> My current DNS server is 205.152.132.23, as provided by BellSouth, my ISP.
>
> Currently a ping to www.intel.com resolves to a computer named
> a961.g.akamai.net, with an address of 80.67.72.206, a Romanian address
> according to whois.
>
> Using www.dnsstuff.com, the same ping resolves to 72.246.31.35 as it should.
>
>
> _________________________________________
>
> SANS 2007 March 29 - April 6 in San Diego, CA offers 52 Courses
> taught by our top rated instructors plus a huge vendor tools expo.
> Register Today! http://www.sans.org/info/2501 (BROCHURECODE: ISC)
>


More information about the list mailing list