[dns-operations] Question about logger querys with registers points to 127.0.0.1

Thu Oct 15 13:43:14 UTC 2015

Yet another misconfigured load balancer.

Lenovo fix your nameservers.  The listed nameservers either return
NXDOMAIN, SERVFAIL or garbage for their names.  See below for full
trace.

e.g. 

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-hk01.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12190
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-hk01.gtm.lenovo.com.                IN      A

;; ANSWER SECTION:
f5-hk01.gtm.lenovo.com. 0       IN      A       127.0.0.1

;; AUTHORITY SECTION:
lenovo.com.             0       IN      NS      f5-hk01.gtm.lenovo.com.

;; Query time: 191 msec
;; SERVER: 124.127.169.100#53(124.127.169.100)
;; WHEN: Fri Oct 16 00:31:35 EST 2015
;; MSG SIZE  rcvd: 81

Mark

In message <20151014204304.GA25554 at mycre.ws>, Robert Edmonds writes:
> "f5-hk01.gtm.lenovo.com" is one of the nameservers for the
> gtm.lenovo.com zone.  "-" in the named query log indicates a
> non-recursive query (RD bit cleared), and "E" indicates a query that
> uses EDNS.  That sounds like the kind of query that would be sent by a
> (modern) recursive DNS server looking up a name under the gtm.lenovo.com
> zone rather than a query sent by a tool like nslookup, but it's
> interesting that such a query was sent to your nameserver (and by
> something running on the machine itself), rather than being sent to the
> Lenovo nameservers.
> 
> It sounds like you have something that initiates DNS queries that is not
> the nameserver itself running on the same machine as the nameserver.
> You might try checking to see if there are any processes that might be
> the culprit using tools like ps, netstat, lsof, etc., or possibly you
> might have some exotic firewall rules installed that cause your
> nameserver to receive DNS queries from source address 127.0.0.1.
> 
> Eduardo Romero Urra wrote:
> > Hi, 
> > 
> > I've a logging the named querys on one of public resolver server (ISP) , bu
> t after researching we detect some querys that are logged as generated seems 
> itlsef as '127.0.0.1' address, in some of cases the query points to a hostnam
> e that resolves also as '127.0.0.1', for example: 
> > 
> > 
> > 28-Sep-2015 09:09:21.528 client 127.0.0.1#28082: query: f5-hk01.gtm.lenovo.
> com IN A -E 
> > 
> > N on-authoritative answer: 
> > Name: f5-hk01.gtm.lenovo.com 
> > Address: 127.0.0.1 
> > 
> > Not always the querys points to resolv host with result '127.0.0.1' , but t
> he strange is the origen marked as localhost came from, and always logs using
>  "EDNS mechanism" ( -E ), previously came from a regular query, for example 
> > 
> > 
> > 05-Sep-2015 01:32:20.756 client some-ip-public-client.(1.2.3.4)#53347: quer
> y: news.lawsorsing.com IN A + 
> > 05-Sep-2015 01:32:20.766 client some-ip-public-client.(1.2.3.4)#34024: quer
> y: news.lawsorsing.com IN A + 
> > 
> > and few seconds later, the "local query" are generated: 
> > 
> > 05-Sep-2015 01:32:21.160 client 127.0.0.1#25468: query: news.lawsorsing.com
>  IN A -E 
> > 05-Sep-2015 01:32:21.161 client 127.0.0.1#2345: query: news.lawsorsing.com 
> IN A -E 
> > 
> > Someone could explain this please, because the last lines "alone" could mad
> e a false positive that the server maybe compromise because are generating qu
> ery itself. I've suppose that EDNS mechanism could be the cause. 
> > 
> > The situation is very common with '*.gtm.lenovo.com' GTM sites . 
> > 
> > 
> > Regards 
> > Eduardo. 
> 
> -- 
> Robert Edmonds
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28716
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 179 msec
;; SERVER: 124.127.169.100#53(124.127.169.100)
;; WHEN: Fri Oct 16 00:34:08 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @114.247.140.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57589
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 399 msec
;; SERVER: 114.247.140.100#53(114.247.140.100)
;; WHEN: Fri Oct 16 00:34:08 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @124.127.169.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23912
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 197 msec
;; SERVER: 124.127.169.101#53(124.127.169.101)
;; WHEN: Fri Oct 16 00:34:08 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @114.247.140.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61554
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 384 msec
;; SERVER: 114.247.140.101#53(114.247.140.101)
;; WHEN: Fri Oct 16 00:34:09 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @103.30.234.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16411
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 127 msec
;; SERVER: 103.30.234.160#53(103.30.234.160)
;; WHEN: Fri Oct 16 00:34:09 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @103.30.234.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55657
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; Query time: 125 msec
;; SERVER: 103.30.234.130#53(103.30.234.130)
;; WHEN: Fri Oct 16 00:34:09 EST 2015
;; MSG SIZE  rcvd: 51

