[67040] in North American Network Operators' Group
www.sco.com no longer has an DNS A record
daemon@ATHENA.MIT.EDU (Sean Donelan)
Sun Feb 1 02:11:13 2004
Date: Sun, 1 Feb 2004 02:10:27 -0500 (EST)
From: Sean Donelan <sean@donelan.com>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
Asia (remember the international date line) started on MyDoom already,
although some reports said the worm used 1609 GMT to start its attack.
SCO appears to have deleted the A record for www.sco.com from their DNS
about 1 hour ago. I don't know how often MyDoom does the DNS lookup, so
it may not stop things.
As far as I can tell, no third-party ISP is blocking traffic to SCO.
Traceroutes by IP address continue to nearly their last upstream hop.
SCO's immediate upstream providers are probably helping.
