RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds
RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds
2019-11-05 21:27:47 - last edited 2019-11-05 21:34:54
Model: RE370K  
Hardware Version: V1
Firmware Version: 1.1.10 Build 20170920 rel. 41569

Hello, 

 

Device: 
RE370K

F/W: 1.1.10 Build 20170920 rel. 41569

H/W: RE370K(US) v1.0.0

Connected to 2.4GHz network and only extending to a 2.4GHz network

2GHz network only

 

DHCP Server is disabled on the RE370K

Device has a static IP address assigned by DHCP server (DNSMASQ).

There are no devices connected to the extended network - it is the extender itself that these requests are coming from.
DNSMASQ TTL is 30 minutes, queries are being returned from DNSMASQ cache

 

My RE370K is performing th same DNS query requests from my DNS server very frequently. This is not a normal activity for any network device. Please help me understand what the device is doing. 

 

Here is an xample of the logs from DNSMASQ:

 

 

Nov  5 05:23:12 dnsmasq[3036]: query[A] live.com from 192.168.1.4
Nov  5 05:23:12 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:23:17 dnsmasq[3036]: query[A] reddit.com from 192.168.1.4
Nov  5 05:23:17 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:23:23 dnsmasq[3036]: query[A] google.com from 192.168.1.4
Nov  5 05:23:23 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:23:28 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:23:28 dnsmasq[3036]: query[A] yahoo.com from 192.168.1.4
Nov  5 05:23:34 dnsmasq[3036]: query[A] netflix.com from 192.168.1.4
Nov  5 05:23:34 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:23:39 dnsmasq[3036]: query[A] yahoo.com from 192.168.1.4
Nov  5 05:23:39 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:23:45 dnsmasq[3036]: query[A] bing.com from 192.168.1.4
Nov  5 05:23:45 dnsmasq[3036]: query[A] google.com from 192.168.1.4
Nov  5 05:23:51 dnsmasq[3036]: query[A] wikipedia.com from 192.168.1.4
Nov  5 05:23:51 dnsmasq[3036]: query[A] live.com from 192.168.1.4
Nov  5 05:23:56 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:23:56 dnsmasq[3036]: query[A] ebay.com from 192.168.1.4
Nov  5 05:24:02 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:24:02 dnsmasq[3036]: query[A] netflix.com from 192.168.1.4
Nov  5 05:24:07 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:24:07 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:24:13 dnsmasq[3036]: query[A] reddit.com from 192.168.1.4
Nov  5 05:24:13 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:24:18 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:24:18 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:24:24 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:24:24 dnsmasq[3036]: query[A] yahoo.com from 192.168.1.4
Nov  5 05:24:29 dnsmasq[3036]: query[A] bing.com from 192.168.1.4
Nov  5 05:24:29 dnsmasq[3036]: query[A] ebay.com from 192.168.1.4
Nov  5 05:24:35 dnsmasq[3036]: query[A] netflix.com from 192.168.1.4
Nov  5 05:24:35 dnsmasq[3036]: query[A] wikipedia.com from 192.168.1.4
Nov  5 05:24:40 dnsmasq[3036]: query[A] ebay.com from 192.168.1.4
Nov  5 05:24:40 dnsmasq[3036]: query[A] amazon.com from 192.168.1.4
Nov  5 05:24:46 dnsmasq[3036]: query[A] live.com from 192.168.1.4
Nov  5 05:24:46 dnsmasq[3036]: query[A] google.com from 192.168.1.4
Nov  5 05:24:51 dnsmasq[3036]: query[A] ebay.com from 192.168.1.4
Nov  5 05:24:51 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
Nov  5 05:24:57 dnsmasq[3036]: query[A] linkedin.com from 192.168.1.4
 

  1      
  1      
#1
Options
2 Reply
Re:RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds
2019-11-11 19:26:57

@LA_user 

 

The extender will normally query those sites to test that there is a internet connection.

  0  
  0  
#2
Options
Re:RE370K performing DNS queries to reddit.com, google.com, amazon.com...every ~15 seconds
2019-12-08 20:37:38

@LA_user 

I discovered the same and found this thread while looking to see if this behavior is "normal".

I put normal in quotes because, while it may be working as designed, it absolutely is not normal. This is just bad form.

  1  
  1  
#3
Options

Information

Helpful: 1

Views: 1314

Replies: 2

Related Articles