Asia (remember the international date line) started on MyDoom already,
although some reports said the worm used 1609 GMT to start its attack.
SCO appears to have deleted the A record for www.sco.com from their DNS
about 1 hour ago. I don't know how often MyDoom does the DNS lookup, so
it may
SCO appears to have deleted the A record for www.sco.com from their DNS
about 1 hour ago. I don't know how often MyDoom does the DNS lookup, so
it may not stop things.
As of 1:33AM CST, www.sco.com is still resolving... however their A record
has a TTL of 60 seconds. I even queried
On Sun, 1 Feb 2004, Adam 'Starblazer' Romberg wrote:
SCO appears to have deleted the A record for www.sco.com from their DNS
about 1 hour ago. I don't know how often MyDoom does the DNS lookup, so
it may not stop things.
As of 1:33AM CST, www.sco.com is still resolving... however their
On Sat, 2004-01-31 at 22:55, Sean Donelan wrote:
On Sun, 1 Feb 2004, Adam 'Starblazer' Romberg wrote:
SCO appears to have deleted the A record for www.sco.com from their DNS
about 1 hour ago. I don't know how often MyDoom does the DNS lookup, so
it may not stop things.
As of
On Sat, 31 Jan 2004, W.D.McKinney wrote:
Odd it does not resolve for me. http://www.sco.com
Not being involved I'd guess SCO is adding/removing the record as the
attack waxes and wanes? Trying to keep the number of attackers bouncing
around some?
Hi!
Looks like SCO has added the records back. I queried
ns.calderasystems.com directly. Here is what it looked like earlier:
$ORIGIN sco.com.
;www5931IN SOA ns.calderasystems.com.
hostmaster.caldera.com. (
; 2004013103 3600 900 604800 21600
Odd it does not resolve for me. http://www.sco.com
Not being involved I'd guess SCO is adding/removing the record as the
attack waxes and wanes? Trying to keep the number of attackers bouncing
around some?
So, SCO has accused ISPs of dropping its traffic and has not made any effort to
