Sunday, February 01, 2004


Sunday morning and SCO still in the DNS

"We had expected that SCO might take www.sco.com out of the DNS in the run up to the MyDoom DDoS payload in order to keep the denial of service http traffic off the Internet. So far, though, www.sco.com still resolves and receives http requests, though closing the connection without sending a response.
That said, the sco.com hostmaster is reserving his options, with the TTL set to just 60 seconds at time of writing.

% host www.sco.com
www.sco.com has address 216.250.128.12
% dig www.sco.com
www.sco.com. 60 IN A 216.250.128.12
% telnet www.sco.com http
Trying 216.250.128.12...
Connected to www.sco.com.
Escape character is '^]'.
Connection closed by foreign host.


Contrastingly, www.microsoft.com's performance is as normal. Microsoft has chosen to leave the hostname still resolving to a set of 8 ip addresses in Redmond, rather than point it at Akamai's content distribution network, with their TTL set to just under an hour...
"

Netcraft: Sunday morning and www.sco.com is still in the DNS.

No comments: