Because one of your DNS clients tried to look up a record supposedly served off of 69.59.189.63. A more interesting question would be, "why is this socket in a SYN_SENT state"? The following may prove useful: http://lists.sans.org/pipermail/unisog/2005-January/024112.html Chris Faehl Hosting Manager, RightNow Technologies
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of W S Sent: Monday, August 11, 2008 4:36 PM To: [email protected] Subject: ip 69.59.189.68:53 Folks, I just installed BIND 9.5.0-P2 on CentOS and I see this ip address witin 'netstat -aunt' output: tcp <MY_IP>:<SOME_HIGH_PORT>��� 69.59.189.68:53� SYN_SENT � Why my DNS box trying to contact this IP�69.59.189.68:53 ??? � Thx, -ws
