ip 69.59.189.68:53

[Faehl, Chris]

Because one of your DNS clients tried to look up a record supposedly served off of 69.59.189.63.
A more interesting question would be, "why is this socket in a SYN_SENT state"? The following may prove useful:
http://lists.sans.org/pipermail/unisog/2005-January/024112.html
Chris Faehl
Hosting Manager, RightNow Technologies

-----Original Message-----
From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On Behalf Of W S
Sent: Monday, August 11, 2008 4:36 PM
To: bind-users at isc.org
Subject: ip 69.59.189.68:53

Folks,
I just installed BIND 9.5.0-P2 on CentOS and I see this ip address witin 'netstat -aunt' output:
tcp <MY_IP>:<SOME_HIGH_PORT>��� 69.59.189.68:53� SYN_SENT
�
Why my DNS box trying to contact this IP�69.59.189.68:53 ???
�
Thx,
-ws