Re: lame server resolving - repeats 280 times

> These "lame server" query logs indicate that these queries are coming
> from:
>
> 200.72.1.253
> 200.72.1.254
> 211.134.181.104
> 211.134.181.105
> 212.100.224.247
> 212.187.158.3
> 216.49.80.74
> 4.2.49.2
> 4.2.49.4
> 66.199.248.202
> 66.199.248.203

They are the addresses of the lame servers.

> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1 above message repeats 85 times
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'vscan.mocaasap.com' (in 'mocaasap.com'?): 216.49.80.74#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> > 66.199.248.202#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:38 ns1 above message repeats 280 times
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> > 66.199.248.203#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> > 200.72.1.254#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.104#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> > 'pow.com'?): 212.187.158.3#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.105#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> > 200.72.1.253#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> > 'pow.com'?): 212.100.224.247#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1 above message repeats 3 times
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> >
> >
>
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org