[marmot777]

There are two different things. Please correct me if I'm wrong on this:

1. Device backdoor open Port 23 (telnet), used to take over loT devices.

2. The loT devices attacked through Port 53 (DNS).