Code Red : Any whitehouse.gov people around?

Sat Jul 21 01:18:13 UTC 2001

On Fri, 20 Jul 2001, Mike Najarian wrote:

Hardcoded IP.

--Ariel
> 
> Has anyone gutted an infected box to determine whether it's going to go for
> 	whitehouse.gov
> 	www.whitehouse.gov
> or a hardcoded IP?
> 
> 
> mnaj
> 
> Best regards,
> 
> Mike Najarian - FASTNET Corporation
> miken at fast.net (610)266-6700 http://www.fast.net
> FASTNET(r) - Business and Personal Internet Solutions
> 
> 
> 
> 
> >
> > Knowing that some of the colocated boxes in our network *might* be
> > infected; I have placed a nullroute for 198.137.240.92 (the IP
> > www.whitehouse.gov resolves to).
> >
> 

--
Ariel Biener
e-mail: ariel at post.tau.ac.il
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html