Pi-hole Reverse DNS queries every hour

jfb · December 2, 2020, 6:14pm

They are not useless - they are an accurate representation of the traffic received and process by Pi-hole

jfb · December 2, 2020, 6:16pm

Typically when the DNS server cannot provide an answer, the queries continue. If these are queries for internal LAN clients, then you can map these client names to IP's in the Local DNS records tab of the web GUI or in /etc/hosts on the Pi. With this information, Pi-hole can answer these requests.

traeu · December 2, 2020, 6:31pm

I understand what you mean, but for me, its not useful and accurate anymore, when every day 5616 cached answers are getting added because the pihole itself makes 5616 PTR requests.
If some device in my network would make all these requests, it would be totally ok to call the statistics accurate.

My question, that I cannot answer myself, is: Why is my Pihole making these PTR requests regularly every hour after I updated it?
Is there a reason why the new version of Pihole needs to make 234 PTR-requests every hour and all get answered with NXDOMAIN?

I don't know why I would want the Pihole to be able to answer these requests. I don't know why they appeared after my last update.
The PTR-requests are all in the form of "XXX.XXX.168.192.in-addr.arpa" so there is no real client-names that would make sense to add. And I still can't explain this flood of these type of requests after the update...

jfb · December 2, 2020, 7:27pm

Pi-hole is looking for the name of the client at that IP, which is listed in reverse. 192.168.xxx.xxx is the IP of the client.

Are the queries being answered by Pi-hole or forwarded to your upstream resolver?

traeu · December 2, 2020, 7:42pm

But why is Pihole doing this 234 times every hour after I updated to the latest version?

As I said, all these PTR queries are answered from the cache.
But my primary question is why these queries appear every hour.

jfb · December 2, 2020, 8:03pm

Pi-hole has always polled for the names of recent IP clients, at the top of each hour. Why it's more frequent now is what we need to look at.

Please provide some complete examples of PTRs of this type, with the query, forward and replies included.

These are found in /var/log/pihole.log

They may look like these:

Dec  2 03:35:07 dnsmasq[12375]: query[PTR] 130.0.168.192.in-addr.arpa from 192.168.0.130
Dec  2 03:35:07 dnsmasq[12375]: /etc/hosts 192.168.0.130 is MacBook-Air

Dec  2 01:00:00 dnsmasq[12375]: query[PTR] 144.0.168.192.in-addr.arpa from 127.0.0.1
Dec  2 01:00:00 dnsmasq[12375]: config 192.168.0.144 is NXDOMAIN

DL6ER · December 2, 2020, 8:48pm

Please hover your mouse over localhost and check in the tooltip if Pi-hole knows a name for ::1. it likely doesn't. However, we have a rule to source host names from the same device when there is a hostnames available for any IP address.

github.com/pi-hole/FTL

Always try to resolve hostnames at least once

pi-hole:release/v5.3.2 ← pi-hole:fix/resolve_old_clients_once

opened 08:26PM - 02 Dec 20 UTC

DL6ER

+15 -4

**By submitting this pull request, I confirm the following:** - [X] I have re…ad and understood the [contributors guide](https://github.com/pi-hole/pi-hole/blob/master/CONTRIBUTING.md). - [X] I have checked that [another pull request](https://github.com/pi-hole/FTL/pulls) for this purpose does not exist. - [X] I have considered, and confirmed that this submission will be valuable to others. - [X] I accept that this submission may not be used, and the pull request closed at the will of the maintainer. - [X] I give this submission freely, and claim no ownership to its content. **How familiar are you with the codebase?:** ## 10 --- Always try to resolve hostnames when seeing a client/upstream server for the first time. Also when it wasn't recently active (may happen on re-import from database history).

will ensure we try getting host names also for inactive clients at least once. This should resolve the situation of mixed IPs and hostnames if there are names known for the devices.

traeu · December 2, 2020, 8:52pm

yes I totally understand that. But I don't understand why there are so many queries, because I don't have over 200 devices in my home-network. (only 20 devices according to the dashboard)

Here is the output of pihole.log from the last hour (it happens with the same amount every hour):

Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 150.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.150 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 150.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.150 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 127.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.127 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 127.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.127 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 138.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.138 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 138.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.138 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 149.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.149 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 149.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.149 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 190.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.190 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 190.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.190 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 130.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.130 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 130.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.130 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 156.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.156 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 156.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.156 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 158.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.158 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 158.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.158 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 141.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.141 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 141.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.141 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 163.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.163 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 163.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.163 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 147.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.147 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 147.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.147 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 2.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.2 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 2.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.2 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.98.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.98.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.98.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.98.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 253.34.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.34.253 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 253.34.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.34.253 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 56.65.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.65.56 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 56.65.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.65.56 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 105.150.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.150.105 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 105.150.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.150.105 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 212.136.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.136.212 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 212.136.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.136.212 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 239.241.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.241.239 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 239.241.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.241.239 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 42.235.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.235.42 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 42.235.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.235.42 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 143.207.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.207.143 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 143.207.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.207.143 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 240.80.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.80.240 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 240.80.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.80.240 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 147.167.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.167.147 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 147.167.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.167.147 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 171.46.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.46.171 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 171.46.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.46.171 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 116.154.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.154.116 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 116.154.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.154.116 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 181.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.181 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 181.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.181 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 10.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: /etc/pihole/custom.list 192.168.2.10 is behaelter.lan
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 87.242.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.242.87 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 87.242.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.242.87 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 184.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.184 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 184.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.184 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 218.154.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.154.218 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 218.154.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.154.218 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 22.81.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.81.22 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 22.81.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.81.22 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 221.31.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.31.221 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 221.31.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.31.221 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 5.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.5 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 5.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.5 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 123.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.123 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 123.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.123 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.159.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.159.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.159.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.159.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.143.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.143.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 229.143.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.143.229 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 75.92.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.92.75 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 75.92.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.92.75 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 153.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.153 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 153.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.153 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 233.1.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.1.233 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 233.1.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.1.233 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 55.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.55 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 55.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 192.168.2.55 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 68.15.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.15.68 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 68.15.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.15.68 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 245.81.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.81.245 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 245.81.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.81.245 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 236.182.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.182.236 is NXDOMAIN
Dec  2 21:00:00 dnsmasq[19466]: query[PTR] 236.182.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:00 dnsmasq[19466]: config 172.31.182.236 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 160.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.160 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 160.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.160 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 197.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.197 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 197.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.197 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 11.99.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.99.11 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 11.99.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.99.11 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 107.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.107 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 107.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.107 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 108.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.108 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 108.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.108 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 109.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.109 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 109.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.109 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 7.f.e.a.0.0.e.f.f.f.7.f.e.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config fe80::2ae:f7ff:fe00:aef7 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 7.f.e.a.0.0.e.f.f.f.7.f.e.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config fe80::2ae:f7ff:fe00:aef7 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 172.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.172 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 172.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.172 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 104.32.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.32.104 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 104.32.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.32.104 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 99.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.99 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 99.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.99 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 252.248.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.248.252 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 252.248.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.248.252 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 120.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.120 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 120.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.120 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] b.f.e.a.0.0.e.f.f.f.b.f.e.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config fe80::2ae:fbff:fe00:aefb is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] b.f.e.a.0.0.e.f.f.f.b.f.e.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config fe80::2ae:fbff:fe00:aefb is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 161.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.161 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 161.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.161 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 100.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.100 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 100.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.100 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 101.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.101 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 101.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.101 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 102.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.102 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 102.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.102 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 103.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.103 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 103.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.103 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 106.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.106 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 106.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.106 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 105.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.105 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 105.200.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.200.105 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 157.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.157 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 157.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.157 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 11.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.11 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 11.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.11 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 111.3.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.3.111 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 111.3.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.3.111 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 195.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.195 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 195.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.195 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 13.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.13 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 13.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.13 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 159.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.159 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 159.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.159 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 199.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.199 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 199.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.199 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 144.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.144 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 144.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.144 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 1.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: /etc/pihole/custom.list 192.168.2.1 is fritz.box
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 3.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.3 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 3.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.3 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 169.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.169 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 169.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.169 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 110.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: /etc/pihole/custom.list 192.168.2.110 is upload.suntrol-portal.com
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 148.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.148 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 148.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.148 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 174.59.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.59.174 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 174.59.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.59.174 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 168.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.168 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 168.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.168 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 63.201.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.201.63 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 63.201.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.201.63 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 151.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.151 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 151.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.151 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 171.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.171 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 171.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.171 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 4.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.4 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 4.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.4 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 208.239.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.239.208 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 208.239.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.239.208 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 170.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.170 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 170.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.170 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 137.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.137 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 137.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.137 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 173.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.173 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 173.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.173 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 15.54.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.54.15 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 15.54.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.54.15 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 101.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.101 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 101.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.101 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 121.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.121 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 121.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.121 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 139.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.139 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 139.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.139 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 175.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.175 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 175.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.175 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 174.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.174 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 174.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.174 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 140.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.140 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 140.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.140 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 50.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.50 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 50.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.50 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 143.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.143 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 143.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.143 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 124.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.124 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 124.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.124 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 142.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.142 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 142.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.142 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 162.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.162 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 162.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.162 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 200.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.200 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 200.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.200 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 202.194.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.194.202 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 202.194.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.194.202 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 165.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.165 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 165.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.165 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 126.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.126 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 126.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.126 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 164.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.164 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 164.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.164 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 113.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: /etc/pihole/custom.list 192.168.2.113 is guacamole.lan
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 131.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.131 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 131.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.131 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 240.252.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.252.240 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 240.252.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.252.240 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 112.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.112 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 112.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.112 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 187.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.187 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 187.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.187 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 133.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.133 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 133.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.133 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 150.178.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.178.150 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 150.178.31.172.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 172.31.178.150 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 189.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.189 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 189.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.189 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 132.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.132 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 132.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.132 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 114.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.114 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 114.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.114 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 152.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.152 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 152.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.152 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 188.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.188 is NXDOMAIN
Dec  2 21:00:10 dnsmasq[19466]: query[PTR] 188.2.168.192.in-addr.arpa from 127.0.0.1
Dec  2 21:00:10 dnsmasq[19466]: config 192.168.2.188 is NXDOMAIN

