My Linux system is doing a lot of DNS queries to 73.207.210.75.in-addr.arpa but I don't know of any reason it should be doing this. What is at in-addr.arpa?
Any reason why these queries are occurring?
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this communityThis is a totally normal PTR
lookup for the IPv4 address 75.210.207.73 (which is the reverse of how it appears in your logs).
Its purpose is to resolve the IP into a name, if a PTR
record was registered. This is the inverse of the usual name lookup which looks up a name in order to retrieve the IP address.
netstat -an
show any on this IP?nethogs
to see what applications are using the network. You could attack this that way. Also you could useiptraf
to see what's accessing the network via that IP.