Results 1 to 2 of 2
  1. #1
    Join Date
    Jan 2011
    Location
    Ohio
    Posts
    467

    DNS getting hammered.

    Heya,


    It seems like my DNS server is constantly getting hammered with requests.. My DNS works one minute, then doesn't another. I get tons of these logs. What can I do to stop this?

    Feb 7 18:24:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied
    Feb 7 18:24:09 soul named[3649]: client 74.125.76.81#42492: query (cache) 'ay-ka.net/MX/IN' denied
    Feb 7 18:24:09 soul named[3649]: client 209.85.228.84#62317: query (cache) 'ay-ka.net/MX/IN' denied
    Feb 7 18:24:13 soul named[3649]: client 117.32.153.149#22626: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:24:20 soul named[3649]: client 117.32.153.149#22626: query (cache) '365days.homeip.net/A/IN' denied
    Feb 7 18:24:22 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:24:28 soul named[3649]: client 222.91.160.68#4864: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:24:28 soul named[3649]: client 222.91.160.68#4958: query (cache) '365days.homeip.net/A/IN' denied
    Feb 7 18:24:45 soul named[3649]: client 202.117.54.202#10000: query (cache) 'xjtubotnet.3322.org/A/IN' denied
    Feb 7 18:24:49 soul named[3649]: client 202.117.54.202#10000: query (cache) 'proxim.ircgalaxy.pl/A/IN' denied
    Feb 7 18:24:53 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:24:54 soul named[3649]: client 202.117.54.202#10000: query (cache) 'proxima.ircgalaxy.pl/A/IN' denied
    Feb 7 18:25:01 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bncontrol.3322.org/A/IN' denied
    Feb 7 18:25:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied
    Feb 7 18:25:13 soul named[3649]: client 117.32.153.149#22626: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:26:26 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:26:45 soul named[3649]: client 202.117.54.202#10000: query (cache) 'xjtubotnet.3322.org/A/IN' denied
    Feb 7 18:26:46 soul named[3649]: client 202.117.54.202#10000: query (cache) 'ircd.zief.pl/A/IN' denied
    Feb 7 18:26:48 soul named[3649]: client 202.117.54.202#10000: query (cache) 'phonelogin.dd.blueline.be/A/IN' denied
    Feb 7 18:26:52 soul named[3649]: client 202.117.54.202#10000: query (cache) 'phonewire.dd.blueline.be/A/IN' denied
    Feb 7 18:26:56 soul named[3649]: client 202.117.54.202#10000: query (cache) 'pizzainthemouth.weedns.com/A/IN' denied
    Feb 7 18:26:57 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:27:00 soul named[3649]: client 202.117.54.202#10000: query (cache) 'vns.weedns.com/A/IN' denied
    Feb 7 18:27:01 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bncontrol.3322.org/A/IN' denied
    Feb 7 18:27:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied
    Feb 7 18:27:09 soul named[3649]: client 202.117.54.202#10000: query (cache) 'alt2.aspmx.l.google.com/A/IN' denied
    Feb 7 18:27:13 soul named[3649]: client 117.32.153.149#22626: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:27:20 soul named[3649]: client 117.32.153.149#22626: query (cache) '365days.homeip.net/A/IN' denied
    Feb 7 18:27:23 soul named[3649]: client 202.117.54.202#10000: query (cache) 'ufospace.etowns.net/A/IN' denied
    Feb 7 18:27:28 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:27:34 soul named[3649]: client 202.117.54.202#10000: query (cache) 'cx10man.weedns.com/A/IN' denied
    Feb 7 18:27:38 soul named[3649]: client 202.117.54.202#10000: query (cache) 'gynoman.weedns.com/A/IN' denied
    Feb 7 18:27:42 soul named[3649]: client 202.117.54.202#10000: query (cache) 'fx010413.whyI.org/A/IN' denied
    Feb 7 18:27:45 soul named[3649]: client 202.117.54.202#10000: query (cache) 'xjtubotnet.3322.org/A/IN' denied
    Feb 7 18:27:49 soul named[3649]: client 202.117.54.202#10000: query (cache) 'proxim.ircgalaxy.pl/A/IN' denied
    Feb 7 18:27:54 soul named[3649]: client 202.117.54.202#10000: query (cache) 'proxima.ircgalaxy.pl/A/IN' denied
