The Confiker Virus.

Warren Kumari warren at kumari.net
Wed Apr 1 17:21:13 UTC 2009


On Apr 1, 2009, at 12:01 PM, Jason Iannone wrote:

> What's the virus doing with all of those domain names?

http://lmgtfy.com/?q=conficker

>
>
> On Wed, Apr 1, 2009 at 8:38 AM, Michael Holstein
> <michael.holstein at csuohio.edu> wrote:
>>
>>> Of the 50,000 DNS names generated for today ..
>>
>> Additional info ..
>>
>> Top 10 ASN by number/name :
>>
>> 5680 -- 1280 ISC-AS1280 Internet Systems Consortium, Inc.     2820  
>> -- 1668
>> AOL-ATDN - AOL Transit Data Network    2737 -- 23028 TEAM-CYMRU -  
>> Team Cymru
>> Inc.     404 -- 760 University of Vienna, Austria      20 -- 1887
>> NASK-ACADEMIC NASK        10 -- 4134 CHINANET-BACKBONE No.31,Jin- 
>> rong Street
>>       7 -- 21844 THEPLANET-AS - ThePlanet.com Internet Services,  
>> Inc.    5
>> -- 8560 ONEANDONE-AS 1&1 Internet AG      4 -- 12306 PLUSLINE  
>> Plus.Line AG
>> IP-Services      3 -- 26496 PAH-INC - GoDaddy.com, Inc.
>> So you can tell the "good guys" are still at it pre-registering the  
>> bulk of
>> the conflickr-related domain names.
>>
>> Cheers,
>>
>> Michael Holstein
>> Cleveland State University
>>
>>
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2173 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20090401/0266678d/attachment.bin>


More information about the NANOG mailing list