How can I look up what *.id.opendns.com is associated with ?

Follow

mrmarks

January 14, 2017 03:21

On my router logs, I'm finding entries like the following:

date-time DesktopHostname http://aac3b242ae5ac12f0266e288e710e6f80cd4.ccc2ee1d.id.opendns.com/

How can I look up at opendns.com (in my account) what site or blocking filter is associated with aac3b242ae5ac12f0266e288e710e6f80cd4.ccc2ee1d.id.opendns.com ? Kind of like Google's VirusTotal where you can look up the sha256 of any tested object (file, url, etc.)

I looked through the FAQ, searched google, etc. without finding anything.

My concern is identifying any malware on a Desktop vs just blocking some advert site like advertise.com

Thanks in advance. Cheers, mrmarks

0

• 

  mattwilson9090 January 14, 2017 09:37

  Which OpenDNS service are you using? Are all of the log entries originating from one device on your network? If so, is any OpenDNS related software, such as the OpenDNS Updater running on there? Is the URL that is being accessed always the same?

  0

  Comment actions Permalink
• 

  rotblitz January 14, 2017 14:07

  @mrmarks
  "How can I look up what *.id.opendns.com is associated with ?"

  I'm not aware of a way to look this up.  However, you can check the reasons for blocking at
  https://dashboard.opendns.com/stats/all/blockeddomains
  (This is for the OpenDNS Home and VIP versions.)

  "My concern is identifying any malware on a Desktop vs just blocking some advert site like advertise.com"

  You'll hardly find malware related entries there, because the Home versions have limited malware protection.  Full malware domains protection comes with the paid enterprise versions.  Regardless, if a domain is blocked as hosting malware, it will be indicated as such on the same stats page too.

  0

  Comment actions Permalink

Please sign in to leave a comment.