random dns queries with random sources

Christopher Morrow morrowc.lists at gmail.com
Wed Feb 19 03:48:18 UTC 2014


On Tue, Feb 18, 2014 at 10:47 PM, Christopher Morrow
<morrowc.lists at gmail.com> wrote:
> On Tue, Feb 18, 2014 at 10:44 PM, Dobbins, Roland <rdobbins at arbor.net> wrote:
>>
>> On Feb 19, 2014, at 10:08 AM, Joe Maimon <jmaimon at ttec.com> wrote:
>>
>>> What is the purpose of this?
>>
>> Resource-exhaustion attack against the recursive DNS?
>
> so... i could be nuts, but in the example joe clipped, the resolved
> hosts are either:
> 66.199.132.5
> 66.199.132.7
> or
> 216.222.148.103
>
> these are from 2 different PI blocks, but the same named end-user: chl.net.
>
> maybe someone's upset with CHL, whomever that may be.

apologies. both chl.net and chl.com ... which appear to be parts of
ttec ... which is joe.



More information about the NANOG mailing list