Comcast Shows as Top Client

Expected Behavior:

Am I right to assume that I should only see my router IP and localhost as top clients if I have my router's DNS sever set to my RPi?

Actual Behaviour:

A Comcast address is listed in my top clients list. Does this mean that comcast is pinging my DNS server from outside of my local network?

Listed on top clients are:
— My Router Local IP
— LocalHost
— Comcast: c-xxx-xxx-xxx-xxx.hsd1.nm.comcast.net

Debug Token:

mii35s9a66

You don't have the Pi-hole accessible from the internet? I don't think I've seen this before, so I'd check with Comcast.

As far as I know no. I have it behind a firewall. I am forwarding ports for some services like SSH and OpenVPN but not to make the DNS available to the internet. Should I be concerned for any kind of security risk?

Have you secured your SSH port? If you're hosting a VPN, you should log in through that instead of forwarding SSH directly.

I can try disabling port forwarding on SSH. But if I remember right I was still seeing Comcast showing as a client before I enabled SSH

Have you asked Comcast?

Not yet. To be honest I don't have a lot of confidence they will be familiar with this particular question haha

1 Like

i have this also ... any findings?

Do the request look somewhat familiar?