random dns queries with random sources

Christopher Morrow morrowc.lists at gmail.com
Wed Feb 19 03:47:01 UTC 2014


On Tue, Feb 18, 2014 at 10:44 PM, Dobbins, Roland <rdobbins at arbor.net> wrote:
>
> On Feb 19, 2014, at 10:08 AM, Joe Maimon <jmaimon at ttec.com> wrote:
>
>> What is the purpose of this?
>
> Resource-exhaustion attack against the recursive DNS?

so... i could be nuts, but in the example joe clipped, the resolved
hosts are either:
66.199.132.5
66.199.132.7
or
216.222.148.103

these are from 2 different PI blocks, but the same named end-user: chl.net.

maybe someone's upset with CHL, whomever that may be.




More information about the NANOG mailing list