Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

dns

Feb 18, 2004 10:00AM PST

Lately when I check my incoming log on my router, I have anywhere from 10 to 30 people trying to access port 53 at the exact same second. This has been happening a lot lately. What exactly are they trying to do (trying to shut down my router?), and what can I do to protect my self from what they are trying to do. I do have every port on my router closed.

Discussion is locked

- Collapse -
Re:dns
Feb 18, 2004 10:54AM PST
- Collapse -
Re:Re:dns
Feb 18, 2004 11:09AM PST

I know about dns. I do not have a dns server and I have no ports forwarded on my router. I just want to know why I would have 20-30 people attempt to connect to my port 53 at the exact same time. Are they trying a DoS attack? I am not even sure about DoS. Just looking for some suggestions. Thanks

- Collapse -
Distributed Denial of Service (DDOS) Attacks
Feb 18, 2004 11:22AM PST
- Collapse -
Re:dns
Feb 18, 2004 7:20PM PST

It's probably just a group of clueless people who have been infected with something along the lines of a trojan horse that does port scans on systems. Chances are, none of those people even have a clue, and they're all Kazaa users without an antiviral program.

There's not much more you can do beyond what you have already done. Closed off all the ports you can on your router, and don't forward them. That's about as good as a software firewall's going to give you, so now you just sit and hope that's enough. Because there is no defense against a DDoS attack.