hammering my server with bad queries

[Thomas Duterme]

Hi everyone,

Ok, so the ex-dns admin used to call our primary nameserver ns1 and ns2.madeforchina.com.  

I've changed that a while ago, but I look into one of my advertised servers and see someone is hammering my nameserver:

29-Mar-2001 19:05:33.566 XX /203.120.90.43/ns1.madeforchina.com/A/IN
29-Mar-2001 19:05:33.567 XX /203.120.90.43/ns2.madeforchina.com/A/IN
29-Mar-2001 19:05:34.076 XX /203.120.90.43/ns1.madeforchina.com/A/IN
29-Mar-2001 19:05:34.077 XX /203.120.90.43/ns2.madeforchina.com/A/IN 


I found out that Shanghai Telecom's dialup DNS server is hammering us: 
29-Mar-2001 19:15:14.713 XX /202.96.199.132/ns1.madeforchina.com/A/IN
29-Mar-2001 19:15:14.714 XX /202.96.199.132/ns2.madeforchina.com/A/IN 

202.96.199.132=nns.sta.net.cn => shanghai telecom dns server

The company I work for owns about 70-80 domains and I'm currently going through them to search for their nameservers...aside from this tedious method, could there be another smarter way to find the answer?  Currently we are only really using three domain names actively : 51mymail.com, madeforchina.com and 51go.com


I know, I could create records for ns1 and ns2, but this is really bothering me...I wanna find out why they are pounding my nameserver.

Any suggestions?

TIA,
-Thomas