OK, found the cause. Somebody broke it by manually changing the 3.3.0
update version in DNS to point at 1061118 which is a 3.4.0 version
(and not necessarily compatible with 3.3.0!). This is seriously bad.
I won't point fingers, but here's the last log for the zone at that time:
wtogami pts/5 cpe-76-93-222-12 Thu Jan 20 04:22 - 04:40
(00:18)
wtogami sshd cpe-76-93-222-12 Thu Jan 20 04:22 - 04:40
(00:18)
wtogami pts/8 cpe-76-93-222-12 Thu Jan 20 04:08 - 04:40
(00:32)
wtogami sshd cpe-76-93-222-12 Thu Jan 20 04:08 - 04:11
(00:03)
I did give Warren permission to try his best to poke things with sticks
and try not to break things. We are working hard to fix things that
aren't well known/documented.
In short, I consider this an expected ramification as we know rules is
problematic and emergency rules more so.
Expect wiki updates from me.
Regards,
KAM