nanog mailing list archives

RE: Code Red : Any whitehouse.gov people around?


From: Ariel Biener <ariel () fireball tau ac il>
Date: Sat, 21 Jul 2001 04:18:13 +0300 (IDT)


On Fri, 20 Jul 2001, Mike Najarian wrote:


Hardcoded IP.

--Ariel

Has anyone gutted an infected box to determine whether it's going to go for
      whitehouse.gov
      www.whitehouse.gov
or a hardcoded IP?


mnaj

Best regards,

Mike Najarian - FASTNET Corporation
miken () fast net (610)266-6700 http://www.fast.net
FASTNET(r) - Business and Personal Internet Solutions





Knowing that some of the colocated boxes in our network *might* be
infected; I have placed a nullroute for 198.137.240.92 (the IP
www.whitehouse.gov resolves to).



--
Ariel Biener
e-mail: ariel () post tau ac il
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html


Current thread: