From one of my test sites - thanks Jean :] /usr/local/bin/Jnos/logs/27Mar21 19:07:02 Domain listener: 89.40.70.51:40527 - malformed dns request If you google the IP address or the hostname it resolves to, the results are not favourable, and probably it should be blocked ... Maiko / VE4KLM