In message <[email protected]>, Dnsbed Ops writes: > Hello, > > My nameservers currently have been meeting the attacks. > All these queries are against one special domain, from the seemed fake IPs. > And those eat up the bandwidth quickly since I run the nameservers with > hosting servers. > Can you help? Thanks in advance.
The logs actually look like the queries are from recursive servers following normal recursion looking at the mixture of flags and that they are directed at a official server for the zone. ns6.cloudwebdns.com. 3600 IN A 116.251.209.248 ns6.cloudwebdns.com. 3600 IN A 192.208.187.242 I suspect something is trying to detect whether there is nxdomain redirection occuring by prepend a random string to www.byw.so. Mark > # vnstat -tr > 4484 packets sampled in 5 seconds > Traffic average for eth0 > > rx 300.80 kbit/s 449 packets/s > tx 520.00 kbit/s 447 packets/s > > The logs: > > Nov 26 09:24:37 ken named[971]: client 61.220.0.153#56580: query: > ckijmewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 61.155.104.177#32620: query: > jxfmeuwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 202.96.209.21#36915: query: > xevysjwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 220.187.246.51#21572: query: > hxcytwwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 74.125.189.23#39963: query: > mgygkqwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 202.101.224.70#31797: query: > vudzmkwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 61.164.9.74#40111: query: > wqtrkpwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 24.92.226.226#2287: query: > ummqqkwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 211.98.70.54#3760: query: > gcbkhrwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 202.96.199.133#63510: query: > wtuvjdwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 24.92.226.202#2192: query: > gocckcwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 24.92.226.213#2280: query: > ueycawwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 211.98.70.54#23331: query: > izkeezwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 211.98.70.54#44953: query: > tflgjvwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 222.172.200.77#17808: query: > nbgabcwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 220.187.246.35#6018: query: > ywusykwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 61.153.41.132#9017: query: > dodmjvwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:37 ken named[971]: client 61.139.113.166#47469: query: > yaaiykwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 119.6.73.228#17004: query: > www.499m.com IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 204.13.248.180#39443: query: > cmesiswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.71#45699: query: > tewfpfwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#53403: query: > wwygcewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.50#51153: query: > dkxjkcwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#23850: query: > oqyqogwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#15115: query: > mgyciuwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#4217: query: > cceiyowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#23288: query: > qsakkiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#42517: query: > migmcewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#23458: query: > iiieaowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.41.20#41682: query: > pleevtwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#20161: query: > kiaqmqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#43751: query: > mkamgywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#61093: query: > ucyqyqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#38046: query: > kmewggwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#62586: query: > ATohywwww.byW.So IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#51290: query: > kayagawww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#11052: query: > mgoeyuwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#10590: query: > isieuqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.34#29181: query: > kuigwqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.155.104.172#32513: query: > slxnzbwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#21826: query: > lrutxiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#33436: query: > ccimqiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.5.244#30591: query: > NzatzqwWW.byw.SO IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#20204: query: > uwuoucwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#12546: query: > auwwoywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.151.133.162#41030: query: > mydfbvwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#32118: query: > owgkscwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.41.20#52692: query: > kmcwucwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.41.16#47151: query: > kemyqwwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 67.215.82.11#22666: query: > ucdcwjwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.147#65144: query: > weeyriwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.214#55692: query: > ucdcwjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.123#13633: query: > bzqxebwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.54#58523: query: > vdxqizwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 204.13.248.182#5726: query: > ywdzsvwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.102.224.82#22550: query: > nkhoxzwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 24.92.226.228#18645: query: > zuvacfwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.140.11.214#39536: query: > omagogwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#51617: query: > gnfnqqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#28719: query: > meqsegwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.36#18139: query: > eiowuewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.138.245.181#34876: query: > ssioyywww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.68#38694: query: > miqemswww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 221.232.247.219#16800: query: > oqcyumwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.54#35575: query: > mkygkswww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.106.101.202#33619: query: > ysgkjqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#16686: query: > HyqmDrwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.137#2253: query: > hqzogtwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.155.104.177#26240: query: > wiyosewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.164.9.74#21060: query: > oqkugowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.119#33405: query: > uokkeuwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#44802: query: > XsvaDtwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.208#58196: query: > aoycwswww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.235#9060: query: > vxhvmowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 221.232.247.221#11166: query: > ioaimwwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.35#10741: query: > sbdwlswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#63520: query: > UwagIiwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#63871: query: > PihzFawwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#11884: query: > klxwbswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 222.178.10.249#33920: query: > wpzpquwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.234#13726: query: > gjyiiwwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#61603: query: > YwoaUcwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.129.192.29#34827: query: > dmbigwwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.155.104.177#9936: query: > jstaavwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.154#43441: query: > oomkibwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.5.244#27187: query: > EVplGfWwW.byw.So IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.235#42475: query: > yxbvatwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.140.11.160#49098: query: > igmkeiwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.211#61223: query: > ebrhhiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.234#18732: query: > crjhkiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.71#45278: query: > vudzmkwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.189.19#38800: query: > oocekywww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.41.18#57929: query: > ascqwkwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.234#20301: query: > rznbuhwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 222.178.10.249#33920: query: > xwdkbvwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.22#22334: query: > csgbspwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.154#23616: query: > gajginwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.102.224.82#59465: query: > qkcqwiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#57768: query: > cdqduvwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#23384: query: > xfwllowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#43968: query: > dlpueswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.71#43987: query: > ggsgsewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.54#46208: query: > qezlyewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.191.83#40054: query: > xdvfnuwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#51664: query: > csusazwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#59993: query: > aiuieywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#63496: query: > GeccAowwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.54#41241: query: > hfeaqzwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.234#41568: query: > mqxjlewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#5530: query: > XvfjAewwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.139.113.166#47022: query: > oomggswww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#19629: query: > NclxScwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#20266: query: > tewfpfwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#51451: query: > mkkuoswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.234#53594: query: > ekekcywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.159#30103: query: > kwwmguwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.215#62941: query: > wyisakwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#58785: query: > BkoiLdwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.155.104.177#49532: query: > weweoewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.186.208#59926: query: > fnahzkwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.54#41794: query: > sagimywww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.191.80#51129: query: > crwnhqwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#10217: query: > iuekwawww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#57211: query: > qcqokmwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 221.232.247.210#33409: query: > keouuawww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#36999: query: > kawyaowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#7851: query: > ycfxzwwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#54384: query: > cvmbxmwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 218.242.122.72#39405: query: > xyvewfwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 173.194.99.17#54892: query: > skiwqiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.22#21946: query: > cccagmwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.50#50715: query: > gcmqggwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 204.13.248.182#26175: query: > bgcwqvwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.35#35991: query: > uccwgswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.10#23244: query: > YwsyYgwwW.byw.So IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.154#46673: query: > wvahixwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.129.192.25#49029: query: > migogmwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.146#6245: query: > wvahixwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.139.113.162#48387: query: > aikdpowww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 59.51.78.222#30936: query: > gasogywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#29740: query: > qwiAyiwWW.ByW.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#33937: query: > yiwackwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.54#45731: query: > zcmqagwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.189.22#42261: query: > gcisokwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#5635: query: > ucmksmwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.186.209#61059: query: > lbtvniwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.50#50602: query: > gacuywwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#11744: query: > ciasuiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.139.113.166#58187: query: > wsoquqwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.2.146#20515: query: > hclhtowww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.187.80#48507: query: > iqefjvwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.15#29191: query: > lclxkzwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#24644: query: > bQtoFvwWW.bYW.sO IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#7732: query: > uggwowwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#1665: query: > mwdngowww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.138.245.187#37942: query: > gujfsrwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#41578: query: > iccmqewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.209#59757: query: > smgqkpwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#35988: