<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><base href="x-msg://2741/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Nov 18, 2013, at 1:54 PM, Ashley Flavel <<a href="mailto:ashleyfl@microsoft.com">ashleyfl@microsoft.com</a>> wrote:</div><blockquote type="cite"><div lang="EN-US" link="#0563C1" vlink="#954F72" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div class="WordSection1" style="page: WordSection1; "><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">I’ve had reports that users in TWC are getting incorrect IPs back from their local resolvers. Both of the IPs below are proxy servers and sometimes redirect the user to<span class="Apple-converted-space"> </span><a href="http://dnsrsearch.com" style="color: rgb(149, 79, 114); text-decoration: underline; ">dnsrsearch.com</a>instead of<span class="Apple-converted-space"> </span><a href="http://bing.com" style="color: rgb(149, 79, 114); text-decoration: underline; ">bing.com</a>.</div></div></div></blockquote><div><br></div>Perhaps relevantly (or perhaps not):</div><div><br></div><div><div>% whois -h <a href="http://whois.markmonitor.com">whois.markmonitor.com</a> <a href="http://msedge.net">msedge.net</a></div><div>Server is too busy, try again later!</div><div><br></div><div>(connections to <a href="http://whois.markmonitor.com">http://whois.markmonitor.com</a> also time out)</div></div><div><br></div><div>Markmonitor getting DoS'd?</div><div><br></div><div>Regards,</div><div>-drc</div><div><br></div></body></html>