> On Nov 5, 2015, at 3:26 AM, Tony Finch <[email protected]> wrote:
> 
> Has anyone done a survey of where the leaked .home queries come from?

In the spirit of Measurement-Driven Protocol Engineering here are some recent 
data points from root servers:

Over the past 7 days Verisign observed an average of 200,000,000 ".home" 
queries per day from 120,000 distinct source addresses (per day).  These are 
queries sent to A-root and J-root.

Based on Geo-IP data we see queries from essentially every known country, with 
~70% of total queries coming from the top 10 countries listed below:

US      14.27%
BR      9.69%
ES      9.19%
GB      7.41%
RU      6.60%
CN      6.47%
NL      5.45%
CA      4.85%
DE      2.88%
TW      2.34%

The top 10 queriers average queries per day by AS# are below:

17,522,505      AS15169 Google Inc.
13,810,209      AS12715 Jazz Telecom S.A.
9,419,213       AS5607  Sky UK Limited
9,102,663       AS209   Qwest Communications Company, LLC
8,505,847       AS4134  Chinanet
6,721,443       AS7738  Telemar Norte Leste S.A.
6,206,409       AS2856  BT Public Internet Service
5,752,171       AS31334 Kabel Deutschland Vertrieb und Service GmbH
5,511,280       AS18881 Global Village Telecom
4,898,146       AS577   Bell Canada


Thanks to Matt Thomas of Verisign for pulling these numbers together quickly.

DW

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to