[dns-operations] Know anybody at McAfee/Intel Cloud DNS team?

Wed Jan 18 02:37:36 UTC 2017

On Tue, Jan 17, 2017 at 9:30 PM, Robert Edmonds <edmonds at mycre.ws> wrote:
> That's no ordinary load balancer. Those are tunneled database lookups!
> (My favorite obfuscation is hex-encoding IPv4 addresses into the QNAME.)

Yup. Robert is correct. More details around this (abusive?) phenomenon here:

http://www.cc.gatech.edu/~ynadji3/docs/pubs/dnsnoise-dsn2014.pdf

Manos