nanog mailing list archives
Re: Impending (mydoom) DOS attack
From: Mikael Abrahamsson <swmike () swm pp se>
Date: Sat, 31 Jan 2004 08:01:20 +0100 (CET)
;; ANSWER SECTION: www.sco.com. 60 IN A 216.250.128.12 As far as I can see, someone has taken precation and lowered the TTL on www.sco.com to 60 seconds so any DOS attack towards www.sco.com can be hindered by them changing their DNS information. This wont stop any DoS in progress, or it might, I dont know if the worm will do repeated DNS resolves or only do it once and keep sending data to that IP until reboot. -- Mikael Abrahamsson email: swmike () swm pp se
Current thread:
- Re: Impending (mydoom) DOS attack, (continued)
- Re: Impending (mydoom) DOS attack Mike Tancsa (Jan 30)
- MyDoom statistics (was Re: Impending (mydoom) DOS attack) Sean Donelan (Jan 30)
- Re: Impending (mydoom) DOS attack Mike Tancsa (Jan 30)
- Re: Impending (mydoom) DOS attack Donovan Hill (Jan 30)
- Re: Impending (mydoom) DOS attack Leo Bicknell (Jan 30)
- Re: Impending (mydoom) DOS attack Laurence F. Sheldon, Jr. (Jan 30)
- Re: Impending (mydoom) DOS attack Donovan Hill (Jan 30)
- Re: Impending (mydoom) DOS attack Stephen J. Wilcox (Jan 31)
- Re: Impending (mydoom) DOS attack Valdis . Kletnieks (Jan 31)
- Re: Impending (mydoom) DOS attack Laurence F. Sheldon, Jr. (Jan 31)
- Re: Impending (mydoom) DOS attack Leo Bicknell (Jan 30)
- Re: Impending (mydoom) DOS attack Mikael Abrahamsson (Jan 30)