[Dshield] increase port 53 traffic and compromised hosts

Alan Frayer afrayer at frayernet.com
Thu Jan 22 14:37:32 GMT 2004


On Wed, 2004-01-21 at 17:36, Doug Douglass wrote:


> I did get a human response from the ISP that they contacted their customers 
> and notified them to cease the traffic. Since then number of source hosts has 
> been declining slowly:
>    * Jan 18 -- 17
>    * Jan 19 -- 15
>    * Jan 20 -- 12
> 
> The number of requests is light but steady, approx 7 requests per hour. It's 
> been declining slightly as the number hosts has been declining.


Whatever you did must have helped me, too, because I have noticed a
decline, and yesterday the logs showed an entire day without a port 53
attack!


________________________________________________________________________

Alan Frayer,CNE,CNI,CIW CI,MCP,Net+ - afrayer at frayernet.com 
Member: Independent Consultants Association (ICA)
Consultants - FREE Directory Listing - http://www.ica-assn.org 
 



More information about the list mailing list