Here's a new pattern from our IDS. It could be a misconfigured client but the timing, queries, and fact that the IP is blackholed at the server suggest otherwise. Anyone else seen this? -- Roger Marquis Roble Systems Consulting http://www.roble.com/ >Apr 16 18:49:53 PST named[27398]: unapproved recursive query from >[216.61.140.211].1233 for algebraproject-si.com >Apr 16 19:06:57 PST named[27398]: unapproved recursive query from >[216.61.140.211].1240 for alittlegrayhare.net >Apr 16 20:04:05 PST named[27398]: unapproved recursive query from >[216.61.140.211].1267 for allothergardeningexpo.com >Apr 16 20:09:51 PST named[27398]: unapproved recursive query from >[216.61.140.211].1270 for allresort.com >Apr 16 20:47:47 PST named[27398]: unapproved recursive query from >[216.61.140.211].1288 for alphasmartlearning.com >Apr 16 20:58:18 PST named[27398]: unapproved recursive query from >[216.61.140.211].1293 for alsta.com >Apr 16 21:08:04 PST named[27398]: unapproved recursive query from >[216.61.140.211].1296 for altequipment.com >Apr 18 07:02:40 PST named[27398]: unapproved recursive query from >[216.61.140.211].1535 for bls-marc.com >Apr 18 08:22:13 PST named[27398]: unapproved recursive query from >[216.61.140.211].1564 for bobfinlaysellsvail.com >Apr 18 08:33:07 PST named[27398]: unapproved recursive query from >[216.61.140.211].1568 for bocagrandfurnishings.com >Apr 18 09:46:28 PST named[27398]: unapproved recursive query from >[216.61.140.211].1043 for bonfietti.net >Apr 18 10:45:03 PST named[27398]: unapproved recursive query from >[216.61.140.211].1064 for borneopost.net >Apr 18 14:54:29 PST named[27398]: unapproved recursive query from >[216.61.140.211].1147 for brlaser.com >Apr 18 16:11:10 PST named[27398]: unapproved recursive query from >[216.61.140.211].1169 for brucegunning.com >Apr 18 17:19:08 PST named[27398]: unapproved recursive query from >[216.61.140.211].1194 for budmax.com >Apr 18 22:14:58 PST named[27398]: unapproved recursive query from >[216.61.140.211].1053 for cabinsatnotch.com >Apr 22 02:28:25 PST named[7130]: unapproved recursive query from >[216.61.140.211].1846 for espaces.com >Apr 22 08:10:19 PST named[7130]: unapproved recursive query from >[216.61.140.211].1954 for expobusiness.com - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
