Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s

From: John Conover (conoverat_private)
Date: Thu Sep 27 2001 - 21:43:59 PDT

Next message: info: "Re: FBI Virus Alerts"

Previous message: Bugger Bugtraq: "Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s"
In reply to: Fred Cohen: "Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Many-about 2X to 5X as many. Mine are to port 53 TCP, no SYN.

About double to port 80, with SYN.

	John

Fred Cohen writes:
> I seem to be seeing very large numbers of DNS lookups and lots of
> apparent /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...  lookups from my class
> B as of the last hour or so. 
> 
> Anyone else?
> 
-- 

John Conover        Tel. 408.370.2688  conoverat_private
631 Lamont Ct.      Fax. 408.379.9602  http://www.johncon.com/
Campbell, CA 95008  Cel. 408.772.7733  


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: info: "Re: FBI Virus Alerts"
Previous message: Bugger Bugtraq: "Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s"
In reply to: Fred Cohen: "Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Sep 28 2001 - 04:09:22 PDT