Article View: be.comp.security
Article #37Re: DNS cache poisoning
From: Cyrano
Date: Sun, 06 Mar 2005 22:49
Date: Sun, 06 Mar 2005 22:49
24 lines
2334 bytes
2334 bytes
In article <d0fm34$1cbd$1@nl-news.euro.net>, "Steef" <stevej@pandora.neehee> wrote: > "Cyrano" <cyrano.mac@techemail.com> schreef in bericht > news:cyrano.mac-AE2365.18054605032005@europe.isp.giganews.com... > > Sorry voor de crosspost. Dit is dringend. > > Popular domain names such as google.com, ebay.com, and weather.com are > > being directed to the following servers. Of course when connecting to > > these servers, "bad things" (tm) will happen, so don't go to them. > > > > www.7sir7.com (217.160.169.87) > > 123xxl.com (217.160.169.87, 207.44.240.79, 216.127.88.131) > > abx4.com (217.160.169.87, 207.44.240.79, 216.127.88.131) > BASM.BE??? Wat bedoel je? basm.be is niet bij de "simpele" domeinnamen (e.g. staat niet in een woordenboek). En de servers hierboven zijn malware seed-servers, iets waar basm zich bij mijn weten niet bezig houdt. 't is misschien nog een idee voor heer ollie. Zou daar geld inzitten? Poor Windows users...
Technical Details
Message-ID:
<cyrano.mac-1F9D69.23492006032005@europe.isp.giganews.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mailReferences:
<cyrano.mac-AE2365.18054605032005@europe.isp.giganews.com> <d0fm34$1cbd$1@nl-news.euro.net>Show Full Headers
Complete Article Headers
X-Google-Thread: 113446,b55e327bb4944eac X-Google-Thread: fce68,b55e327bb4944eac X-Google-Thread: f4ad3,b55e327bb4944eac X-Google-Attributes: gid113446,gidfce68,gidf4ad3,public X-Google-Language: DUTCH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail NNTP-Posting-Date: Sun, 06 Mar 2005 16:49:21 -0600 From: Cyrano <cyrano.mac@techemail.com> Newsgroups: be.comp.security,be.providers,be.comp.internet Subject: Re: DNS cache poisoning Organization: de Bergerac References: <cyrano.mac-AE2365.18054605032005@europe.isp.giganews.com> <d0fm34$1cbd$1@nl-news.euro.net> User-Agent: MT-NewsWatcher/3.4 (PPC Mac OS X) Date: Sun, 06 Mar 2005 23:49:20 +0100 Message-ID: <cyrano.mac-1F9D69.23492006032005@europe.isp.giganews.com> Lines: 24 X-Trace: sv3-FafnALpkleaMzrssiV8fOH1nUFYIWitopjbvZGwyLjfxv1gpD/dKsFjH/vQSjxuBCa8vAXCDUmb2ocv!Wxxgi7qGEQyDQBgBONbPXhUwi5rlg40omACQl/KSbEzu8oquF+FmWI1Pt+6CWChQG1G7G4J08M+j!UZkxpu3hMwhPNi1is3rrCuvD/9Bx X-Complaints-To: abuse@scarlet.be X-DMCA-Complaints-To: abuse@scarlet.biz X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.32