Skip to content

Instantly share code, notes, and snippets.

@Solnse
Created August 18, 2022 21:14
Show Gist options
  • Save Solnse/3651e3771b6e3de47c615f6397b10222 to your computer and use it in GitHub Desktop.
Save Solnse/3651e3771b6e3de47c615f6397b10222 to your computer and use it in GitHub Desktop.
This process collects information from your Pi-hole, and optionally uploads it to a unique and random directory on tricorder.pi-hole.net.
The intent of this script is to allow users to self-diagnose their installations. This is accomplished by running tests against our software and providing the user with links to FAQ articles when a problem is detected. Since we are a small team and Pi-hole has been growing steadily, it is our hope that this will help us spend more time on development.
NOTE: All log files auto-delete after 48 hours and ONLY the Pi-hole developers can access your data via the given token. We have taken these extra steps to secure your data and will work to further reduce any personal information gathered.
*** [ INITIALIZING ]
[i] 2022-08-18:13:50:25 debug log has been initialized.
[i] System has been running for 0 days, 0 hours, 13 minutes
*** [ INITIALIZING ] Sourcing setup variables
[i] Sourcing /etc/pihole/setupVars.conf...
*** [ DIAGNOSING ]: Core version
[i] Core: v5.10 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin https://github.com/pi-hole/pi-hole.git (fetch)
origin https://github.com/pi-hole/pi-hole.git (push)
[i] Branch: master
[i] Commit: v5.10-0-g853f6b7
*** [ DIAGNOSING ]: Web version
[i] Web: v5.12 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin https://github.com/pi-hole/AdminLTE.git (fetch)
origin https://github.com/pi-hole/AdminLTE.git (push)
[i] Branch: master
[i] Commit: v5.12-0-g6c320a4
*** [ DIAGNOSING ]: FTL version
[✓] FTL: v5.15 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
*** [ DIAGNOSING ]: lighttpd version
[i] 1.4.53
*** [ DIAGNOSING ]: php version
[i] 7.3.29
*** [ DIAGNOSING ]: Operating system
[i] dig return code: 10
[i] dig response: dig: couldn't get address for 'ns1.pi-hole.net': failure
[✗] Distro: Raspbian
[✗] Error: Raspbian is not a supported distro (https://docs.pi-hole.net/main/prerequisites/)
*** [ DIAGNOSING ]: SELinux
[i] SELinux not detected
*** [ DIAGNOSING ]: FirewallD
[i] Firewalld service inactive
*** [ DIAGNOSING ]: Processor
[✓] armv7l
*** [ DIAGNOSING ]: Disk usage
Filesystem Size Used Avail Use% Mounted on
/dev/root 29G 4.3G 24G 16% /
devtmpfs 776M 0 776M 0% /dev
tmpfs 937M 6.4M 930M 1% /dev/shm
tmpfs 937M 8.5M 928M 1% /run
tmpfs 5.0M 4.0K 5.0M 1% /run/lock
tmpfs 937M 0 937M 0% /sys/fs/cgroup
/dev/mmcblk0p1 253M 49M 205M 20% /boot
tmpfs 188M 0 188M 0% /run/user/999
tmpfs 188M 0 188M 0% /run/user/1000
*** [ DIAGNOSING ]: Network interfaces and addresses
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether dc:a6:32:3c:d0:bf brd ff:ff:ff:ff:ff:ff
inet 192.168.1.59/24 brd 192.168.1.255 scope global noprefixroute eth0
valid_lft forever preferred_lft forever
inet6 fdfa:464e:34f2:0:ebfe:a950:85a3:ad26/64 scope global dynamic mngtmpaddr noprefixroute
valid_lft 1660sec preferred_lft 1660sec
inet6 fe80::d048:70b1:abfc:98ba/64 scope link
valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether dc:a6:32:3c:d0:c0 brd ff:ff:ff:ff:ff:ff
*** [ DIAGNOSING ]: Network routing table
default via 192.168.1.1 dev eth0 src 192.168.1.59 metric 202
192.168.1.0/24 dev eth0 proto dhcp scope link src 192.168.1.59 metric 202
*** [ DIAGNOSING ]: Networking
[✓] IPv4 address(es) bound to the eth0 interface:
192.168.1.59/24
[✓] IPv6 address(es) bound to the eth0 interface:
fdfa:464e:34f2:0:ebfe:a950:85a3:ad26/64
fe80::d048:70b1:abfc:98ba/64
[i] Default IPv4 gateway: 192.168.1.1
* Pinging 192.168.1.1...
[✓] Gateway responded.
