DNS line in logs says wrong ISP?

Channels DVR Server Troubleshooting
#1

I guess this appears in the logs when u open the Troubleshooting page on the server.

TRS] DNS: Provider: "CenturyLink Communications, LLC" (CCL-534) from 205.215.xxx.xxx

(x'ed out the last set of numbers)

My ISP is not CenturyLink. And that ip address does not match my assigned public ip or any routes i see if use tracert to community.getchannels.com

So, why does this show up in logs, and how is it detecting this IP address and resolving it to Centurylink?

I use AGH for my DNS, self hosted, and its upstream DNS servers are set to use Quad9.

#2

This is reporting the IP of the DNS server that our DNS server received a query from. It isn't (can't be) wrong, but it could be surprising to you.

Quad9 must just host their DNS servers in random datacenters. We're reporting the one that your queries are coming from.

2 Likes
#3

Still trying to figure out how it is reporting this then. Since, like i said, i can not find any trace of this in any of my WAN network routing paths, even for other sites that are not channels. But thanks for the info.

#4

I think what eric is trying to say is although you direct DNS lookups to 9.9.9.9, they may use servers in datacenters to resolve the lookups and the one that contacted Channels DNS server has the IP you mentioned.

Look it up at https://www.ip-address.org/reverse-lookup/reverse-ip.php

#5

Ah. i see. Yea. if i do a who is on the ip listed in the log, it does come back to CenturyLink.

#6

We issue a local DNS lookup for a special hostname that we run that returns the IP of the DNS server that made the request.

For more info, you can read about DNS and DNS debugging here:
https://www.akamai.com/blog/developers/introducing-new-whoami-tool-dns-resolver-information

1 Like
DNS Question
#7

I actually use 9.9.9.11.
DNS over HTTPS
https://dns11.quad9.net/dns-query
DNSSEC

#8

Doesn't matter in this case.
I use 1.0.0.1 with DoH and Channels always reports I'm using Cloudflare (which I am).