News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • DNS Client events ID 1014

    Viewing 10 reply threads
    • Author
      Posts
      • #2300109 Reply
        mpw
        AskWoody Plus

        I am used to getting DNS Client events ID 1014.  But something changed the end of August 2020.

        Last normal warning was on 8/24/2020, “Name resolution for the name wpad timed out after none of the configured DNS servers responded.”

        Now the name resolution that times out is no longer a name.  It now lists IP addresses or some other long series of numbers. i.e. “Name resolution for the name 234.232.200.216.in-addr.arpa. timed out after none of the configured DNS servers responded.”

        Here are examples of recent “names” that timed out:

        4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.a.0.0.1.0.0.2.6.2.ip6.arpa

        234.232.200.216.in-addr.arpa

        36.136.154.156.in-addr.arpa

        c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.a.0.0.1.0.0.2.6.2.ip6.arpa

        155.195.217.172.in-addr.arpa

        My DNS server was AT&T default IPv4 192.168.1.254.

        Now I also have IPv6 DNS Servers: 2600:1702:2180:6580::1 and 2600:1702:2180:6580::1

        Is that the difference? AT&T changed to IPv6 DNS servers?

        My browser is Chrome v. 85.0.4183.121.

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows10 Home v1909 – Build 18363.1082
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2009(Build 13231.20262 C2R)

      • #2300667 Reply
        Paul T
        AskWoody MVP

        Why your system is performing reverse lookups is the question I’d be asking.
        https://www.the.net/tools/docs/reverse.php

        cheers, Paul

        • This reply was modified 3 weeks, 1 day ago by Paul T.
        1 user thanked author for this post.
        mpw
      • #2300672 Reply
        anonymous
        Guest

        Also asked and answered at AT&T Community Forums:

        Strange Query Names in DNS Client Events ID 1014

      • #2300682 Reply
        woody
        Da Boss

        From mpw:

        below is what AT&T said.

        “It does look like IPv6 is being used in your area, which may be the reason for the change. Are you noticing any issues while browsing? If so, you can try manually assigning a DNS on your device to see if it resolves any browsing issues. Let us know if you have further questions, we’re here to help.

        Genevieve, AT&T Community Specialist”

        I ran across something about reverse lookup too but did not understand it.  The link you offered, I think, indicates it is probably happening with IPv4 and IPv6 and has to do with security at the IP address not my modem or internet service provider or browser.

        Thanks.

        1 user thanked author for this post.
        mpw
      • #2301047 Reply
        mpw
        AskWoody Plus

        Paul T.

        Did I get the correct understanding out of the link you sent. (see above)

        What did you mean when you said, “Why your system is performing reverse lookups is the question I’d be asking.”

        mpw

         

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows10 Home v1909 – Build 18363.1082
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2009(Build 13231.20262 C2R)

        • #2301117 Reply
          Paul T
          AskWoody MVP

          Reverse lookups are not required for internet access, they are used for more complex networking.

          cheers, Paul

      • #2301149 Reply
        mpw
        AskWoody Plus

        I’m sorry.  I still do not understand what you are saying.  Is there something wrong with my computer?

        Also trying to get an understanding of this at AT&T Community:

        https://forums.att.com/conversations/att-fiber-equipment/strange-query-names-in-dns-client-events-id-1014/5f74f082bd2550207ce6e3df

        I still don’t really know why my computer has suddenly started asking for reverse look ups.  Was it work on fiber network done by my house  by AT&T?  A Chrome update the day before it started?

        I have scanned for malware and adware.

        Are you saying there is something wrong with my computer?

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows10 Home v1909 – Build 18363.1082
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2009(Build 13231.20262 C2R)

      • #2302011 Reply
        Paul T
        AskWoody MVP

        I’m saying your computer is attempting to do something that is not required for internet access, but that thing is not actually a problem.

        As your scans are clear I would not sweat it.

        cheers, Paul

        1 user thanked author for this post.
        mpw
        • #2302016 Reply
          mpw
          AskWoody Plus

          Thank you very much.  I thought there was something wrong with my computer or I was vulnerable on the internet somehow.

          I am not going to worry about this anymore.  I am still curious why this started but I am not worried anymore.

          Thanks again.

          HP Pavilion Desktop TP01-0050 – 64 bit
          Windows10 Home v1909 – Build 18363.1082
          Windows Defender and Windows Firewall
          Microsoft Office Home and Business 2019
          -Version 2009(Build 13231.20262 C2R)

      • #2302020 Reply
        anonymous
        Guest

        ? says:

        i dunno if my recent problem connecting to comcastic has any bearing. two days ago two of my ubuntu sticks (16.04lts) refused to connect using ipv4. i have them blocked in the kernel boot (grub) to disable ipv6. my 18.04 and 20,04 still connect to the internet using ipv4 using the same boot block (ipv6.disable=1). i block ipv6 traffic so i can moe easily monitor the traffic using netstat -atunop…

      • #2303032 Reply
        mpw
        AskWoody Plus

        Well I did two things:  I disabled ethernet and switched to WIFI internet connection and changed the DNS service to Cloudflare (1.1.1.1).

        It was a long time before there was a DNS fail.  But it has happened:

        “Name resolution for the name wpad timed out after none of the configured DNS servers responded.”

        So, I seem to be back to a Query Name that is actually a name, wpad.

        Also, I see just now Chrome has a new version.  It is 86.0.4240.75 (Official Build) (64-bit)

        So, I don’t know what really caused the change back to regular IP lookups instead of reverse lookups.

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows10 Home v1909 – Build 18363.1082
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2009(Build 13231.20262 C2R)

      • #2303055 Reply
        Paul T
        AskWoody MVP

        wpad is the Windows auto-proxy configuration site. You neither need nor want this to resolve and the paranoid amongst us set it in HOSTS to prevent wpad configuration.

        In a corporate environment we use it extensively.

        cheers, Paul

        1 user thanked author for this post.
        mpw
      • #2303070 Reply
        mpw
        AskWoody Plus

        I don’t want wpad to resolve.  I don’t know what it is.  I don’t think I have a proxy, at least none that I ever set or know about.

        I don’t care about any sites failing to resolve.  Honestly, that has never been my question.  It used to happen multiple times daily for many different sites on my Windows 7 computer.  I know failed DNS queries don’t matter.

        My only interest has ever been why did my computer suddenly start doing reverse IP lookups.

        The only way for me to know the computer was doing reverse IP lookups is if a DNS query fails and I can see the Warning in the Event Log.  Otherwise I have no idea.

        It seems now my computer has magically stopped doing reverse IP lookups.  The Warning in the Event Log looks the way it always did in the past.  There is a name, not a reverse IP address.  Good.

        Thanks for your interest.  Things seem to be back to normal now.  I think Chrome updates had something to do with it all along.  It started with a Chrome update and it ended with another Chrome update.

        HP Pavilion Desktop TP01-0050 – 64 bit
        Windows10 Home v1909 – Build 18363.1082
        Windows Defender and Windows Firewall
        Microsoft Office Home and Business 2019
        -Version 2009(Build 13231.20262 C2R)

    Viewing 10 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: DNS Client events ID 1014

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.