nanog mailing list archives

Re: random dns queries with random sources


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Tue, 18 Feb 2014 22:47:01 -0500

On Tue, Feb 18, 2014 at 10:44 PM, Dobbins, Roland <rdobbins () arbor net> wrote:

On Feb 19, 2014, at 10:08 AM, Joe Maimon <jmaimon () ttec com> wrote:

What is the purpose of this?

Resource-exhaustion attack against the recursive DNS?

so... i could be nuts, but in the example joe clipped, the resolved
hosts are either:
66.199.132.5
66.199.132.7
or
216.222.148.103

these are from 2 different PI blocks, but the same named end-user: chl.net.

maybe someone's upset with CHL, whomever that may be.


Current thread: