[dns-operations] TLD operators.. issues coming from 64.97.246.0/24

Bob Paolucci Bob.Paolucci at rci.rogers.com
Sat Jun 26 20:53:15 UTC 2010


Thanks Jake
I do appreciate you bringing this to my attention.
I am looking into it as I do agree with the comments you sent to our security group.. weather its caused by us, or not.. its all in our best interest to figure this out.
 

________________________________

From: Jake Zack [mailto:jake.zack at cira.ca]
Sent: Sat 6/26/2010 4:30 PM
To: Bob Paolucci
Cc: dns-operations at mail.dns-oarc.net
Subject: Re: [dns-operations] Root operators.. issues coming from 64.97.246.0/24



I've checked our logs for all of the domains below looking for similar 
behaviour from other sources, and have yet to find any...

After seeing 25.9 million A record queries from Rogers for dns1.web.ca 
and dns2.web.ca in a 6 hour period, we've seen over 70 million queries 
for ns[123].tcsportsmarketing.ca in the last 48 hours.

Providing the huge snippets of logs below to provide source IP's, and 
the domains themselves (whose configuration are in theory the cause of 
these issues).

I can't find a consistent condition amongst all of the domains below 
to attribute this activity to...

25-Jun-2010 14:19:29.537 queries: info: client 64.71.246.109#42073: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:30.148 queries: info: client 64.71.246.109#47455: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:30.513 queries: info: client 64.71.246.109#10897: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:30.775 queries: info: client 64.71.246.109#23994: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:31.142 queries: info: client 64.71.246.109#4715: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:31.404 queries: info: client 64.71.246.109#7716: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:31.651 queries: info: client 64.71.246.109#3292: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:32.016 queries: info: client 64.71.246.109#3292: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:32.638 queries: info: client 64.71.246.109#27709: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:33.004 queries: info: client 64.71.246.109#11341: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:33.266 queries: info: client 64.71.246.109#65378: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:33.631 queries: info: client 64.71.246.109#55126: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:33.995 queries: info: client 64.71.246.109#30997: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:34.304 queries: info: client 64.71.246.109#21727: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:34.670 queries: info: client 64.71.246.109#50977: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:34.930 queries: info: client 64.71.246.109#6440: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:35.296 queries: info: client 64.71.246.109#64322: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:35.661 queries: info: client 64.71.246.109#50527: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:35.909 queries: info: client 64.71.246.109#42359: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:36.274 queries: info: client 64.71.246.109#29634: 
query: ns2.videobabylon.ca IN A -
25-Jun-2010 14:19:36.884 queries: info: client 64.71.246.109#27667: 
query: ns1.videobabylon.ca IN A -
25-Jun-2010 14:19:37.249 queries: info: client 64.71.246.109#39233: 
query: ns2.videobabylon.ca IN A -

25-Jun-2010 14:20:09.797 queries: info: client 64.71.246.210#62028: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.836 queries: info: client 64.71.246.225#11165: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.840 queries: info: client 64.71.246.225#26248: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.865 queries: info: client 64.71.246.234#57241: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.868 queries: info: client 64.71.246.234#49100: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.871 queries: info: client 64.71.246.240#7021: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.874 queries: info: client 64.71.246.240#12936: 
query: ns1.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.958 queries: info: client 64.71.246.231#38586: 
query: ns1.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:09.963 queries: info: client 64.71.246.231#6926: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.029 queries: info: client 64.71.246.198#48246: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.033 queries: info: client 64.71.246.198#54996: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.106 queries: info: client 64.71.246.240#62002: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.143 queries: info: client 64.71.246.198#8268: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.233 queries: info: client 64.71.246.231#35796: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.236 queries: info: client 64.71.246.234#30745: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.240 queries: info: client 64.71.246.234#11932: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.273 queries: info: client 64.71.246.240#54238: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.277 queries: info: client 64.71.246.240#10157: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.312 queries: info: client 64.71.246.228#47648: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.315 queries: info: client 64.71.246.228#29355: 
query: ns1.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.332 queries: info: client 64.71.246.234#24699: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.335 queries: info: client 64.71.246.234#43968: 
query: ns1.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.385 queries: info: client 64.71.246.231#48044: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.388 queries: info: client 64.71.246.210#52022: 
query: ns1.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.413 queries: info: client 64.71.246.225#58171: 
query: ns3.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.416 queries: info: client 64.71.246.225#46453: 
query: ns2.tcsportsmarketing.ca IN A -
25-Jun-2010 14:20:10.485 queries: info: client 64.71.246.228#55140: 
query: ns2.tcsportsmarketing.ca IN A -

