Attacks?

Bao C. Ha bao at hacom.net
Wed Nov 10 13:52:39 UTC 1999


I have been contacted by another sysadmin about attacks from my name
servers.  He sent me a log showing that about 10,000 lines of the
following happening 4 hours:

....
"11/9/99,"      10:00:02        ", 216.104.140.6"       ", 209.70.52.2" ",
Udp" ", 2036" ", 53"  ", -"   ", 0"   ", 209.70.52.3" ", -"   ",-,"
....

I am using bind 8.1.2.

Is my name server compromised?

Appreciate any assistances.

Thanks.
Bao

--
Bao C. Ha, President            voice: (706) 736-8717
Hacom, Internet & Web Services  http://www.hacom.net
Linux/Unix Consulting/Training  http://www.masteringlinux.com



More information about the bind-users mailing list