[dns-operations] what's ongoing with WEBEX and dot queries

[Mayer Hans]

Dear All,

Since 2019 06 05 around 10:00 UTC I see a much higher number of queries to our name servers for top level dot (.)
This happened before too from anywhere but with an amount of queries of 5 to 10 times per day. Now we are in a range of average 2000 queries per hour up to 7200 queries per  hour.

[cid:FBEFFA9F-3523-463B-9463-33A11B633B52]

Interesting is that only one of our  4 DNS server is used for these queries.

All these remote IP’s are coming from WEBEX. A reverse lookup ends with something.webex.com<http://something.webex.com>
The geo-locations are limited to 4 destinations
US, San Jose
Netherlands
Repulic of Singapore, Singapore
China, Beijing

Did anyone else register this obviously misconfigured DNS from Webex ?


Kind regards
Hans

—


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190608/4675e5a9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot 2019-06-08 at 21.19.25.png
Type: image/png
Size: 39187 bytes
Desc: Screenshot 2019-06-08 at 21.19.25.png
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190608/4675e5a9/attachment.png>