DNS traffic analysis Source Address Classification - Feature Engineering Problem background As we operate the authoritative name servers for the .nz ccTLD (Country Code Top Level Domain), we observe more than 500k unique source addresses sending DNS queries to