[dns-operations] Queries for isc.org/ANY/IN

Simon Munton Simon.Munton at communitydns.net
Tue Jan 17 13:41:29 UTC 2012

This brings to mind queries we're getting, because they are all ANY/IN 
and the pattern of the traffic is quite similar - but the queries we're 
getting are all from

The queries are all for domains that *are* held at that registrar, which 
is curious - I guess they must have got the list by previously scanning 
the TLD.


inetnum: -
netname:        dongguanshiweiyiwangluokejiyoux
country:        CN
admin-c:        DG-AP
tech-c:         IC83-AP
mnt-by:         MAINT-CHINANET-GD
changed:        gdtel_ipreg at 163.com 20100105
status:         Allocated non-portable
source:         APNIC

They are mainly hitting our anycast nodes in SanJose or Bangkok, but 
that's probably because the registrars they are hitting aren't on our 
Hong Kong server.

I'm not sure this helps, or even if its related.

More information about the dns-operations mailing list