Long Term DNS Failures

Low Log Correlation Engine Plugin ID 800127

Synopsis

The LCE has detected continuous DNS failures from a host.

Description

The Log Correlation Engine has detected continuous DNS failures. This activity may be suspicious and could possibly indicate botnet activity, depending on if this is unexpected. This could also indicate a network error.

Plugin Details

Severity: Low

ID: 800127

File Name: 800127.prm

Family: Generic

Risk Information

Risk Factor: Low