*** [ DIAGNOSING ]: Ports in use
[✓] udp:0.0.0.0:53 is in use by pihole-FTL
udp:0.0.0.0:68 is in use by dhcpcd
udp:0.0.0.0:56946 is in use by pihole-FTL
udp:0.0.0.0:5353 is in use by avahi-daemon
udp:0.0.0.0:57322 is in use by avahi-daemon
[✓] udp:*:53 is in use by pihole-FTL
udp:*:5353 is in use by avahi-daemon
udp:*:59797 is in use by avahi-daemon
[✓] tcp:0.0.0.0:80 is in use by lighttpd
[✓] tcp:0.0.0.0:53 is in use by pihole-FTL
tcp:0.0.0.0:22 is in use by sshd
[✓] tcp:127.0.0.1:4711 is in use by pihole-FTL
[✓] tcp:[::]:80 is in use by lighttpd
[✓] tcp:[::]:53 is in use by pihole-FTL
tcp:[::]:22 is in use by sshd
[✓] tcp:[::1]:4711 is in use by pihole-FTL
*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] stats.adobe.com is 0.0.0.0 on lo (127.0.0.1)
[✓] stats.adobe.com is 0.0.0.0 on eth0 (192.168.1.59)
[✓] doubleclick.com is 142.250.189.174 via a remote, public DNS server (8.8.8.8)
*** [ DIAGNOSING ]: Name resolution (IPv6) using a random blocked domain and a known ad-serving domain
[✓] tgzobwoutuwn.com is :: on lo (::1)
[✓] tgzobwoutuwn.com is :: on eth0 (fdfa:464e:34f2:0:ebfe:a950:85a3:ad26)
[✓] tgzobwoutuwn.com is :: on eth0 (fe80::d048:70b1:abfc:98ba)
[✗] Failed to resolve doubleclick.com via a remote, public DNS server (2001:4860:4860::8888)
*** [ DIAGNOSING ]: Discovering active DHCP servers (takes 10 seconds)
Scanning all your interfaces for DHCP servers
Timeout: 10 seconds
WARN: Could not sendto() in send_dhcp_discover() (/__w/FTL/FTL/src/dhcp-discover.c:233): Network is unreachable
* Received 548 bytes from eth0:192.168.1.1
Offered IP address: 192.168.1.59
Server IP address: N/A
Relay-agent IP address: N/A
BOOTP server: (empty)
BOOTP file: (empty)
DHCP options:
Message type: DHCPOFFER (2)
server-identifier: 192.168.1.1
lease-time: 86400 ( 1d )
netmask: 255.255.255.0
router: 192.168.1.1
dns-server: 192.168.1.1
--- end of options ---
DHCP packets received on interface eth0: 1
DHCP packets received on interface lo: 0
DHCP packets received on interface wlan0: 0
*** [ DIAGNOSING ]: Pi-hole processes
[✓] lighttpd daemon is active
[✓] pihole-FTL daemon is active
*** [ DIAGNOSING ]: Pi-hole-FTL full status
● pihole-FTL.service - LSB: pihole-FTL daemon
Loaded: loaded (/etc/init.d/pihole-FTL; generated)
Active: active (exited) since Thu 2022-08-18 13:37:28 PDT; 13min ago
Docs: man:systemd-sysv-generator(8)
Process: 555 ExecStart=/etc/init.d/pihole-FTL start (code=exited, status=0/SUCCESS)
Aug 18 13:37:24 raspberrypi systemd[1]: Starting LSB: pihole-FTL daemon...
Aug 18 13:37:24 raspberrypi pihole-FTL[555]: Not running
Aug 18 13:37:24 raspberrypi su[573]: (to pihole) root on none
Aug 18 13:37:24 raspberrypi su[573]: pam_unix(su:session): session opened for user pihole by (uid=0)
Aug 18 13:37:28 raspberrypi pihole-FTL[555]: FTL started!
Aug 18 13:37:28 raspberrypi systemd[1]: Started LSB: pihole-FTL daemon.
*** [ DIAGNOSING ]: Setup variables
BLOCKING_ENABLED=true
ADMIN_EMAIL=chad@therailsroad.com
WEBUIBOXEDLAYOUT=boxed
WEBTHEME=default-light
PIHOLE_INTERFACE=eth0
IPV4_ADDRESS=192.168.1.59/24
IPV6_ADDRESS=
PIHOLE_DNS_1=1.1.1.1
PIHOLE_DNS_2=1.0.0.1
QUERY_LOGGING=true
INSTALL_WEB_SERVER=true
INSTALL_WEB_INTERFACE=true
LIGHTTPD_ENABLED=true
CACHE_SIZE=10000
DNS_FQDN_REQUIRED=true
DNS_BOGUS_PRIV=true
DNSMASQ_LISTENING=local
*** [ DIAGNOSING ]: Dashboard and block page
[✗] Block page X-Header: X-Header does not match or could not be retrieved.
HTTP/1.1 200 OK
Content-type: text/html; charset=UTF-8
Expires: Thu, 18 Aug 2022 20:51:01 GMT
Cache-Control: max-age=0
Date: Thu, 18 Aug 2022 20:51:01 GMT
Server: lighttpd/1.4.53
[✓] Web interface X-Header: X-Pi-hole: The Pi-hole Web interface is working!
*** [ DIAGNOSING ]: Gravity Database
-rw-rw-r-- 1 pihole pihole 30M Aug 13 19:24 /etc/pihole/gravity.db
*** [ DIAGNOSING ]: Info table
property value
-------------------- ----------------------------------------
version 15
updated 1660443869
gravity_count 320909
Last gravity run finished at: Sat Aug 13 19:24:29 PDT 2022
----- First 10 Gravity Domains -----
localhost.localdomain
eu1.clevertap-prod.com
wizhumpgyros.com
coccyxwickimp.com
webmail-who-int.000webhostapp.com
010sec.com
01mspmd5yalky8.com
0byv9mgbn0.com
ns6.0pendns.org
dns.0pengl.com
*** [ DIAGNOSING ]: Groups
id enabled name date_added date_modified description
---- ------- -------------------------------------------------- ------------------- ------------------- --------------------------------------------------
0 1 Default 2021-08-28 11:12:02 2021-08-28 11:12:02 The default group
1 1 CalzasdaHouse 2022-05-16 12:44:59 2022-05-16 12:44:59 group for traffic at the Calzada house.
