random dns queries with random sources

Joe Maimon jmaimon at ttec.com
Wed Feb 19 03:32:03 UTC 2014


Mark Andrews wrote:

>> What is the purpose of this?
>
> Indirect attack on the 5kkx.com servers?
>
>> 18-Feb-2014 21:45:24.982 queries: info: client 38.89.3.12#19391: query:
>> swe.5kkx.com IN A + (66.199.132.5)


I have seen dozens of different second level parts.

How is this any more effective then sending it direct?



More information about the NANOG mailing list