Code Red : Any whitehouse.gov people around?

Fri Jul 20 14:04:04 UTC 2001

Has anyone gutted an infected box to determine whether it's going to go for
	whitehouse.gov
	www.whitehouse.gov
or a hardcoded IP?

mnaj

Best regards,

Mike Najarian - FASTNET Corporation
miken at fast.net (610)266-6700 http://www.fast.net
FASTNET(r) - Business and Personal Internet Solutions

> 
> Knowing that some of the colocated boxes in our network *might* be
> infected; I have placed a nullroute for 198.137.240.92 (the IP
> www.whitehouse.gov resolves to).
> 