*** [ DIAGNOSING ]: Domainlist (0/1 = exact white-/blacklist, 2/3 = regex white-/blacklist)
id type enabled group_ids domain date_added date_modified comment
----- ---- ------- ------------ ---------------------------------------------------------------------------------------------------- ------------------- ------------------- --------------------------------------------------
3 2 1 0 cbsinteractive.hb.omtrdc.net 2021-08-28 13:51:45 2021-08-28 13:58:38 Added from Query Log
6 0 1 0 pubads.g.doubleclick.net 2021-08-28 14:02:57 2022-05-21 20:49:19 Paramount+ loading circle
7 0 1 0 ads.play.cbsi.video 2021-08-28 14:02:57 2021-08-28 14:02:57
8 0 1 0 www.bit.ly 2021-08-28 14:15:23 2021-08-28 14:15:23
9 0 1 0 bit.ly 2021-08-28 14:15:23 2021-08-28 14:15:23
10 0 1 0 ow.ly 2021-08-28 14:15:23 2021-08-28 14:15:23
11 0 1 0 tinyurl.com 2021-08-28 14:15:23 2021-08-28 14:17:37
12 0 1 0 0.client-channel.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
13 0 1 0 1drv.com 2021-08-28 14:17:37 2021-08-28 14:17:37
14 0 1 0 2.android.pool.ntp.org 2021-08-28 14:17:37 2021-08-28 14:17:37
15 0 1 0 akamaihd.net 2021-08-28 14:17:37 2021-08-28 14:17:37
16 0 1 0 akamaitechnologies.com 2021-08-28 14:17:37 2021-08-28 14:17:37
17 0 1 0 akamaized.net 2021-08-28 14:17:37 2021-08-28 14:17:37
18 0 1 0 amazonaws.com 2021-08-28 14:17:37 2021-08-28 14:17:37
19 0 1 0 android.clients.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
20 0 1 0 api.ipify.org 2021-08-28 14:17:37 2021-08-28 14:17:37
21 0 1 0 api.rlje.net 2021-08-28 14:17:37 2021-08-28 14:17:37
22 0 1 0 app-api.ted.com 2021-08-28 14:17:37 2021-08-28 14:17:37
23 0 1 0 appleid.apple.com 2021-08-28 14:17:37 2021-08-28 14:17:37
24 0 1 0 apps.skype.com 2021-08-28 14:17:37 2021-08-28 14:17:37
25 0 1 0 appsbackup-pa.clients6.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
26 0 1 0 appsbackup-pa.googleapis.com 2021-08-28 14:17:37 2021-08-28 14:17:37
27 0 1 0 apt.sonarr.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
28 0 1 0 aspnetcdn.com 2021-08-28 14:17:37 2021-08-28 14:17:37
29 0 1 0 attestation.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
30 0 1 0 ax.phobos.apple.com.edgesuite.net 2021-08-28 14:17:37 2021-08-28 14:17:37
31 0 1 0 brightcove.net 2021-08-28 14:17:37 2021-08-28 14:17:37
32 0 1 0 c.s-microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
33 0 1 0 cdn.cloudflare.net 2021-08-28 14:17:37 2021-08-28 14:17:37
34 0 1 0 cdn.embedly.com 2021-08-28 14:17:37 2021-08-28 14:17:37
35 0 1 0 cdn.optimizely.com 2021-08-28 14:17:37 2021-08-28 14:17:37
36 0 1 0 cdn.vidible.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
37 0 1 0 cdn2.optimizely.com 2021-08-28 14:17:37 2021-08-28 14:17:37
38 0 1 0 cdn3.optimizely.com 2021-08-28 14:17:37 2021-08-28 14:17:37
39 0 1 0 cdnjs.cloudflare.com 2021-08-28 14:17:37 2021-08-28 14:17:37
40 0 1 0 cert.mgt.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
41 0 1 0 clientconfig.passport.net 2021-08-28 14:17:37 2021-08-28 14:17:37
42 0 1 0 clients1.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
43 0 1 0 clients2.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
44 0 1 0 clients3.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
45 0 1 0 clients4.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
46 0 1 0 clients5.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
47 0 1 0 clients6.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
48 0 1 0 cpms.spop10.ams.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
49 0 1 0 cpms35.spop10.ams.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
50 0 1 0 cse.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
51 0 1 0 ctldl.windowsupdate.com 2021-08-28 14:17:37 2021-08-28 14:17:37
52 0 1 0 d2c8v52ll5s99u.cloudfront.net 2021-08-28 14:17:37 2021-08-28 14:17:37
53 0 1 0 d2gatte9o95jao.cloudfront.net 2021-08-28 14:17:37 2021-08-28 14:17:37
54 0 1 0 dashboard.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
55 0 1 0 dataplicity.com 2021-08-28 14:17:37 2021-08-28 14:17:37
56 0 1 0 def-vef.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
57 0 1 0 delivery.vidible.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
58 0 1 0 dev.virtualearth.net 2021-08-28 14:17:37 2021-08-28 14:17:37
59 0 1 0 device.auth.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
60 0 1 0 display.ugc.bazaarvoice.com 2021-08-28 14:17:37 2021-08-28 14:17:37
61 0 1 0 displaycatalog.mp.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
62 0 1 0 dl.delivery.mp.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