25-Jun-2010 14:20:23.553 queries: info: client 64.71.246.219#18631: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:23.766 queries: info: client 64.71.246.219#47927: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:23.888 queries: info: client 64.71.246.198#23697: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:23.890 queries: info: client 64.71.246.198#49952: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:23.993 queries: info: client 64.71.246.198#48142: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:24.201 queries: info: client 64.71.246.198#48142: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:24.288 queries: info: client 64.71.246.198#5657: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:24.584 queries: info: client 64.71.246.198#39832: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:24.734 queries: info: client 64.71.246.219#48288: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:24.817 queries: info: client 64.71.246.219#23176: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:24.850 queries: info: client 64.71.246.198#61691: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:24.853 queries: info: client 64.71.246.198#51871: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:25.318 queries: info: client 64.71.246.219#64474: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:25.553 queries: info: client 64.71.246.219#40806: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:25.594 queries: info: client 64.71.246.198#2999: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:25.597 queries: info: client 64.71.246.198#4041: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:25.782 queries: info: client 64.71.246.219#6689: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:26.289 queries: info: client 64.71.246.198#10074: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:26.715 queries: info: client 64.71.246.198#60457: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:26.717 queries: info: client 64.71.246.198#34934: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:26.839 queries: info: client 64.71.246.198#41643: 
query: indynews.cgocable.ca IN A -
25-Jun-2010 14:20:26.842 queries: info: client 64.71.246.198#47763: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:26.945 queries: info: client 64.71.246.198#15444: 
query: indyweb.cgocable.ca IN A -
25-Jun-2010 14:20:26.974 queries: info: client 64.71.246.219#10538: 
query: indynews.cgocable.ca IN A -

23-Jun-2010 23:32:10.988 queries: info: client 64.71.246.239#58090:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:11.336 queries: info: client 64.71.246.239#51428:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:13.341 queries: info: client 64.71.246.239#34505:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:13.963 queries: info: client 64.71.246.239#11241:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:14.097 queries: info: client 64.71.246.239#30591:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:14.106 queries: info: client 64.71.246.239#63271:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:14.429 queries: info: client 64.71.246.239#61789:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:14.805 queries: info: client 64.71.246.239#38573:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:15.627 queries: info: client 64.71.246.239#40820:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:15.813 queries: info: client 64.71.246.239#47041:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:16.457 queries: info: client 64.71.246.239#22346:  
query: dns1.web.ca IN A -
23-Jun-2010 23:32:16.477 queries: info: client 64.71.246.239#51720:  
query: dns1.web.ca IN A -

25-Jun-2010 16:25:17.536 queries: info: client 24.153.23.137#9058: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:17.595 queries: info: client 24.153.23.137#20991: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:18.449 queries: info: client 24.153.23.143#36666: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:18.513 queries: info: client 24.153.23.137#22724: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:19.123 queries: info: client 24.153.23.137#10264: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:20.059 queries: info: client 24.153.23.137#38002: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:21.490 queries: info: client 24.153.23.143#50366: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:21.810 queries: info: client 24.153.23.137#11139: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:22.230 queries: info: client 24.153.23.143#11986: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:22.611 queries: info: client 24.153.23.137#44102: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:23.086 queries: info: client 24.153.23.143#52735: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:23.276 queries: info: client 24.153.23.137#42290: 
query: ns2.yoyomama.ca IN A -
25-Jun-2010 16:25:24.232 queries: info: client 24.153.23.137#57717: 
query: ns1.yoyomama.ca IN A -
25-Jun-2010 16:25:24.293 queries: info: client 24.153.23.143#59476: 
query: ns2.yoyomama.ca IN A -