Greelan · December 2, 2020, 9:28pm

If you mean hover over the name in the Top Clients list, unfortunately I cannot anymore, as localhost and ::1 have dropped out as top clients (given things are behaving now as they used to ). I do recall though that previously when running FTL 5.3, there were two entries for localhost - one was for IPv4 (127.0.0.1) and the other for IPv6 (::1). After switching to the dev FTL fix, IPv4 remained listed as localhost, but IPv6 just appeared as ::1.

In the 'Queries answered by' graph, though, my upstream resolver (Unbound on the same box as Pi-hole) does show localhost for both IPv4 and IPv6:

Screen Shot 2020-12-03 at 8.23.40 am

Greelan · December 2, 2020, 9:38pm

I see that hotfix v5.3.2 has now been released. I assume this means I can switch FTL back to master?

DL6ER · December 2, 2020, 9:42pm

I mean on the network table page.

Yes. Everyone in here should update their Pi-holes. Those who have tried my fix have to run

pihole checkout master

to get back on track.

Greelan · December 2, 2020, 9:50pm

Done. I notice in the logs that localhost immediately made a bunch of PTR queries after the update (no doubt to reflect your latest fix to resolve names at least once). All now looks good. I will monitor the behaviour over the next few hours.

Once again, thanks for the quick turnaround on this.

jfb · December 2, 2020, 11:39pm

Do any of the local IP's being PTR'd exist on your network now? Did they recently? Do you have a short lease time on a DHCP server?

traeu · December 3, 2020, 12:16am

Most of my devices are getting always the same IP over DHCP. My lease time is also high, 10 days.
On the network-page, I see 19 devices in the last 24h.
Some of the PTR'd IP's belong to existing devices (but still answered NXDOMAIN) but most PTR'd IPs are not in use. (But I can't tell 100% if they where used somewhere in the past by my DHCP server).

BUT I think my problem is solved, even if the latest versions officially only fix problems with IPV6:
I installed the latest updates.
And as you can see on my screenshot, on 11pm I made the update, thats why there is one last but smaller green (green=localhost) spike (for contacting update-servers, no PTR-requests).
Since then, no more PTR-requests resulting in hourly spikes appeared! (at least not at midnight and 1am)

I did not change any settings, just installed the latest updates.
I will continue to watch the admin-panel for the next days, but I guess the chance is high that my problem was also solved with the latest updates!
Thank you for your help and patience @jfb and big up to pihole!!

DL6ER · December 3, 2020, 7:56pm

That's not exactly true

We've also improved on the selection criterion which host names from the database to query at all (better skipping of the unused ones).

traeu · December 4, 2020, 12:16am

Sorry, I guess I read that wrong...
Anyway, after 24h, I can definitely confirm that there is no more strange behavior about the PTR-requests, my stats are looking exactly like they always did and no more hourly spikes appear.
Thanks again for your quick reaction and fix!!

system · December 25, 2020, 12:16am

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.