Origin of Proxy/Anonymizer showing up in my blocked logs?

Hi - So I'll start with an admission that this is, most likely, an extraordinarily noob question and I suspect there is no simple answer for me. I'm in IT but this is an area that I'm not at a comfortable level of knowledge about but being pushed there due to remote learning an all that.

I've got OpenDNS set up as custom DNS on eero network and it generally is working exactly like I want it to in order to block sites I do not want my kid going to.This morning, I was looking at the blocked sites I see these Proxy/Anonymizers showing up in my blocked logs from today:

doh.dns.sb
dns.google
dns.quad9.net
cloudflare-dns.com

I do have this category blocked so I'm not surprised they were blocked but I am curious what could have generated several requests to different sites of these types? From what I can tell, this is the first time I've seen these in several days of logs. My kid was not in a position to access any technology during this time so I'm reasonably sure they didn't try anything and to my knowledge my wife nor I haven't done anything to generate this (admitting however however that 100s of DNS looks up are happening all the time for various reasons.)

I thought someone here might be a bit more savvy and could offer some insight?

Best,

MEM

rotblitz August 28, 2020 18:17 (Edited August 28, 2020 18:17)

This question has been asked before. You’ll find many threads about it here.

Short answer, the usual behavior of any networking applications on any devices tends to generate DNS queries to do several tasks the applications are supposed to do. Don’t worry too much about that. It’s just normal.

ed_murphy August 28, 2020 18:20

That helps rotblitz! Thank you!

Origin of Proxy/Anonymizer showing up in my blocked logs?

Comments

Didn't find what you were looking for?