query: > idqsvbwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.164.9.72#20936: query: > oqkugowww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#26510: query: > wnqrjiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#57345: query: > hkjgrswww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#27244: query: > ggsgsewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 204.13.248.180#60547: query: > meciwgwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.138.245.181#19821: query: > mccoamwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 216.146.38.152#40476: query: > ygufprwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#27186: query: > ougdmdwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#58729: query: > wdwnqcwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.35#59350: query: > ubcvaiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#62965: query: > pbmrewwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 121.10.40.130#13756: query: > wakmywwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.189.20#55886: query: > wbcrmjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#45468: query: > rpjmegwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.106#3323: query: > zdqcsjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.163#23433: query: > ldupstwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 221.120.249.9#22137: query: > wbcrmjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#30824: query: > GyIguwWWW.bYw.So IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.191.84#54199: query: > umcsuqwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.146#48758: query: > vdfkrmwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.112#61083: query: > lfvjtpwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#36569: query: > uscmswwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.139.113.162#47127: query: > iqoqmmwww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 110.77.147.66#3981: query: > eddjijwww.byw.so IN A -E (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 69.252.250.15#19726: query: > kdmxyjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 216.146.38.157#63185: query: > jfnijnwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.186.84#63836: query: > ueqmkmwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.121#29232: query: > nggxdiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 76.96.13.141#24214: query: > kdmxyjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.38#34151: query: > ayosyewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 216.146.38.152#26952: query: > aykcqqwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#11560: query: > bjswbtwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 59.51.78.220#49574: query: > msiwzbwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.70#27313: query: > youoeewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.129.192.29#4883: query: > nzisqcwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.51#10340: query: > vaiuydwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.138.245.182#21590: query: > mmskgiwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.34#25447: query: > hzcojiwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.130#9972: query: > cowwkcwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 218.242.122.72#63276: query: > yamrugwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.235#18532: query: > cucgicwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.129.192.25#46222: query: > qwskakwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.187.81#35076: query: > fsmgtmwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.220.0.113#64024: query: > aoqokewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.189.17#53128: query: > miiqewwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.22#51019: query: > kameeawww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.6#51578: query: > pihzfawww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.50#36954: query: > iasqocwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.34#62023: query: > gaqwuewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#61231: query: > CWUGeWwww.Byw.SO IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.199.133#48801: query: > sakcwxwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.164.9.72#15641: query: > iasicywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.131#58365: query: > qgvcamwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.155.104.174#59532: query: > gcwguswww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.138.245.182#42728: query: > thamrbwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.6#1816: query: > ywoaucwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 123.129.192.25#45414: query: > ifcefjwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.62.191.11#26553: query: > qckciawww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.128.130.228#57165: query: > moqhonwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#64134: query: > xslMhdwww.BYW.So IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.235#31169: query: > cramdtwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.146#29403: query: > qgsqoswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.96.209.21#17161: query: > ogsqsewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 203.113.7.245#24644: query: > rXBGMJWWW.Byw.SO IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.173.130#10722: query: > ioewuywww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.71#25520: query: > gwyeukwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.139.113.162#40807: query: > cjnzxewww.byw.so IN A - (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.146#28009: query: > qmiuuswww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.6#54962: query: > xvfjaewww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 202.101.224.71#56620: query: > youoeewww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 59.51.78.222#11484: query: > qrtrotwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 61.130.254.235#56009: query: > wwsmagwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 211.98.70.146#23638: query: > mekkewwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.82#38538: query: > hplehpwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 220.187.246.35#4746: query: > exoejjwww.byw.so IN A -EDC (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 221.120.249.9#25551: query: > gwwqscwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 173.194.99.16#35596: query: > qgyaecwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 117.135.192.6#10703: query: > nclxscwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 74.125.16.208#64697: query: > reulzkwww.byw.so IN A -ED (192.208.187.242) > Nov 26 09:24:38 ken named[971]: client 200.11.153.71#15141: query: > iuccgqwww.byw.so IN A -ED (192.208.187.242) > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
