[Dshield] MyDoom/NoVarg DoS details

Keith Bergen keith at keithbergen.com
Thu Jan 29 18:17:17 GMT 2004


IP: roc-66-66-2-162.rochester.rr.com [66.66.2.162]
Date 01/26/2004 18:23 ET.

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of Bjorn Stromberg
Sent: Wednesday, January 28, 2004 12:17 PM
To: General DShield Discussion List
Subject: Re: [Dshield] MyDoom/NoVarg DoS details


I'm wondering if the SCO DDoS part isn't just some tomfoolery on the part of
the virus writer. It certainly did catch the attention of the media. It's
funny that SCO is offering such a huge reward when their financial outlook
is rather bleak.

Who's got the earliest timestamp on the virus? Give sending IP and Time
(Universal Time please).

I'll go first:

IP: 206.176.7.22
Date: 2004-01-27 04:59:09 UT

Bjorn Stromberg

----- Original Message ----- 
From: "Johannes B. Ullrich" <jullrich at sans.org>
To: "General DShield Discussion List" <list at dshield.org>
Cc: <intrusions at incidents.org>
Sent: Tuesday, January 27, 2004 2:54 PM
Subject: Re: [Dshield] MyDoom/NoVarg DoS details


> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list