[Dshield] MyDoom-A/B

jayjwa jayjwa at atr2.ath.cx
Tue Feb 3 09:32:48 GMT 2004


On Sun, 1 Feb 2004, Johannes B. Ullrich wrote:

> Well, mydoom a & b are now in full swing dDOS'ing sco.com and
> microsoft.com respectively.

> At least Rogers appears to have changed the sco.com DNS record to
> 127.0.0.1. I haven't heard reports from other ISPs, but if you could
> check please and let me know if your ISP is using this to reduce the
> damage on its own infrastructure.

Localnet.com doesn't appear to have done this, although it shocks me. They
block & redirect so much else. But we do get www.nowhere.org set to
127.0.0.1 ;-) . This is N.Eastern US.


[jayjwa]RLF#37






More information about the list mailing list