[dns-operations] Weird TXT record

Geoffrey Sisson geoff at dns-oarc.net
Mon Jun 20 02:17:52 UTC 2011

Julian DeMarchi <julian at jdcomputers.com.au> wrote:

> Noticed a weird query on one of my DNS resolvers.
> dig 3371.rr.nu TXT
> This returns a massive TXT record. Is this a new/existing method to DOS
> a DNS server?

There was a rash of DNS reflector attacks in 2006 that used similar
TXT records.  Here's a VeriSign analysis of the attack technique
from April 2006:



More information about the dns-operations mailing list