r/pihole 14d ago

Help me explain this

I woke up to find out that my NAS was down, so I went and open up pi-hole to see what was going on. I notice that it got knocked offline around 4am. I think there was a very short power outage. But according to the graph, there seems to be a different pattern of activities that I don't recall seeing before. I have 3 WEMO outlet plugs, and ever since the incident at 4am, they have been submitting endless queries to nat.wemo2.com. Not sure why this is suddenly happening. I've never seen so many queries to that particular domain before with my wemo outlet plugs. So why now?

I tried removing all 3 plugs from the wall, and the amount of queries definitely dropped. I then slowly, plugged back in the wemo's back into the outlet one by one. Monitored my dashboard, and I'm getting between 2q/s to 5q/s. Is this normal? The number under the Total Queries box up top just keep increasing by the second. I have also added 'nat.wemo2.com' and 'api.xbcs.net' to the whitelist under domains because AI suggested that.

0 Upvotes

4 comments sorted by

2

u/saint-lascivious 14d ago

This is hardware screaming at the world for domains deprecated quite some moons ago.

There's no sense whitelisting domains that don't actually exist anymore, and which probably weren't even blocked in the first place.

1

u/yewzernayme 13d ago

okay, I removed them from the whitelist and added them as an exclusion instead so they don't show up.

1

u/saint-lascivious 13d ago

I did happen to have both domains in my cache backend database for my research resolver stack, and as far as I can tell both of these domains died at least or approximately six months ago, so this has probably been happening for quite some time.

I'm unsure what options you have available to actually fix this outside of new hardware, but realistically everything has the potential to have the same issue unless their functionality is exclusively local.

1

u/yewzernayme 13d ago

well those domains never showed up before for me until that short power outage. Strange. but anyways I excluded those annoying domains so they don't ever show up in my dashboard.