[dns-operations] Queries for isc.org/ANY/IN
Simon.Munton at communitydns.net
Tue Jan 17 13:41:29 UTC 2012
This brings to mind queries we're getting, because they are all ANY/IN
and the pattern of the traffic is quite similar - but the queries we're
getting are all from 18.104.22.168
The queries are all for domains that *are* held at that registrar, which
is curious - I guess they must have got the list by previously scanning
inetnum: 22.214.171.124 - 126.96.36.199
changed: gdtel_ipreg at 163.com 20100105
status: Allocated non-portable
They are mainly hitting our anycast nodes in SanJose or Bangkok, but
that's probably because the registrars they are hitting aren't on our
Hong Kong server.
I'm not sure this helps, or even if its related.
More information about the dns-operations