"Regardless, I checked my firewall logs this morning just for kicks and found something interesting. I see the odd request to port 53, the DNS port, every now and again, but this was different. Within the space of 11 seconds, There were no fewer than 274 requests from 29 different IP addresses throughout the Internet."
"This just screams zombies looking for a target. The originating port numbers varied greatly, reaching upwards of 60,000, which indicates that an individual process is repeatedly sending out many requests in order for the port numbers to reach such levels, as they are dynamically allocated as each new request is sent out."
Randy Nieland goes on to emphasize the need for a firewall, preferrably hardware based. But I don't need to remind you of that, do I?
07/01/2002 - 08/01/2002 08/01/2002 - 09/01/2002 09/01/2002 - 10/01/2002 10/01/2002 - 11/01/2002 11/01/2002 - 12/01/2002 12/01/2002 - 01/01/2003 01/01/2003 - 02/01/2003 02/01/2003 - 03/01/2003 03/01/2003 - 04/01/2003 04/01/2003 - 05/01/2003 05/01/2003 - 06/01/2003 06/01/2003 - 07/01/2003 07/01/2003 - 08/01/2003 08/01/2003 - 09/01/2003 09/01/2003 - 10/01/2003 10/01/2003 - 11/01/2003 11/01/2003 - 12/01/2003 12/01/2003 - 01/01/2004 01/01/2004 - 02/01/2004 02/01/2004 - 03/01/2004 03/01/2004 - 04/01/2004 04/01/2004 - 05/01/2004 05/01/2004 - 06/01/2004 06/01/2004 - 07/01/2004 07/01/2004 - 08/01/2004 08/01/2004 - 09/01/2004 09/01/2004 - 10/01/2004 10/01/2004 - 11/01/2004 11/01/2004 - 12/01/2004 12/01/2004 - 01/01/2005 01/01/2005 - 02/01/2005 02/01/2005 - 03/01/2005
Subscribe to Posts [Atom]