Looking at the logs of my local DNS server, my Linux computer has been looking up 191.0.0.10.in-addr.arpa every few seconds. It also looks up ipv4only.arpa, but less frequently. As far as I know, arpa domains are apart of the DNS system itself? Is this normal?

  • @kevincox
    3•3 years ago

    191.0.0.10.in-addr.arpa

    I do find it weird that this is an internal IP. I would check if this query works. Also maybe checking to see if your VPN has anything at this IP.

    • @AgreeableLandscapeOPM
      1•3 years ago

      I would check if this query works.

      I tried it in my browser, it doesn’t, and Pihole says it returns NXDOMAIN.

      • @kevincox
        3•3 years ago

        Did you ping the ip? 10.0.0.191 or just try the hostname?

        • @AgreeableLandscapeOPM
          1•3 years ago

          Pinging it works, but it doesn’t seem to have any webpage behind it.

          • SeerLite
            1•3 years ago

            Maybe you can run one of those crazy nmap scans to see what it is?

            Or maybe it’s a better idea to figure out why it’s happening in the first place instead hmm

        • @AgreeableLandscapeOPM
          1•3 years ago

          Oh wait, I just realized that the IP is reversed from what the domain says. I thought it was 191.0.0.10.

          10.0.0.191 is actually the IP address to the computer sending the queries.