25-Jun-2010 16:26:30.202 queries: info: client 24.153.23.134#55750: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:31.155 queries: info: client 24.153.23.134#24970: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:32.114 queries: info: client 24.153.23.134#53538: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:32.173 queries: info: client 24.153.23.134#1409: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:33.042 queries: info: client 24.153.23.134#42909: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:33.627 queries: info: client 24.153.23.134#34853: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:34.527 queries: info: client 24.153.23.134#1891: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:36.191 queries: info: client 24.153.23.134#49653: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:37.063 queries: info: client 24.153.23.134#20408: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:37.649 queries: info: client 24.153.23.134#13265: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:38.604 queries: info: client 24.153.23.134#61508: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:39.472 queries: info: client 24.153.23.134#48679: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:40.135 queries: info: client 24.153.23.134#13574: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:41.077 queries: info: client 24.153.23.134#6515: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:41.661 queries: info: client 24.153.23.134#34296: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:42.616 queries: info: client 24.153.23.134#37426: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:44.221 queries: info: client 24.153.23.134#49254: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:45.171 queries: info: client 24.153.23.134#27985: 
query: ns1.techmonkey.ca IN A -
25-Jun-2010 16:26:45.881 queries: info: client 24.153.23.134#6585: 
query: ns2.techmonkey.ca IN A -
25-Jun-2010 16:26:46.900 queries: info: client 24.153.23.134#28643: 
query: ns1.techmonkey.ca IN A -

25-Jun-2010 16:27:49.731 queries: info: client 24.153.23.143#55424: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:27:50.432 queries: info: client 24.153.23.143#6055: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:27:52.113 queries: info: client 24.153.23.143#61130: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:27:52.876 queries: info: client 24.153.23.143#56629: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:27:53.751 queries: info: client 24.153.23.143#30533: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:27:57.364 queries: info: client 24.153.23.143#60193: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:27:58.560 queries: info: client 24.153.23.143#20372: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:27:59.253 queries: info: client 24.153.23.143#62066: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:00.840 queries: info: client 24.153.23.143#1600: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:03.293 queries: info: client 24.153.23.143#32953: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:28:04.546 queries: info: client 24.153.23.143#38832: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:04.976 queries: info: client 24.153.23.143#30823: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:05.672 queries: info: client 24.153.23.143#61778: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:06.220 queries: info: client 24.153.23.143#31472: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:28:07.469 queries: info: client 24.153.23.143#6432: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:09.514 queries: info: client 24.153.23.143#6828: 
query: ns2.infinitewave.ca IN A -
25-Jun-2010 16:28:11.033 queries: info: client 24.153.23.143#14314: 
query: ns1.infinitewave.ca IN A -
25-Jun-2010 16:28:16.470 queries: info: client 24.153.23.143#45551: 
query: ns2.infinitewave.ca IN A -

26-Jun-2010 16:16:10.108 queries: info: client 64.71.246.240#61704: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:10.358 queries: info: client 64.71.246.240#41255: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:10.741 queries: info: client 64.71.246.240#17541: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:11.071 queries: info: client 64.71.246.240#19718: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:11.438 queries: info: client 64.71.246.240#12169: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:11.818 queries: info: client 64.71.246.240#13413: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:12.067 queries: info: client 64.71.246.240#47585: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:12.500 queries: info: client 64.71.246.240#38841: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:12.741 queries: info: client 64.71.246.240#12169: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:13.227 queries: info: client 64.71.246.240#42278: 
query: ns2.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:13.878 queries: info: client 64.71.246.240#20201: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:14.319 queries: info: client 64.71.246.240#58399: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:14.543 queries: info: client 64.71.246.240#52468: 
query: ns1.celebrity-pictures.ca IN A -
26-Jun-2010 16:16:14.926 queries: info: client 64.71.246.240#63614: 
query: ns1.celebrity-pictures.ca IN A -

