A DNS server on your client's network is receiving a large number of DNS queries from what appears to be a workstation on their

Question

4 years ago

14

A DNS server on your client's network is receiving a large number of DNS queries from what appears to be a workstation on their

network. On closer examination, the workstation does not appear to be the source of the DNS queries, but is receiving the responses from the DNS server. What type of attack best matches this description

Computers and Technology

1 answer:

drek231 [11] · Answer 1 · 2021-12-20T20:52:49+03:00

Answer:

The answer is reflective DNS attack

Explanation:

Reflective DNS Attack is used in many distributed DDoS attacks to knock down an internet pipe. The attack is divided in two stages: first the attacker sends lots of requests to one or more legitimate DNS servers while using spoofed source IP of the target person, and then, in the second stage, the DNS server receiving the semi-legitimate requests replies to the spoofed IP, thereby unknowingly lauching an attack on the target computer with responses to requests never sent by the victim.