[113092] in North American Network Operators' Group
Re: The Confiker Virus.
daemon@ATHENA.MIT.EDU (Warren Kumari)
Wed Apr 1 13:25:27 2009
From: Warren Kumari <warren@kumari.net>
To: Jason Iannone <jason.iannone@gmail.com>
In-Reply-To: <e29f88cc0904010901o5d3e8b2cy169beca38a427cba@mail.gmail.com>
Date: Wed, 1 Apr 2009 13:21:13 -0400
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail-300-453751911
Content-Type: text/plain;
charset=US-ASCII;
format=flowed;
delsp=yes
Content-Transfer-Encoding: 7bit
On Apr 1, 2009, at 12:01 PM, Jason Iannone wrote:
> What's the virus doing with all of those domain names?
http://lmgtfy.com/?q=conficker
>
>
> On Wed, Apr 1, 2009 at 8:38 AM, Michael Holstein
> <michael.holstein@csuohio.edu> wrote:
>>
>>> Of the 50,000 DNS names generated for today ..
>>
>> Additional info ..
>>
>> Top 10 ASN by number/name :
>>
>> 5680 -- 1280 ISC-AS1280 Internet Systems Consortium, Inc. 2820
>> -- 1668
>> AOL-ATDN - AOL Transit Data Network 2737 -- 23028 TEAM-CYMRU -
>> Team Cymru
>> Inc. 404 -- 760 University of Vienna, Austria 20 -- 1887
>> NASK-ACADEMIC NASK 10 -- 4134 CHINANET-BACKBONE No.31,Jin-
>> rong Street
>> 7 -- 21844 THEPLANET-AS - ThePlanet.com Internet Services,
>> Inc. 5
>> -- 8560 ONEANDONE-AS 1&1 Internet AG 4 -- 12306 PLUSLINE
>> Plus.Line AG
>> IP-Services 3 -- 26496 PAH-INC - GoDaddy.com, Inc.
>> So you can tell the "good guys" are still at it pre-registering the
>> bulk of
>> the conflickr-related domain names.
>>
>> Cheers,
>>
>> Michael Holstein
>> Cleveland State University
>>
>>
>
--Apple-Mail-300-453751911
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail-300-453751911--