It appears that Andreas Ott <[email protected]> said: >What are my best options to find out who is behind all this traffic when it >comes from anonymous sources?
A lot of botnet malware has prefetched DNS lookups for sending spam and the like that tend to be very stale. >For how long should I expect this query traffic to continue? Don't hold your breath. R's, John _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
