[dns-operations] Queries for isc.org/ANY/IN

[Simon Munton]

This brings to mind queries we're getting, because they are all ANY/IN 
and the pattern of the traffic is quite similar - but the queries we're 
getting are all from 121.14.142.95

The queries are all for domains that *are* held at that registrar, which 
is curious - I guess they must have got the list by previously scanning 
the TLD.


http://stats.communitydns.net/public/0.0.0.12/00188B-F852AE.html

inetnum:        121.14.142.0 - 121.14.142.255
netname:        dongguanshiweiyiwangluokejiyoux
descr: 
guangdongshengdongguanshiguanchengqudongzongdadaodiwangshangwuzhongxin702
country:        CN
admin-c:        DG-AP
tech-c:         IC83-AP
mnt-by:         MAINT-CHINANET-GD
changed:        gdtel_ipreg at 163.com 20100105
status:         Allocated non-portable
source:         APNIC


They are mainly hitting our anycast nodes in SanJose or Bangkok, but 
that's probably because the registrars they are hitting aren't on our 
Hong Kong server.

I'm not sure this helps, or even if its related.