lame server resolving - repeats 280 times

[Mark Andrews]

> These "lame server" query logs indicate that these queries are coming 
> from:
> 
> 	200.72.1.253
> 	200.72.1.254
> 	211.134.181.104
> 	211.134.181.105
> 	212.100.224.247
> 	212.187.158.3
> 	216.49.80.74
> 	4.2.49.2
> 	4.2.49.4
> 	66.199.248.202
> 	66.199.248.203

	They are the addresses of the lame servers. 
 
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1  above message repeats 85 times
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'vscan.mocaasap.com' (in 'mocaasap.com'?): 216.49.80.74#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> > 66.199.248.202#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:38 ns1  above message repeats 280 times
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> > 66.199.248.203#53
> > Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> > 200.72.1.254#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.104#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> > 'pow.com'?): 212.187.158.3#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.105#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> > 200.72.1.253#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> > 'pow.com'?): 212.100.224.247#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1  above message repeats 3 times
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.4#53
> > Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> > 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> > 4.2.49.2#53
> >
> >
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org