DNS cache records

RouterOS General
1

Hello everyone,
I noticed some (400+) recordings that looked strange to me, the ignorant.
Could someone please enlight me of what this is about?

ip dns cache all print file=ddx
Flags: S - static, N - negative 
 #   NAME       TYPE  DATA                                         TTL         
 0 S router     A     10.160.0.1                                   1d          
 1 S 1.0.160... PTR   router                                       1d          
 2   com        NS    a.gtld-servers.net                           2h36m2s     
 3   com        NS    b.gtld-servers.net                           2h36m2s     
 4   com        NS    c.gtld-servers.net                           2h36m2s     
 5   com        NS    d.gtld-servers.net                           2h36m2s     
 6   com        NS    e.gtld-servers.net                           2h36m2s     
 7   com        NS    f.gtld-servers.net                           2h36m2s     
 8   com        NS    g.gtld-servers.net                           2h36m2s     
 9   com        NS    h.gtld-servers.net                           2h36m2s     
10   com        NS    i.gtld-servers.net                           2h36m2s     
11   com        NS    j.gtld-servers.net                           2h36m2s     
12   com        NS    k.gtld-servers.net                           2h36m2s     
13   com        NS    l.gtld-servers.net                           2h36m2s     
14   com        NS    m.gtld-servers.net                           2h36m2s     
15   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:79b6:bb74      1h17m10s    
16   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7a75:7ba7      1h17m10s    
17   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7abf:71bb      1h17m10s    
18   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7ac2:81c2      1h17m10s    
19   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7ac4:ae8a      1h17m10s    
20   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7b7d:717c      1h17m10s    
21   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7b89:8ebd      1h17m10s    
22   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7b95:95a4      1h17m10s    
23   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7c85:7c72      1h17m10s    
24   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7c86:9985      1h17m10s    
25   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7c8a:84c0      1h17m10s    
26   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:7c8b:c4b2      1h17m10s    
...
325   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:9a99:adb6      1h17m10s    
326   5hz.org    AAAA  2444:2444:2444:2444:2444:ffff:9a9b:99c6      1h17m10s    
327   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:a58b:b9a2      23h47m43s   
328   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:a5bf:c787      23h47m43s   
329   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:a6b2:a27b      23h47m43s   
...
474   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:7ba4:88ba      23h47m24s   
475   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:7ba4:c1b3      23h47m24s   
476   67b.org    AAAA  2444:2444:2444:2444:2444:ffff:7bbc:9fbf      23h47m24s
2

These are names that a system on your local network requested, and that are cached on the router in case they are requested again.
The gtld-servers.net entries are the root nameservers.

3

Should I be worried about anything?

4

Add filter rules in ip firewall input chain to drop all incoming DNS packets (TCP/UDP 53) from your WAN interfaces.

These domains contains lots of A and AAAA records. Some servers continuously send DNS queries of these domains all over the internet, I don’t know the purpose…

5

When the DNS service is reachable from internet there is a serious foul-up in the firewall rules on the device.
It may be better to reset it to defaults and configure again!
(depending on the complexity of the configuration that is in the device now)

6

Thank you for your answers, gentelmen.

I think that these records had to do with visiting and watching on kissanime.ru (by now they are moved on kissanime.ru.net or .com), a site that was full of advertisements, legal or not. I kept on flashing the DNS records, just for sure.