Same here, at the first Time the was external addresses as source, after a while comes internal addresses too - but one of the address was a Windows Server, the other one was an OS X Client. I have no inbound DNS allowed, DNS relay only on internal interfaces. Configure Firewall that only DNS from my internal DNS Server can reach Google DNS Servers, no others. On my internal DNS Server create Zone for anmorencai.com and Geoblock China. After Reset the Counter yesterday, they give no warnings again. I update the Virusprotection on every Server and scan it, nothings found. Google Search found nothings about this URLs, only Sophos Community informations. Is it an false/positive?
↧