26-Jun-2010 16:16:45.244 queries: info: client 64.71.246.91#53968: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:45.807 queries: info: client 64.71.246.91#55409: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:46.711 queries: info: client 64.71.246.91#60132: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:46.878 queries: info: client 64.71.246.91#36133: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:47.268 queries: info: client 64.71.246.91#26466: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:47.901 queries: info: client 64.71.246.91#8437: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:48.909 queries: info: client 64.71.246.91#37726: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:48.936 queries: info: client 64.71.246.91#32940: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:50.326 queries: info: client 64.71.246.91#36334: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:50.768 queries: info: client 64.71.246.91#41176: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:51.131 queries: info: client 64.71.246.91#2724: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:51.774 queries: info: client 64.71.246.91#35295: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:52.203 queries: info: client 64.71.246.91#36254: 
query: ns1.aartech.ca IN A -
26-Jun-2010 16:16:52.952 queries: info: client 64.71.246.91#44162: 
query: ns2.aartech.ca IN A -
26-Jun-2010 16:16:54.004 queries: info: client 64.71.246.91#43818: 
query: ns2.aartech.ca IN A -

26-Jun-2010 16:19:00.795 queries: info: client 24.153.23.134#4054: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:00.955 queries: info: client 24.153.23.137#17556: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:01.140 queries: info: client 24.153.23.134#8837: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:01.141 queries: info: client 24.153.23.143#8063: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:01.673 queries: info: client 24.153.23.137#38466: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:01.742 queries: info: client 24.153.23.143#6701: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:01.963 queries: info: client 24.153.23.143#62083: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:02.023 queries: info: client 24.153.23.134#1903: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:02.258 queries: info: client 24.153.23.143#61355: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:02.486 queries: info: client 24.153.23.143#34067: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:02.625 queries: info: client 24.153.23.134#12760: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:02.631 queries: info: client 24.153.23.137#47681: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:03.032 queries: info: client 24.153.23.134#35028: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:03.250 queries: info: client 24.153.23.137#19509: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:03.654 queries: info: client 24.153.23.143#9189: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:03.811 queries: info: client 24.153.23.134#62827: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:03.910 queries: info: client 24.153.23.143#14835: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:04.194 queries: info: client 24.153.23.143#17474: 
query: ns2.armadadesign.ca IN A -
26-Jun-2010 16:19:04.198 queries: info: client 24.153.23.137#59844: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:04.651 queries: info: client 24.153.23.134#48583: 
query: ns1.armadadesign.ca IN A -
26-Jun-2010 16:19:04.725 queries: info: client 24.153.23.143#41960: 
query: ns1.armadadesign.ca IN A -

26-Jun-2010 16:19:53.245 queries: info: client 24.153.23.143#17271: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:53.544 queries: info: client 24.153.23.143#58618: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:53.795 queries: info: client 24.153.23.143#22627: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:54.084 queries: info: client 24.153.23.143#40684: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:54.143 queries: info: client 24.153.23.143#62934: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:54.916 queries: info: client 24.153.23.143#29899: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:55.409 queries: info: client 24.153.23.143#34964: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:56.274 queries: info: client 24.153.23.143#1358: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:56.584 queries: info: client 24.153.23.143#7893: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:57.077 queries: info: client 24.153.23.143#60619: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:57.967 queries: info: client 24.153.23.143#34484: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:58.197 queries: info: client 24.153.23.143#6239: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:58.760 queries: info: client 24.153.23.143#25701: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:59.063 queries: info: client 24.153.23.143#37312: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:19:59.431 queries: info: client 24.153.23.143#8951: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:19:59.875 queries: info: client 24.153.23.143#53320: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:00.367 queries: info: client 24.153.23.143#13423: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:00.425 queries: info: client 24.153.23.143#31215: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:00.793 queries: info: client 24.153.23.143#41515: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:02.566 queries: info: client 24.153.23.143#10897: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:02.957 queries: info: client 24.153.23.143#46604: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:03.511 queries: info: client 24.153.23.143#40292: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:04.235 queries: info: client 24.153.23.143#36494: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:05.105 queries: info: client 24.153.23.143#54677: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:05.885 queries: info: client 24.153.23.143#35558: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:06.506 queries: info: client 24.153.23.143#63885: 
query: ns1.mediashock.ca IN A -
26-Jun-2010 16:20:07.098 queries: info: client 24.153.23.143#16498: 
query: ns2.mediashock.ca IN A -
26-Jun-2010 16:20:07.666 queries: info: client 24.153.23.143#16583: 
query: ns1.mediashock.ca IN A -