63 0 1 0 dl.dropbox.com 2021-08-28 14:17:37 2021-08-28 14:17:37
64 0 1 0 dl.dropboxusercontent.com 2021-08-28 14:17:37 2021-08-28 14:17:37
65 0 1 0 dns.msftncsi.com 2021-08-28 14:17:37 2021-08-28 14:17:37
66 0 1 0 download.sonarr.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
67 0 1 0 drift.com 2021-08-28 14:17:37 2021-08-28 14:17:37
68 0 1 0 driftt.com 2021-08-28 14:17:37 2021-08-28 14:17:37
69 0 1 0 dynupdate.no-ip.com 2021-08-28 14:17:37 2021-08-28 14:17:37
70 0 1 0 ecn.dev.virtualearth.net 2021-08-28 14:17:37 2021-08-28 14:17:37
71 0 1 0 edge.api.brightcove.com 2021-08-28 14:17:37 2021-08-28 14:17:37
72 0 1 0 eds.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
73 0 1 0 fonts.gstatic.com 2021-08-28 14:17:37 2021-08-28 14:17:37
74 0 1 0 forums.sonarr.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
75 0 1 0 g.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
76 0 1 0 geo-prod.do.dsp.mp.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
77 0 1 0 geo3.ggpht.com 2021-08-28 14:17:37 2021-08-28 14:17:37
78 0 1 0 giphy.com 2021-08-28 14:17:37 2021-08-28 14:17:37
79 0 1 0 github.com 2021-08-28 14:17:37 2021-08-28 14:17:37
80 0 1 0 github.io 2021-08-28 14:17:37 2021-08-28 14:17:37
81 0 1 0 googleapis.com 2021-08-28 14:17:37 2021-08-28 14:17:37
82 0 1 0 gravatar.com 2021-08-28 14:17:37 2021-08-28 14:17:37
83 0 1 0 gstatic.com 2021-08-28 14:17:37 2021-08-28 14:17:37
84 0 1 0 help.ui.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
85 0 1 0 hls.ted.com 2021-08-28 14:17:37 2021-08-28 14:17:37
86 0 1 0 i.ytimg.com 2021-08-28 14:17:37 2021-08-28 14:17:37
87 0 1 0 i1.ytimg.com 2021-08-28 14:17:37 2021-08-28 14:17:37
88 0 1 0 imagesak.secureserver.net 2021-08-28 14:17:37 2021-08-28 14:17:37
89 0 1 0 img.vidible.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
90 0 1 0 imgix.net 2021-08-28 14:17:37 2021-08-28 14:17:37
91 0 1 0 imgs.xkcd.com 2021-08-28 14:17:37 2021-08-28 14:17:37
92 0 1 0 instantmessaging-pa.googleapis.com 2021-08-28 14:17:37 2021-08-28 14:17:37
93 0 1 0 intercom.io 2021-08-28 14:17:37 2021-08-28 14:17:37
94 0 1 0 jquery.com 2021-08-28 14:17:37 2021-08-28 14:17:37
95 0 1 0 jsdelivr.net 2021-08-28 14:17:37 2021-08-28 14:17:37
96 0 1 0 keystone.mwbsys.com 2021-08-28 14:17:37 2021-08-28 14:17:37
97 0 1 0 lastfm-img2.akamaized.net 2021-08-28 14:17:37 2021-08-28 14:17:37
98 0 1 0 licensing.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
99 0 1 0 live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
100 0 1 0 login.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
101 0 1 0 login.microsoftonline.com 2021-08-28 14:17:37 2021-08-28 14:17:37
102 0 1 0 manifest.googlevideo.com 2021-08-28 14:17:37 2021-08-28 14:17:37
103 0 1 0 meta-db-worker02.pop.ric.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
104 0 1 0 meta.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
105 0 1 0 meta.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
106 0 1 0 microsoftonline.com 2021-08-28 14:17:37 2021-08-28 14:17:37
107 0 1 0 msftncsi.com 2021-08-28 14:17:37 2021-08-28 14:17:37
108 0 1 0 my.plexapp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
109 0 1 0 nexusrules.officeapps.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
110 0 1 0 npr-news.streaming.adswizz.com 2021-08-28 14:17:37 2021-08-28 14:17:37
111 0 1 0 nine.plugins.plexapp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
112 0 1 0 no-ip.com 2021-08-28 14:17:37 2021-08-28 14:17:37
113 0 1 0 node.plexapp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
114 0 1 0 notify.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
115 0 1 0 ns1.dropbox.com 2021-08-28 14:17:37 2021-08-28 14:17:37
116 0 1 0 ns2.dropbox.com 2021-08-28 14:17:37 2021-08-28 14:17:37
117 0 1 0 o1.email.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
118 0 1 0 o2.sg0.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
119 0 1 0 ocsp.apple.com 2021-08-28 14:17:37 2021-08-28 14:17:37
120 0 1 0 office.com 2021-08-28 14:17:37 2021-08-28 14:17:37
121 0 1 0 office.net 2021-08-28 14:17:37 2021-08-28 14:17:37
122 0 1 0 office365.com 2021-08-28 14:17:37 2021-08-28 14:17:37
123 0 1 0 officeclient.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
124 0 1 0 om.cbsi.com 2021-08-28 14:17:37 2021-08-28 14:17:37
125 0 1 0 onedrive.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
126 0 1 0 outlook.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
127 0 1 0 outlook.office365.com 2021-08-28 14:17:37 2021-08-28 14:17:37
128 0 1 0 placehold.it 2021-08-28 14:17:37 2021-08-28 14:17:37