    Feb 7 18:27:55 soul named[3649]: client 202.117.54.202#10000: query (cache) 'opmanplace.weedns.com/A/IN' denied
    Feb 7 18:27:59 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:28:01 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bncontrol.3322.org/A/IN' denied
    Feb 7 18:28:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied
    Feb 7 18:28:11 soul named[3649]: client 202.117.54.202#10000: query (cache) 'hikemanplace.weedns.com/A/IN' denied
    Feb 7 18:28:13 soul named[3649]: client 117.32.153.149#22626: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:28:15 soul named[3649]: client 202.117.54.202#10000: query (cache) 'z1.weedns.com/A/IN' denied
    Feb 7 18:28:20 soul named[3649]: client 117.32.153.149#22626: query (cache) '365days.homeip.net/A/IN' denied
    Feb 7 18:28:23 soul named[3649]: client 202.117.54.202#10000: query (cache) 'ufospace.etowns.net/A/IN' denied
    Feb 7 18:28:24 soul named[3649]: client 202.117.54.202#10000: query (cache) 'greenman.weedns.com/A/IN' denied
    Feb 7 18:28:30 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:28:32 soul named[3649]: client 202.117.54.202#10000: query (cache) 'g.0x20.biz/A/IN' denied
    Feb 7 18:28:36 soul named[3649]: client 202.117.54.202#10000: query (cache) 'h1.weedns.com/A/IN' denied
    Feb 7 18:28:40 soul named[3649]: client 202.117.54.202#10000: query (cache) 'van.dd.blueline.be/A/IN' denied
    Feb 7 18:28:45 soul named[3649]: client 202.117.54.202#10000: query (cache) 'xjtubotnet.3322.org/A/IN' denied
    Feb 7 18:29:01 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:29:01 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bncontrol.3322.org/A/IN' denied
    Feb 7 18:29:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied
    Feb 7 18:29:13 soul named[3649]: client 117.32.153.149#22626: query (cache) '360www.homeip.net/A/IN' denied
    Feb 7 18:29:20 soul named[3649]: client 117.32.153.149#22626: query (cache) '365days.homeip.net/A/IN' denied
    Feb 7 18:29:23 soul named[3649]: client 202.117.54.202#10000: query (cache) 'ufospace.etowns.net/A/IN' denied
    Feb 7 18:29:32 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:29:45 soul named[3649]: client 202.117.54.202#10000: query (cache) 'xjtubotnet.3322.org/A/IN' denied
    Feb 7 18:29:46 soul named[3649]: client 202.117.54.202#10000: query (cache) 'ircd.zief.pl/A/IN' denied
    Feb 7 18:30:01 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bncontrol.3322.org/A/IN' denied
    Feb 7 18:30:03 soul named[3649]: client 117.32.153.149#22626: query (cache) 'cass.faqserv.com/A/IN' denied
    Feb 7 18:30:03 soul named[3649]: client 194.29.214.249#33489: query (cache) 'enkare.com/AAAA/IN' denied
    Feb 7 18:30:03 soul named[3649]: client 194.29.214.249#33493: query (cache) 'enkare.com/AAAA/IN' denied
    Feb 7 18:30:05 soul named[3649]: client 202.117.54.202#10000: query (cache) 'bnget.3322.org/A/IN' denied

    How can I stop it?

  2. #2
    Since most of the queries are just coming from a couple ips, you could just ban these three ips in iptables:

    117.32.153.149
    202.117.54.202
    194.29.214.249
    Phoenix Dedicated Servers -- IOFLOOD.com
    Email: sales [at] ioflood.com
    Skype: iofloodsales
    Backup Storage VPS -- 1TBVPS.com

Similar Threads

  1. Server hammered dailly
    By Ionutz in forum Hosting Security and Technology
    Replies: 54
    Last Post: 08-04-2010, 10:26 PM
  2. Utube.com hammered
    By Aussie Bob in forum Web Hosting Lounge
    Replies: 63
    Last Post: 06-08-2008, 01:02 AM
  3. Server being hammered, should i go dedicated?
    By aMadeMann in forum Dedicated Server
    Replies: 27
    Last Post: 08-10-2007, 01:16 PM
  4. getting hammered
    By clocker1996 in forum Hosting Security and Technology
    Replies: 20
    Last Post: 12-12-2002, 11:54 AM
  5. unitedcolo getting hammered?
    By heath in forum Dedicated Server
    Replies: 54
    Last Post: 10-27-2002, 07:24 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •