> 16:11:41.450794 IP 217.195.66.253.37426 > 62.76.76.62.53: 42580+ A? > swfjwvtkhqx.www.feile8888.com. (47) > 16:11:41.450796 IP 91.209.124.75.50584 > 62.76.76.62.53: 37269+ [1au] > A? izhsccxedub.www.feile666.com. (57) >
Probably some type of obfuscated C&C communication or way for a botnet owner to regain control once its shut down. _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
