DNS Client events ID 1014

Topic

New Reply

I am used to getting DNS Client events ID 1014.  But something changed the end of August 2020.

Last normal warning was on 8/24/2020, “Name resolution for the name wpad timed out after none of the configured DNS servers responded.”

Now the name resolution that times out is no longer a name.  It now lists IP addresses or some other long series of numbers. i.e. “Name resolution for the name 234.232.200.216.in-addr.arpa. timed out after none of the configured DNS servers responded.”

Here are examples of recent “names” that timed out:

4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.a.0.0.1.0.0.2.6.2.ip6.arpa

234.232.200.216.in-addr.arpa

36.136.154.156.in-addr.arpa

c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.a.0.0.1.0.0.2.6.2.ip6.arpa

155.195.217.172.in-addr.arpa

My DNS server was AT&T default IPv4 192.168.1.254.

Now I also have IPv6 DNS Servers: 2600:1702:2180:6580::1 and 2600:1702:2180:6580::1

Is that the difference? AT&T changed to IPv6 DNS servers?

My browser is Chrome v. 85.0.4183.121.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Replies

[Paul T]

Why your system is performing reverse lookups is the question I’d be asking.
https://www.the.net/tools/docs/reverse.php

cheers, Paul

• This reply was modified 4 years, 7 months ago by Paul T.

1 user thanked author for this post.

mpw

Reply | Quote

Also asked and answered at AT&T Community Forums:

Strange Query Names in DNS Client Events ID 1014

Reply | Quote

From mpw:

below is what AT&T said.

“It does look like IPv6 is being used in your area, which may be the reason for the change. Are you noticing any issues while browsing? If so, you can try manually assigning a DNS on your device to see if it resolves any browsing issues. Let us know if you have further questions, we’re here to help.

Genevieve, AT&T Community Specialist”

I ran across something about reverse lookup too but did not understand it.  The link you offered, I think, indicates it is probably happening with IPv4 and IPv6 and has to do with security at the IP address not my modem or internet service provider or browser.

Thanks.

1 user thanked author for this post.

mpw

Reply | Quote

Paul T.

Did I get the correct understanding out of the link you sent. (see above)

What did you mean when you said, “Why your system is performing reverse lookups is the question I’d be asking.”

mpw

 

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Reverse lookups are not required for internet access, they are used for more complex networking.

cheers, Paul

Reply | Quote

I’m sorry.  I still do not understand what you are saying.  Is there something wrong with my computer?

Also trying to get an understanding of this at AT&T Community:

https://forums.att.com/conversations/att-fiber-equipment/strange-query-names-in-dns-client-events-id-1014/5f74f082bd2550207ce6e3df

I still don’t really know why my computer has suddenly started asking for reverse look ups.  Was it work on fiber network done by my house  by AT&T?  A Chrome update the day before it started?

I have scanned for malware and adware.

Are you saying there is something wrong with my computer?

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

I’m saying your computer is attempting to do something that is not required for internet access, but that thing is not actually a problem.

As your scans are clear I would not sweat it.

cheers, Paul

1 user thanked author for this post.

mpw

Reply | Quote

Thank you very much.  I thought there was something wrong with my computer or I was vulnerable on the internet somehow.

I am not going to worry about this anymore.  I am still curious why this started but I am not worried anymore.

Thanks again.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

? says:

i dunno if my recent problem connecting to comcastic has any bearing. two days ago two of my ubuntu sticks (16.04lts) refused to connect using ipv4. i have them blocked in the kernel boot (grub) to disable ipv6. my 18.04 and 20,04 still connect to the internet using ipv4 using the same boot block (ipv6.disable=1). i block ipv6 traffic so i can moe easily monitor the traffic using netstat -atunop…

Reply | Quote

Well I did two things:  I disabled ethernet and switched to WIFI internet connection and changed the DNS service to Cloudflare (1.1.1.1).

It was a long time before there was a DNS fail.  But it has happened:

“Name resolution for the name wpad timed out after none of the configured DNS servers responded.”

So, I seem to be back to a Query Name that is actually a name, wpad.

Also, I see just now Chrome has a new version.  It is 86.0.4240.75 (Official Build) (64-bit)

So, I don’t know what really caused the change back to regular IP lookups instead of reverse lookups.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

wpad is the Windows auto-proxy configuration site. You neither need nor want this to resolve and the paranoid amongst us set it in HOSTS to prevent wpad configuration.

In a corporate environment we use it extensively.

cheers, Paul

1 user thanked author for this post.

mpw

Reply | Quote

I don’t want wpad to resolve.  I don’t know what it is.  I don’t think I have a proxy, at least none that I ever set or know about.

I don’t care about any sites failing to resolve.  Honestly, that has never been my question.  It used to happen multiple times daily for many different sites on my Windows 7 computer.  I know failed DNS queries don’t matter.

My only interest has ever been why did my computer suddenly start doing reverse IP lookups.

The only way for me to know the computer was doing reverse IP lookups is if a DNS query fails and I can see the Warning in the Event Log.  Otherwise I have no idea.

It seems now my computer has magically stopped doing reverse IP lookups.  The Warning in the Event Log looks the way it always did in the past.  There is a name, not a reverse IP address.  Good.

Thanks for your interest.  Things seem to be back to normal now.  I think Chrome updates had something to do with it all along.  It started with a Chrome update and it ended with another Chrome update.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote