[dns-operations] Anyone else seeing an idiotic amount of dictionary NS lookups from 67.220.195.242?

Jake Zack jake.zack at cira.ca
Wed Nov 24 16:12:21 UTC 2010


23-Nov-2010 11:06:47.029 queries: info: client 67.220.195.242#59733:  
query: elsternwick316-320roadglenhuntly.ca IN NS -
23-Nov-2010 11:06:47.119 queries: info: client 67.220.195.242#53721:  
query: elsternwickacentre.ca IN NS -
23-Nov-2010 11:06:47.189 queries: info: client 67.220.195.242#47694:  
query: elsternwickandbigginscott.ca IN NS -
23-Nov-2010 11:06:47.209 queries: info: client 67.220.195.242#34020:  
query: elsternwickandcity.ca IN NS -
23-Nov-2010 11:06:47.249 queries: info: client 67.220.195.242#48389:  
query: elsternwickandflight.ca IN NS -
23-Nov-2010 11:06:47.335 queries: info: client 67.220.195.242#51801:  
query: elsternwickandlocksdoors.ca IN NS -
23-Nov-2010 11:06:47.380 queries: info: client 67.220.195.242#35398:  
query: elsternwickandstockdaleleggo.ca IN NS -
23-Nov-2010 11:06:47.400 queries: info: client 67.220.195.242#56169:  
query: elsternwickandvegiesfruit.ca IN NS -
23-Nov-2010 11:06:47.516 queries: info: client 67.220.195.242#51705:  
query: elsternwickat.ca IN NS -
23-Nov-2010 11:06:47.633 queries: info: client 67.220.195.242#52280:  
query: elsternwickbakeryfranks.ca IN NS -
23-Nov-2010 11:06:47.740 queries: info: client 67.220.195.242#58967:  
query: elsternwickbigginscottand.ca IN NS -
23-Nov-2010 11:06:47.840 queries: info: client 67.220.195.242#36847:  
query: elsternwickbodyhypoxishaping.ca IN NS -
23-Nov-2010 11:06:48.287 queries: info: client 67.220.195.242#60707:  
query: elsternwickcentrecorporate.ca IN NS -
23-Nov-2010 11:06:48.396 queries: info: client 67.220.195.242#53144:  
query: elsternwickcentreparktennis.ca IN NS -
23-Nov-2010 11:06:48.555 queries: info: client 67.220.195.242#39418:  
query: elsternwickcharteredfirstcapital.ca IN NS -
23-Nov-2010 11:06:48.692 queries: info: client 67.220.195.242#48435:  
query: elsternwickcity.ca IN NS -
23-Nov-2010 11:06:48.729 queries: info: client 67.220.195.242#54951:  
query: elsternwickcitypacificfinance.ca IN NS -
23-Nov-2010 11:06:48.743 queries: info: client 67.220.195.242#54831:  
query: elsternwickcleaners.ca IN NS -
23-Nov-2010 11:06:48.831 queries: info: client 67.220.195.242#46339:  
query: elsternwickclubgolf.ca IN NS -
23-Nov-2010 11:06:48.953 queries: info: client 67.220.195.242#44724:  
query: elsternwickcomforts.ca IN NS -
23-Nov-2010 11:06:49.174 queries: info: client 67.220.195.242#52348:  
query: elsternwickcorestrength.ca IN NS -
23-Nov-2010 11:06:49.240 queries: info: client 67.220.195.242#40534:  
query: elsternwickcoursegolfpublic.ca IN NS -
23-Nov-2010 11:06:49.346 queries: info: client 67.220.195.242#47909:  
query: elsternwickcyclespattersonssid.ca IN NS -

We've seen a lot of people querying .CA for domains that exist  
under .COM/.NET/.ORG, but that doesn't appear to be the case this time.

-Jake Zack
DNS Administrator - CIRA (.CA TLD)




More information about the dns-operations mailing list