random dns queries with random sources

Wed Feb 19 03:48:18 UTC 2014

On Tue, Feb 18, 2014 at 10:47 PM, Christopher Morrow
<morrowc.lists at gmail.com> wrote:
> On Tue, Feb 18, 2014 at 10:44 PM, Dobbins, Roland <rdobbins at arbor.net> wrote:
>>
>> On Feb 19, 2014, at 10:08 AM, Joe Maimon <jmaimon at ttec.com> wrote:
>>
>>> What is the purpose of this?
>>
>> Resource-exhaustion attack against the recursive DNS?
>
> so... i could be nuts, but in the example joe clipped, the resolved
> hosts are either:
> 66.199.132.5
> 66.199.132.7
> or
> 216.222.148.103
>
> these are from 2 different PI blocks, but the same named end-user: chl.net.
>
> maybe someone's upset with CHL, whomever that may be.

apologies. both chl.net and chl.com ... which appear to be parts of
ttec ... which is joe.