Log a full request and check out the host header. That will tell you what domain they are hitting and you can check their DNS. They will probably be pointing to

Log a full request and check out the host header. That will tell you what domain they are hitting and you can check their DNS. They will probably be pointing to your ip.