26-Jun-2010 16:22:07.116 queries: info: client 24.153.23.143#58065: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:10.173 queries: info: client 24.153.23.143#63939: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:10.516 queries: info: client 24.153.23.143#9859: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:11.710 queries: info: client 24.153.23.143#49256: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:11.914 queries: info: client 24.153.23.143#34271: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:12.202 queries: info: client 24.153.23.143#25383: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:13.079 queries: info: client 24.153.23.143#7412: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:13.567 queries: info: client 24.153.23.143#46333: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:13.879 queries: info: client 24.153.23.143#35368: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:14.105 queries: info: client 24.153.23.143#12394: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:14.164 queries: info: client 24.153.23.143#58363: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:14.459 queries: info: client 24.153.23.143#31178: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:14.686 queries: info: client 24.153.23.143#9859: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:15.900 queries: info: client 24.153.23.143#60894: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:16.980 queries: info: client 24.153.23.143#4013: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:17.039 queries: info: client 24.153.23.143#15609: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:17.544 queries: info: client 24.153.23.143#61779: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:17.911 queries: info: client 24.153.23.143#9523: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:18.350 queries: info: client 24.153.23.143#11156: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:18.408 queries: info: client 24.153.23.143#33625: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:18.918 queries: info: client 24.153.23.143#35842: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:19.581 queries: info: client 24.153.23.143#44521: 
query: trudns1.mytru.ca IN A -
26-Jun-2010 16:22:20.302 queries: info: client 24.153.23.143#62996: 
query: trudns2.mytru.ca IN A -
26-Jun-2010 16:22:20.596 queries: info: client 24.153.23.143#58398: 
query: trudns2.mytru.ca IN A -

-Jake Zack
DNS Administrator - CIRA (.CA TLD)


On 26-Jun-10, at 3:54 PM, Bob Paolucci wrote:

> The Rogers Communications Engineering group has recieved a complaint 
> from .CA root operators that our resolvers are flooding them with 
> queries.
>
> When we looked at some snoops from our dns servers regarding domains 
> the root operator said we were sending multiple queries for, we saw 
> a number of the domains with NS records that had longer TTL's than 
> the corresponding glue in .ca causing glue to expire before the NS 
> records, of course causing issue.
>
> Also a number of domains in .ca in that some of the NS records for a 
> particular domain have "additional" info. but other ns records for 
> the same domain not having said info...
>
> No doubt this is causing us to retry MANY queries.  We are running a 
> fairly large farm of CNR resolvers.
>
> Im very interested in hearing from other root operators that may see 
> an issue coming from us.
> I am looking into things on our end.
>
> ThnX
>
> Bob
>
> (Apologies if anything gets attached to this email)
> <ATT00001.txt><ATT00002.txt>



-------------- next part --------------

This e-mail (and attachment(s)) is confidential, proprietary, may be subject to copyright and legal privilege and no related rights are waived. If you are not the intended recipient or its agent, any review, dissemination, distribution or copying of this e-mail or any of its content is strictly prohibited and may be unlawful. All messages may be monitored as permitted by applicable law and regulations and our policies to protect our business. E-mails are not secure and you are deemed to have accepted any risk if you communicate with us by e-mail. If received in error, please notify us immediately and delete the e-mail (and any attachments) from any computer or any storage medium without printing a copy.

Ce courriel (ainsi que ses pièces jointes) est confidentiel, exclusif, et peut faire l?objet de droit d?auteur et de privilège juridique; aucun droit connexe n?est exclu. Si vous n?êtes pas le destinataire visé ou son représentant, toute étude, diffusion, transmission ou copie de ce courriel en tout ou en partie, est strictement interdite et peut être illégale. Tous les messages peuvent être surveillés, selon les lois et règlements applicables et les politiques de protection de notre entreprise. Les courriels ne sont pas sécurisés et vous êtes réputés avoir accepté tous les risques qui y sont liés si vous choisissez de communiquer avec nous par ce moyen. Si vous avez reçu ce message par erreur, veuillez nous en aviser immédiatement et supprimer ce courriel (ainsi que toutes ses pièces jointes) de tout ordinateur ou support de données sans en imprimer une copie. 


More information about the dns-operations mailing list