129 0 1 0 placeholdit.imgix.net 2021-08-28 14:17:37 2021-08-28 14:17:37
130 0 1 0 players.brightcove.net 2021-08-28 14:17:37 2021-08-28 14:17:37
131 0 1 0 pricelist.skype.com 2021-08-28 14:17:37 2021-08-28 14:17:37
132 0 1 0 products.office.com 2021-08-28 14:17:37 2021-08-28 14:17:37
133 0 1 0 proxy.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
134 0 1 0 proxy.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
135 0 1 0 proxy02.pop.ord.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
136 0 1 0 pubsub.plex.bz 2021-08-28 14:17:37 2021-08-28 14:17:37
137 0 1 0 pubsub.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
138 0 1 0 raw.githubusercontent.com 2021-08-28 14:17:37 2021-08-28 14:17:37
139 0 1 0 redirector.googlevideo.com 2021-08-28 14:17:37 2021-08-28 14:17:37
140 0 1 0 res.cloudinary.com 2021-08-28 14:17:37 2021-08-28 14:17:37
141 0 1 0 s.gateway.messenger.live.com 2021-08-28 14:17:37 2021-08-28 14:17:37
142 0 1 0 s.marketwatch.com 2021-08-28 14:17:37 2021-08-28 14:17:37
143 0 1 0 s.youtube.com 2021-08-28 14:17:37 2021-08-28 14:17:37
144 0 1 0 s.ytimg.com 2021-08-28 14:17:37 2021-08-28 14:17:37
145 0 1 0 s1.wp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
146 0 1 0 s2.youtube.com 2021-08-28 14:17:37 2021-08-28 14:17:37
147 0 1 0 s3.amazonaws.com 2021-08-28 14:17:37 2021-08-28 14:17:37
148 0 1 0 sa.symcb.com 2021-08-28 14:17:37 2021-08-28 14:17:37
149 0 1 0 secure.avangate.com 2021-08-28 14:17:37 2021-08-28 14:17:37
150 0 1 0 secure.brightcove.com 2021-08-28 14:17:37 2021-08-28 14:17:37
151 0 1 0 secure.surveymonkey.com 2021-08-28 14:17:37 2021-08-28 14:17:37
152 0 1 0 services.sonarr.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
153 0 1 0 skyhook.sonarr.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
154 0 1 0 spclient.wg.spotify.com 2021-08-28 14:17:37 2021-08-28 14:17:37
155 0 1 0 ssl.p.jwpcdn.com 2021-08-28 14:17:37 2021-08-28 14:17:37
156 0 1 0 staging.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
157 0 1 0 status.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
158 0 1 0 t.co 2021-08-28 14:17:37 2021-08-28 14:17:37
159 0 1 0 t0.ssl.ak.dynamic.tiles.virtualearth.net 2021-08-28 14:17:37 2021-08-28 14:17:37
160 0 1 0 t0.ssl.ak.tiles.virtualearth.net 2021-08-28 14:17:37 2021-08-28 14:17:37
161 0 1 0 tawk.to 2021-08-28 14:17:37 2021-08-28 14:17:37
162 0 1 0 tedcdn.com 2021-08-28 14:17:37 2021-08-28 14:17:37
163 0 1 0 themoviedb.com 2021-08-28 14:17:37 2021-08-28 14:17:37
164 0 1 0 thetvdb.com 2021-08-28 14:17:37 2021-08-28 14:17:37
166 0 1 0 title.auth.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
167 0 1 0 title.mgt.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
168 0 1 0 traffic.libsyn.com 2021-08-28 14:17:37 2021-08-28 14:17:37
169 0 1 0 tvdb2.plex.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
170 0 1 0 tvthemes.plexapp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
171 0 1 0 twimg.com 2021-08-28 14:17:37 2021-08-28 14:17:37
172 0 1 0 ui.skype.com 2021-08-28 14:17:37 2021-08-28 14:17:37
173 0 1 0 video-stats.l.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
174 0 1 0 videos.vidible.tv 2021-08-28 14:17:37 2021-08-28 14:17:37
175 0 1 0 widget-cdn.rpxnow.com 2021-08-28 14:17:37 2021-08-28 14:17:37
176 0 1 0 win10.ipv6.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
177 0 1 0 wp.com 2021-08-28 14:17:37 2021-08-28 14:17:37
178 0 1 0 ws.audioscrobbler.com 2021-08-28 14:17:37 2021-08-28 14:17:37
179 0 1 0 www.dataplicity.com 2021-08-28 14:17:37 2021-08-28 14:17:37
180 0 1 0 www.googleapis.com 2021-08-28 14:17:37 2021-08-28 14:17:37
181 0 1 0 www.msftncsi.com 2021-08-28 14:17:37 2021-08-28 14:17:37
182 0 1 0 www.no-ip.com 2021-08-28 14:17:37 2021-08-28 14:17:37
183 0 1 0 www.youtube-nocookie.com 2021-08-28 14:17:37 2021-08-28 14:17:37
184 0 1 0 xbox.ipv6.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
185 0 1 0 xboxexperiencesprod.experimentation.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
186 0 1 0 xflight.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
187 0 1 0 xkms.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
188 0 1 0 xsts.auth.xboxlive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
189 0 1 0 youtu.be 2021-08-28 14:17:37 2021-08-28 14:17:37
190 0 1 0 youtube-nocookie.com 2021-08-28 14:17:37 2021-08-28 14:17:37
191 0 1 0 yt3.ggpht.com 2021-08-28 14:17:37 2021-08-28 14:17:37
192 0 1 0 zee.cws.conviva.com 2021-08-28 14:17:37 2021-08-28 14:17:37
193 0 1 0 pings.conviva.com 2021-08-28 14:17:37 2021-08-28 14:17:37
