In a well-monitored environment, it should draw attention and cause them to investigate the internal host making the queries.