> On Nov 6, 2015, at 12:10 PM, Joe Abley <[email protected]> wrote: > > Hi Duane, > > On 6 Nov 2015, at 14:32, Wessels, Duane wrote: > >>> On Nov 5, 2015, at 3:26 AM, Tony Finch <[email protected]> wrote: >>> >>> Has anyone done a survey of where the leaked .home queries come from? >> >> In the spirit of Measurement-Driven Protocol Engineering here are some >> recent data points from root servers: >> >> Over the past 7 days Verisign observed an average of 200,000,000 ".home" >> queries per day from 120,000 distinct source addresses (per day). These are >> queries sent to A-root and J-root. >> >> Based on Geo-IP data we see queries from essentially every known country, >> with ~70% of total queries coming from the top 10 countries listed below: >> >> US 14.27% >> BR 9.69% >> ES 9.19% >> GB 7.41% >> RU 6.60% >> CN 6.47% >> NL 5.45% >> CA 4.85% >> DE 2.88% >> TW 2.34% > > It might be interesting to also rank the top ten countries originating any > kind of query received at A and J. If that list is the same as the one above, > that might help confirm or deny whether this is an effect more prevalent in > some places than other, or whether it's just a function of how many people in > each country are using the DNS.
Joe, Here's that data: US 27.40% CN 14.86% BR 6.23% KR 5.35% RU 3.61% TW 3.04% NL 3.03% GB 2.50% DE 2.10% IT 1.67% DW _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