194 0 1 0 cws.conviva.com 2021-08-28 14:17:37 2021-08-28 14:17:37
195 0 1 0 livepassdl.conviva.com 2021-08-28 14:17:37 2021-08-28 14:17:37
196 0 1 0 gfwsl.geforce.com 2021-08-28 14:17:37 2021-08-28 14:17:37
197 0 1 0 appspot-preview.l.google.com 2021-08-28 14:17:37 2021-08-28 14:17:37
198 0 1 0 vidtech.cbsinteractive.com 2021-08-28 14:17:37 2021-08-28 14:17:37
199 0 1 0 continuum.dds.microsoft.com 2021-08-28 14:17:37 2021-08-28 14:17:37
200 0 1 0 connectivitycheck.gstatic.com 2021-08-28 14:17:37 2021-08-28 14:17:37
201 0 1 0 connectivitycheck.android.com 2021-08-28 14:17:37 2021-08-28 14:17:37
202 0 1 0 www.msftconnecttest.com 2021-08-28 14:17:37 2021-08-28 14:17:37
203 0 1 0 coinbase.com 2021-11-12 10:09:29 2021-11-12 10:09:29 Added from Query Log
205 3 1 0 (\.|^)\.ru$ 2022-02-28 19:02:48 2022-02-28 19:02:48
207 0 1 0 tags.tiqcdn.com 2022-05-07 18:57:58 2022-05-21 20:49:51 Paramount+
208 0 1 0 saa.paramountplus.com 2022-05-07 19:17:59 2022-05-07 19:17:59 Added from Query Log
209 0 1 0 cbs.hb-api.omtrdc.net 2022-05-21 17:18:23 2022-05-21 17:18:23 Added from Query Log
210 0 1 0 www.dpbolvw.net 2022-07-16 13:18:10 2022-07-16 13:19:44 Brandy for Bring Fido
211 0 1 0 cj.dotomi.com 2022-07-16 13:18:49 2022-07-16 13:19:49 Brandy for Bring Fido
212 0 1 0 www.emjcd.com 2022-07-16 13:19:01 2022-07-16 13:19:57 Brandy for Bring Fido
213 0 1 0 87a6b28bc7823e67a5bb2a0a6728c702afcae78d.cws.conviva.com 2022-07-24 17:57:56 2022-07-24 17:57:56 Added from Query Log
214 0 1 0 api2.branch.io 2022-07-24 17:58:17 2022-07-24 17:58:17 Added from Query Log
215 0 1 0 api.segment.io 2022-07-24 17:58:27 2022-07-24 17:58:27 Added from Query Log
*** [ DIAGNOSING ]: Clients
id group_ids ip date_added date_modified comment
---- ------------ ---------------------------------------------------------------------------------------------------- ------------------- ------------------- --------------------------------------------------
1 0 AC:AE:19:AB:3D:70 2022-06-21 17:13:38 2022-06-21 17:13:38 Roku
*** [ DIAGNOSING ]: Adlists
id enabled group_ids address date_added date_modified comment
----- ------- ------------ ---------------------------------------------------------------------------------------------------- ------------------- ------------------- --------------------------------------------------
1 1 0 https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts 2021-08-28 11:12:02 2021-08-28 11:12:02 Migrated from /etc/pihole/adlists.list
2 1 0 https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt 2021-08-28 11:36:36 2021-08-28 11:36:36
3 1 0 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts 2021-08-28 11:36:58 2021-08-28 11:36:58
4 1 0 https://adaway.org/hosts.txt 2021-08-28 11:37:23 2021-08-28 11:37:23
5 1 0 https://v.firebog.net/hosts/AdguardDNS.txt 2021-08-28 11:37:39 2021-08-28 11:37:39
6 1 0 https://v.firebog.net/hosts/Admiral.txt 2021-08-28 11:38:06 2021-08-28 11:38:06
7 1 0 https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt 2021-08-28 11:38:28 2021-08-28 11:38:28
8 1 0 https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt 2021-08-28 11:38:46 2021-08-28 11:38:46
9 1 0 https://v.firebog.net/hosts/Easylist.txt 2021-08-28 11:39:03 2021-08-28 11:39:03
10 1 0 https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext 2021-08-28 11:40:00 2021-08-28 11:40:00
11 1 0 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts 2021-08-28 11:40:15 2021-08-28 11:40:15
12 1 0 https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts 2021-08-28 11:40:28 2021-08-28 11:40:28
13 1 0 https://v.firebog.net/hosts/Easyprivacy.txt 2021-08-28 11:40:42 2021-08-28 11:40:42
14 1 0 https://v.firebog.net/hosts/Prigent-Ads.txt 2021-08-28 11:40:54 2021-08-28 11:40:54
15 1 0 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts 2021-08-28 11:41:06 2021-08-28 11:41:06
16 1 0 https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt 2021-08-28 11:41:19 2021-08-28 11:41:19
17 1 0 https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt 2021-08-28 11:41:31 2021-08-28 11:41:31
18 1 0 https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware% 2021-08-28 11:41:48 2021-08-28 11:41:48
20List/AntiMalwareHosts.txt
19 1 0 https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt 2021-08-28 11:41:59 2021-08-28 11:41:59
20 1 0 https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt 2021-08-28 11:42:10 2021-08-28 11:42:10
21 1 0 https://v.firebog.net/hosts/Prigent-Crypto.txt 2021-08-28 11:42:23 2021-08-28 11:42:23
22 1 0 https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/M 2021-08-28 11:42:36 2021-08-28 11:42:36
