[dnswl-users] 127.0.10.3?

["Brad Jorsch" <programmer@xxxxxxxxxxxxxxx>]

Lately we've been getting responses of 127.0.10.3 to a significant 
fraction of our queries, even to IP addresses that the website lookup 
says are unlisted. Sometimes the TXT RR points to 
https://subscription.dnswl.org/. But it doesn't seem like it can be us 
making too many queries, I just checked our SMTP logs and we haven't 
come anywhere near 100000 SMTP connections in the past *month*. Our 
maximum number of connections in one day was only 1298, on October 22.

So what is going on? Could it be that all queries from every customer at 
our hosting provider are being "charged" against their caching 
nameservers? Or someone else in the same /24 (we have a /27) doing 
excessive queries? If so, what can we do to avoid this problem?