Blocked DNS Queries

I've noticed an extremely large number of DNS queries for a domain that is being blocked as a tracking site. The requests appear to be originating from my Alma Linux based Channels server. The only thing running on the box is Channels, Portainer, and a few Channels related Portainer stacks.

Is there any reason Channels would be trying to contact these hosts?

* secure-dcr.vtwenty.com
* l2qa0cw67kfnirgojr19fct453f8l1742301331.uaid.vtwenty.com
* 1ckrbfijcp2xtgpbw2gsfonjev2iu1742389596.uaid.vtwenty.com
* i19gmg6fumgp2n8yuien7ml6xm7ez1742301331.uaid.vtwenty.com
* vzivs70dvxsom36d2wsevgt7ztore1742389596.uaid.vtwenty.com
* l91am0mx139dg30jxk9psr44gzw951742381037.uaid.vtwenty.com
* 2gd70zapt8u0e67nibdvp0e8nhgl21742381037.uaid.vtwenty.com
* kw3k8jlwko5itni6m0qsvyhmiw3f01742381033.uaid.vtwenty.com
* pjp0vws7wpibqbaiqe4ytp7i9yf2a1742381034.uaid.vtwenty.com
* tpy1tlirziqay4u5uvalg8qpjiyt21742371067.uaid.vtwenty.com
* oyycg2pjim1rcl2kuwu0i433j090y1742371067.uaid.vtwenty.com
* a36agbc9gwfjtssslt0zmzgghlldp1742344937.uaid.vtwenty.com
* 52zm4aqk4xpvnkmil45ixhh4ns9rj1742344938.uaid.vtwenty.com
* 0nwjy8e6wncpt6bhpvt2bo6s4f0ed1742323570.uaid.vtwenty.com
* 918s6ki8rvoglncon2r3d5vvh2q401742323567.uaid.vtwenty.com
* bxsbiuovrclualagulidikopufwpa1742323570.uaid.vtwenty.com
* ic010sim0gkevk1j91erlaisxezm61742305239.uaid.vtwenty.com
* ff72vh4pkxx20884q5k7t4vrmh1ts1742323567.uaid.vtwenty.com
* 5fg4072ag76r6nqqfv8g0lo6h8uj31742305237.uaid.vtwenty.com
* kdgtbezozlja2tbnvjxi49ohxn6no1742304640.uaid.vtwenty.com
* xsmvbxflpvatipgn8la7ld7zbcmah1742305240.uaid.vtwenty.com
* kljeqw75eakh4x2mfgm9z2mmu5nim1742304640.uaid.vtwenty.com
* 00eki1vaaj2fpcp54eysgrkg6votk1742305238.uaid.vtwenty.com
* pk2v3agze5apu8ri1m1z1m9a1ftvi1742301332.uaid.vtwenty.com
* hns7byv1bp0sx7d4p96pohtq1xrdp1742304640.uaid.vtwenty.com
* m6zz37092u8athmi6djwh7auws9p91742304640.uaid.vtwenty.com
* 0lixbantw7pgqiaaitcfx00qyu3b51742301332.uaid.vtwenty.com

Appears to be part of the nielsen ratings system for digital measurement Nielsen Digital Measurement and iOS17 or TVOS17 - Engineering Client Portal

My guess would be that one of the sources you added is streaming video ads from these domains.

Quite likely, I shut all the source containers down and haven't seen any traffic to that domain since. Thanks for the response.

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.