[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20050817183427.GI40811@HAX.ORG>
Date: Wed Aug 17 19:34:35 2005
From: fifi at HAX.ORG (Mike Sawicki)
Subject: Disney Down?
On Wed, Aug 17, 2005 at 11:07:26AM -0700, fd@...nsci.us wrote:
>
>
>
> On Tue, 16 Aug 2005 sk3tch@...tch.net wrote:
> > http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.CBQ
> > Symantec: Win32.Zotob.E
> > McAfee: exploit-dcomrpc
> > Kaspersky: Net-Worm.Win32.Small.d
>
> The IRC server this worm uses is 72.20.27.115, #tbp -- does anyone know
> what port? Is the host down from the virus's DoS of the IRC server?
>
It looks like many major ISPs have null routed or prohibited access
to this address.
--
Mike Sawicki (fifi@....ORG)
Powered by blists - more mailing lists