To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Hi!
>> Help me understand: >> This is an attack on your network, coming from many IPs in the world to a >> single >IP address in your network? > >> This is an attack coming from your network, going from many machines >> to a signle >IP address in someone else's network? > > > > Well... I don't know exactly what's up on my network... I can see > massive dns A/AAAA query to my DNS server both from ITZ and my internal > host... This happen in determinated period... From 9 to 12 AM and from 2 > to 20 PM i'ts 2 day long that we can see that.. You might want to try dnstop so you see the top talkers on your nameservers. Might help. Bye, Raymond. _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
