cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
282
Views
0
Helpful
8
Replies

20210?

stanthemam
Level 1
Level 1

This number as well as 20213, 20202, 20303, 20212, 20205, and 20206 have appeared in my domain stats today, as well as "blackberry-742" no dot com or anything else. Some of them were requested 5 times, some just one. Just curious as to what these mean?

8 Replies 8

rotblitz
Level 6
Level 6

Maybe someone on your network issued a command like "nslookup 20213."?  Or networking programs are looking up these network names because they are badly behaving or wrongly configured?  Network names without TLD are rather internal network resources, e.g. a printer or NAS.  This blackberry-742 is clearly an internal network name where some networking program looks up this Blackberry device.

Bad to see that your router also forwards internal name resolutions to the external service of OpenDNS instead of handling them internally.

stanthemam
Level 1
Level 1

Do you mean "bad" as in a virus or something of the sort?

rotblitz
Level 6
Level 6

No.  Why should a virus look up non-existent domains like 20210?  This doesn't make sense.  I rather thought about a programmer mistake, i.e. a program error...

stanthemam
Level 1
Level 1

Fair enough! Thanks for clearing this up.

rotblitz
Level 6
Level 6

Just in case you meant "Bad to see that your router...": 
This happens if the OpenDNS resolver addresses are configured on the LAN/DHCP side of the router or directly on the end user device.  It will not happen if the OpenDNS resolver addresses are configured on the WAN side of the router.  Configuring on the LAN/DHCP side can impact or break local name resolution.

rotblitz
Level 6
Level 6

Further, your very similar question has already been answered: 
https://support.opendns.com/hc/en-us/community/posts/245046447

You don't need to raise a question for any strange domain in your stats.  You'll always receive this answer.

stanthemam
Level 1
Level 1

Ok. I was just curious to see if maybe somebody has seen this in their logs and would be able to shed some light.

rotblitz
Level 6
Level 6

Yes, I've seen this kind of DNS queries very often in the stats of the networks I manage, any believable and unbelievable names and words, whatever you could think of...

Let's see if someone else can contribute to this topic...