Weird permitted domain -- moscow-integration.dcc2.svc.ca2.internal.zone

[jfb]

Blocking this domain has no effect, since the domain does not exist on the internet. With or without blocking, the domain won't be resolved to an IP.

You have several options to show individual IP's on your Pi-hole, which would assist in determining the source of the queries.

Why do I only see my router's IP address instead of individual devices in the Top Clients section and Query Log?

A nice feature of Pi-hole is that you can see which network devices are sending out the most DNS queries. For every device that is using Pi-hole as their DNS server, you can also see which DNS queries each one has made. [image] But depending on a few things, you may only see a single host in your Top Clients section, which is not as useful. [image] This isn't detrimental to the performance of your Pi-hole; it just provides you with less insight into what's happening on your network. So w…

You can also turn of clients one at a time until the requests stop, then the last client turned off is the source.