17k queries in 24h, 8k+ to the same domain

[Theneco]

Hi
I just check the queries and in the last 24h I'm getting from a mac up to 5 queries per minute to this domain:
zen-production-zas-1867015199.us-east-1.elb.amazonaws.com
dnsmasq reply zen-production-zas-1867015199.us-east-1.elb.amazonaws.com is NODATA-IPv6

Already blacklisted block ipv4 queries but pihole continues to forward it in ipv6. I have disabled ipv6 in router/mac/rpi

Don't know what to do!

[Mcat12]

Why do blacklisted domains show IPv4 as "Pi-holed" but not IPv6 in the query log?

This behavior can be fixed by setting AAAA_QUERY_ANALYSIS=no in /etc/pihole/pihole-FTL.conf (you need to create this file if it doesn't exist). If you still see blacklisted IPv6 domains show as forwarded in your query log but don't have IPv6 enabled, you may see a false positive like the image below, where the IPv4 version of the domain is blocked, but not the IPv6 version. root@pihole:~ $ cat /etc/pihole/gravity.list | grep edge.quantserve.com 192.168.1.126 edge.quantserve.com [image] I…