Last Updated: 2006-05-03 02:46:17 UTC
"DNS cache poisoning report. For background you may wish to review this report http://isc.sans.org/presentations/dnspoisoning.php
and this issue about BIND 4 or 8 not being suitable as forwarders http://isc.sans.org/diary.php?date=2005-04-28
Next, a request. PLEASE review your dns servers logs and cache for 188.8.131.52 If you find it listed as authoritative for .com please send us an email with a dump of the dns cache. Directions for dumping, cleaning and protecting your cache are available in the write-up above.
Serverhome.com (184.108.40.206) is being reported for Kashpureff-style cache poisoning for the.com TLD.
This report shows there are about 16k domains hosted on this server.
Be careful if you look up one of those domains there is a good chance you will see extra RR records including ones that claim they are authoritative for .com ..."(Much more detail at the ISC URL above.)