andiant_APT1_Report_Appendix_D.txt
23 1 0 https://phishing.army/download/phishing_army_blocklist_extended.txt 2021-08-28 11:42:48 2021-08-28 11:42:48
24 1 0 https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt 2021-08-28 11:43:01 2021-08-28 11:43:01
25 1 0 https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt 2021-08-28 11:43:13 2021-08-28 11:43:13
26 1 0 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts 2021-08-28 11:43:26 2021-08-28 11:43:26
27 1 0 https://urlhaus.abuse.ch/downloads/hostfile/ 2021-08-28 11:43:37 2021-08-28 11:43:37
28 1 0 https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser 2021-08-28 11:43:50 2021-08-28 11:43:50
*** [ DIAGNOSING ]: contents of /etc/pihole
-rw-r--r-- 1 root root 0 Aug 28 2021 /etc/pihole/custom.list
-rw-r--r-- 1 root root 65 Aug 13 19:24 /etc/pihole/local.list
-rw-r--r-- 1 root root 234 Aug 28 2021 /etc/pihole/logrotate
/var/log/pihole.log {
su root root
daily
copytruncate
rotate 5
compress
delaycompress
notifempty
nomail
}
/var/log/pihole-FTL.log {
su root root
weekly
copytruncate
rotate 3
compress
delaycompress
notifempty
nomail
}
-rw-rw-r-- 1 pihole root 15 May 16 13:14 /etc/pihole/pihole-FTL.conf
PRIVACYLEVEL=0
*** [ DIAGNOSING ]: contents of /etc/dnsmasq.d
-rw-r--r-- 1 root root 1.4K May 16 13:14 /etc/dnsmasq.d/01-pihole.conf
addn-hosts=/etc/pihole/local.list
addn-hosts=/etc/pihole/custom.list
localise-queries
no-resolv
cache-size=10000
log-queries
log-facility=/var/log/pihole.log
log-async
server=1.1.1.1
server=1.0.0.1
domain-needed
expand-hosts
bogus-priv
local-service
-rw-r--r-- 1 root root 2.2K May 16 13:14 /etc/dnsmasq.d/06-rfc6761.conf
server=/test/
server=/localhost/
server=/invalid/
server=/bind/
server=/onion/
*** [ DIAGNOSING ]: contents of /etc/lighttpd
-rw-r--r-- 1 root root 0 Aug 28 2021 /etc/lighttpd/external.conf
-rw-r--r-- 1 root root 3.9K May 16 13:14 /etc/lighttpd/lighttpd.conf
server.modules = (
"mod_access",
"mod_accesslog",
"mod_auth",
"mod_expire",
"mod_redirect",
"mod_setenv",
"mod_rewrite"
)
server.document-root = "/var/www/html"
server.error-handler-404 = "/pihole/index.php"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80
accesslog.filename = "/var/log/lighttpd/access.log"
accesslog.format = "%{%s}t|%V|%r|%s|%b"
server.stream-response-body = 1
index-file.names = ( "index.php", "index.html", "index.lighttpd.html" )
url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
mimetype.assign = (
".ico" => "image/x-icon",
".jpeg" => "image/jpeg",
".jpg" => "image/jpeg",
".png" => "image/png",
".svg" => "image/svg+xml",
".css" => "text/css; charset=utf-8",
".html" => "text/html; charset=utf-8",
".js" => "text/javascript; charset=utf-8",
".json" => "application/json; charset=utf-8",
".map" => "application/json; charset=utf-8",
".txt" => "text/plain; charset=utf-8",
".eot" => "application/vnd.ms-fontobject",
".otf" => "font/otf",
".ttc" => "font/collection",
".ttf" => "font/ttf",
".woff" => "font/woff",
".woff2" => "font/woff2"
)
include_shell "cat external.conf 2>/dev/null"
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
include_shell "find /etc/lighttpd/conf-enabled -name '*.conf' -a ! -name 'letsencrypt.conf' -printf 'include \"%p\"
' 2>/dev/null"
$HTTP["url"] =~ "^/admin/" {
setenv.add-response-header = (
"X-Pi-hole" => "The Pi-hole Web interface is working!",
"X-Frame-Options" => "DENY"
)
}
$HTTP["url"] =~ "^/admin/\.(.*)" {
url.access-deny = ("")
}
$HTTP["url"] =~ "/(teleporter|api_token)\.php$" {
$HTTP["referer"] =~ "/admin/settings\.php" {
setenv.add-response-header = ( "X-Frame-Options" => "SAMEORIGIN" )
}
}
expire.url = ( "" => "access plus 0 seconds" )
*** [ DIAGNOSING ]: contents of /etc/cron.d
-rw-r--r-- 1 root root 1.8K May 16 13:14 /etc/cron.d/pihole
24 3 * * 7 root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updateGravity >/var/log/pihole_updateGravity.log || cat /var/log/pihole_updateGravity.log
00 00 * * * root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole flush once quiet
@reboot root /usr/sbin/logrotate --state /var/lib/logrotate/pihole /etc/pihole/logrotate
*/10 * * * * root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local
27 14 * * * root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker remote
@reboot root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker remote reboot
*** [ DIAGNOSING ]: contents of /var/log/lighttpd
-rw-r--r-- 1 www-data www-data 574 Aug 18 13:37 /var/log/lighttpd/error.log
-----head of error.log------
