Phantom DNS

[Kevin K]

I'm getting DNS behavior I can't explain. Can someone tell me what is happening?

• I ping kevin.kpk, it pings 104.239.207.44
• I ping stanley.kpk, it pings 104.239.207.44
• I ping
  kevin.kpk1234eueueueueueueueueueueueueueueue, it pings 198.105.244.130

My router's domain name is kpk, but there is no device "kevin" or "stanley" on my LAN. My LAN subnet is NOT 104.239.207.x.

OK. I can believe there is a top-level domain .kpk, but why don't I get a failed DNS lookup on kevin.kpk1234eueueueueueueueueueueueueueueue?

The behavior is the same whether I ping from a PC connected to the router or I ssh to the router and ping from there. DNS and DHCP configured at default settings except that I said the router's domain name is kpk and the router's LAN is 192.168.100.1, using Merlin version 380.67_0

 

[JDB]

Your ISP is responding to any non-existent domain in order to give a nice landing page they can put adverts on.
This drives me nuts when doing pings etc too!


Sent from my iPhone using Tapatalk

 

[JDB]

Overwrite the router DNS it gets from the ISP with public ones like 8.8.8.8 to solve.


Sent from my iPhone using Tapatalk

 

[Kevin K]

Your ISP is responding to any non-existent domain in order to give a nice landing page they can put adverts on.
This drives me nuts when doing pings etc too!

Ah. OK. Then one resolution is to set DNS1 and DNS2 to 8.8.8.8 and 8.8.4.4 (Google's DNS). Thanks.

 

[martinr]

What are your DNS server settings in your WAN page in the GUI? Those 2 IP addresses come out as Denver and Boulder, Colorado. Is that where your ISP is?

 

[JDB]

LOL, I just landed in Denver, waiting for my bag (useless but coincidental information!)


Sent from my iPhone using Tapatalk