How to parse query log?

[joker349]

Hi,
My Adguard home instance is public and I get a lot of spam. I see a pattern with these spam and I think I can temporarily block some IP.

For this I need to parse query log but by looking I can't make any sense of it.

Need help with parsing. Thanks.