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @103.30.232.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5220
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 312 msec
;; SERVER: 103.30.232.120#53(103.30.232.120)
;; WHEN: Fri Oct 16 00:34:09 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us01.gtm.lenovo.com. @103.30.232.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49128
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 254 msec
;; SERVER: 103.30.232.121#53(103.30.232.121)
;; WHEN: Fri Oct 16 00:34:09 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19479
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 186 msec
;; SERVER: 124.127.169.100#53(124.127.169.100)
;; WHEN: Fri Oct 16 00:34:10 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @114.247.140.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14593
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 284 msec
;; SERVER: 114.247.140.100#53(114.247.140.100)
;; WHEN: Fri Oct 16 00:34:10 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @124.127.169.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17470
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 189 msec
;; SERVER: 124.127.169.101#53(124.127.169.101)
;; WHEN: Fri Oct 16 00:34:10 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @114.247.140.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11553
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 435 msec
;; SERVER: 114.247.140.101#53(114.247.140.101)
;; WHEN: Fri Oct 16 00:34:11 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @103.30.234.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53994
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 125 msec
;; SERVER: 103.30.234.160#53(103.30.234.160)
;; WHEN: Fri Oct 16 00:34:11 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @103.30.234.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20860
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; Query time: 125 msec
;; SERVER: 103.30.234.130#53(103.30.234.130)
;; WHEN: Fri Oct 16 00:34:11 EST 2015
;; MSG SIZE  rcvd: 51

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @103.30.232.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14043
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 255 msec
;; SERVER: 103.30.232.120#53(103.30.232.120)
;; WHEN: Fri Oct 16 00:34:11 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-us02.gtm.lenovo.com. @103.30.232.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47168
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-us02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 254 msec
;; SERVER: 103.30.232.121#53(103.30.232.121)
;; WHEN: Fri Oct 16 00:34:11 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2132
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 182 msec
;; SERVER: 124.127.169.100#53(124.127.169.100)
;; WHEN: Fri Oct 16 00:34:12 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @114.247.140.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45349
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 392 msec
;; SERVER: 114.247.140.100#53(114.247.140.100)
;; WHEN: Fri Oct 16 00:34:12 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @124.127.169.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43082
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 392 msec
;; SERVER: 124.127.169.101#53(124.127.169.101)
;; WHEN: Fri Oct 16 00:34:12 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @114.247.140.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57066
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 393 msec
;; SERVER: 114.247.140.101#53(114.247.140.101)
;; WHEN: Fri Oct 16 00:34:13 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @103.30.234.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27682
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 124 msec
;; SERVER: 103.30.234.160#53(103.30.234.160)
;; WHEN: Fri Oct 16 00:34:13 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @103.30.234.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56348
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; Query time: 123 msec
;; SERVER: 103.30.234.130#53(103.30.234.130)
;; WHEN: Fri Oct 16 00:34:13 EST 2015
;; MSG SIZE  rcvd: 51

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @103.30.232.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34331
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 256 msec
;; SERVER: 103.30.232.120#53(103.30.232.120)
;; WHEN: Fri Oct 16 00:34:13 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj02.gtm.lenovo.com. @103.30.232.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61510
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj02.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 454 msec
;; SERVER: 103.30.232.121#53(103.30.232.121)
;; WHEN: Fri Oct 16 00:34:14 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42495
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 190 msec
;; SERVER: 124.127.169.100#53(124.127.169.100)
;; WHEN: Fri Oct 16 00:34:14 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @114.247.140.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52704
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 724 10800 3600 604800 60

;; Query time: 390 msec
;; SERVER: 114.247.140.100#53(114.247.140.100)
;; WHEN: Fri Oct 16 00:34:15 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @124.127.169.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50312
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 385 msec
;; SERVER: 124.127.169.101#53(124.127.169.101)
;; WHEN: Fri Oct 16 00:34:15 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @114.247.140.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28824
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 270 msec
;; SERVER: 114.247.140.101#53(114.247.140.101)
;; WHEN: Fri Oct 16 00:34:15 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @103.30.234.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58763
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 714 10800 3600 604800 60

;; Query time: 127 msec
;; SERVER: 103.30.234.160#53(103.30.234.160)
;; WHEN: Fri Oct 16 00:34:15 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @103.30.234.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47098
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; Query time: 131 msec
;; SERVER: 103.30.234.130#53(103.30.234.130)
;; WHEN: Fri Oct 16 00:34:16 EST 2015
;; MSG SIZE  rcvd: 51

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @103.30.232.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60141
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 253 msec
;; SERVER: 103.30.232.120#53(103.30.232.120)
;; WHEN: Fri Oct 16 00:34:16 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-bj01.gtm.lenovo.com. @103.30.232.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30500
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-bj01.gtm.lenovo.com.		IN	A

;; AUTHORITY SECTION:
lenovo.com.		60	IN	SOA	f5-hk01.gtm.lenovo.com. hostmaster.f5-hk01.gtm.lenovo.com. 710 10800 3600 604800 60

;; Query time: 256 msec
;; SERVER: 103.30.232.121#53(103.30.232.121)
;; WHEN: Fri Oct 16 00:34:16 EST 2015
;; MSG SIZE  rcvd: 106

; <<>> DiG 9.11.0pre-alpha <<>> +norec f5-hk01.gtm.lenovo.com. @124.127.169.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25396
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;f5-hk01.gtm.lenovo.com.		IN	A

;; ANSWER SECTION:
f5-hk01.gtm.lenovo.com.	0	IN	A	127.0.0.1