On 23 Oct 2019, at 19:37, Daniel Stirnimann wrote: > I have located a host in our network which sends such queries the > network resolver (which we operate): Can you get your hands on said host in order to analyze it? -------------------------------------------- Roland Dobbins <roland.dobbins at netscout.com>