Excessive DNS Requests
Suresh Ramasubramanian
suresh at outblaze.com
Thu Oct 14 01:38:28 UTC 2004
On Wed, 13 Oct 2004, Anderson, Ian wrote:
> Anyone else seeing excessive DNS requests hammering their local
> forwarders this evening. We've just taken our residence network
> off-line owing to the level of port 53 traffic coming from it. Can't
> see anything in the usual places regarding this....
Have you considered zombie / trojan machines being used as spam vectors?
For example, here's a presentation at SANOG earlier this year -
http://jameslick.com/zombies/Tracking%20A%20Zombie%20Army.pdf
srs
More information about the NANOG
mailing list