[dns-operations] Queries for isc.org/ANY/IN
Simon Munton
Simon.Munton at communitydns.net
Tue Jan 17 13:41:29 UTC 2012
This brings to mind queries we're getting, because they are all ANY/IN
and the pattern of the traffic is quite similar - but the queries we're
getting are all from 121.14.142.95
The queries are all for domains that *are* held at that registrar, which
is curious - I guess they must have got the list by previously scanning
the TLD.
http://stats.communitydns.net/public/0.0.0.12/00188B-F852AE.html
inetnum: 121.14.142.0 - 121.14.142.255
netname: dongguanshiweiyiwangluokejiyoux
descr:
guangdongshengdongguanshiguanchengqudongzongdadaodiwangshangwuzhongxin702
country: CN
admin-c: DG-AP
tech-c: IC83-AP
mnt-by: MAINT-CHINANET-GD
changed: gdtel_ipreg at 163.com 20100105
status: Allocated non-portable
source: APNIC
They are mainly hitting our anycast nodes in SanJose or Bangkok, but
that's probably because the registrars they are hitting aren't on our
Hong Kong server.
I'm not sure this helps, or even if its related.
More information about the dns-operations
mailing list