2022-08-14 00:00:03: (server.c.1759) logfiles cycled UID = 0 PID = 21963
2022-08-18 19:17:15: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 21:03:33: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 21:03:54: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 21:28:14: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 21:28:30: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 13:36:53: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 13:37:24: (server.c.1464) server started (lighttpd/1.4.53)
-----tail of error.log------
2022-08-14 00:00:03: (server.c.1759) logfiles cycled UID = 0 PID = 21963
2022-08-18 19:17:15: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 21:03:33: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 21:03:54: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 21:28:14: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 21:28:30: (server.c.1464) server started (lighttpd/1.4.53)
2022-08-18 13:36:53: (server.c.2059) server stopped by UID = 0 PID = 1
2022-08-18 13:37:24: (server.c.1464) server started (lighttpd/1.4.53)
*** [ DIAGNOSING ]: contents of /var/log
-rw-r--r-- 1 pihole pihole 108K Aug 18 13:50 /var/log/pihole-FTL.log
-----head of pihole-FTL.log------
[2022-08-18 08:39:16.511 11443M] Rate-limiting 192.168.1.1 for at least 1 second
[2022-08-18 08:39:17.754 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:40:04.478 11443M] Rate-limiting 192.168.1.1 for at least 13 seconds
[2022-08-18 08:40:17.816 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:41:08.283 11443M] Rate-limiting 192.168.1.1 for at least 9 seconds
[2022-08-18 08:41:17.879 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:41:57.288 11443M] Rate-limiting 192.168.1.1 for at least 20 seconds
[2022-08-18 08:42:17.940 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:43:05.577 11443M] Rate-limiting 192.168.1.1 for at least 12 seconds
[2022-08-18 08:43:17.001 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:44:03.097 11443M] Rate-limiting 192.168.1.1 for at least 14 seconds
[2022-08-18 08:44:17.063 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:45:02.351 11443M] Rate-limiting 192.168.1.1 for at least 15 seconds
[2022-08-18 08:45:17.125 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:46:07.070 11443M] Rate-limiting 192.168.1.1 for at least 10 seconds
[2022-08-18 08:46:17.188 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:47:04.357 11443M] Rate-limiting 192.168.1.1 for at least 13 seconds
[2022-08-18 08:47:17.254 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:47:57.520 11443M] Rate-limiting 192.168.1.1 for at least 20 seconds
[2022-08-18 08:48:17.315 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:48:59.321 11443M] Rate-limiting 192.168.1.1 for at least 18 seconds
[2022-08-18 08:49:17.376 11443/T11448] Ending rate-limitation of 192.168.1.1
[2022-08-18 08:49:55.434 11443M] Rate-limiting 192.168.1.1 for at least 22 seconds
[2022-08-18 08:50:17.437 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 1273 queries
[2022-08-18 08:51:17.497 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4219 queries
[2022-08-18 08:52:17.557 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4131 queries
[2022-08-18 08:53:17.619 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4193 queries
[2022-08-18 08:54:17.682 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4314 queries
[2022-08-18 08:55:17.743 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4271 queries
[2022-08-18 08:56:17.804 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4302 queries
[2022-08-18 08:57:17.867 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4132 queries
[2022-08-18 08:58:17.929 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4275 queries
[2022-08-18 08:59:17.002 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4590 queries
[2022-08-18 09:00:17.065 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4383 queries
[2022-08-18 09:01:17.127 11443/T11448] Still rate-limiting 192.168.1.1 as it made additional 4137 queries
-----tail of pihole-FTL.log------
[2022-08-18 13:37:26.831 597M] Resizing "FTL-queries" from 3244032 to (77824 * 44) == 3424256 (/dev/shm: 4.3MB used, 981.6MB total, FTL uses 4.3MB)
[2022-08-18 13:37:26.958 597M] Resizing "FTL-queries" from 3424256 to (81920 * 44) == 3604480 (/dev/shm: 4.5MB used, 981.6MB total, FTL uses 4.5MB)
[2022-08-18 13:37:27.078 597M] Resizing "FTL-queries" from 3604480 to (86016 * 44) == 3784704 (/dev/shm: 4.7MB used, 981.6MB total, FTL uses 4.7MB)
[2022-08-18 13:37:27.198 597M] Resizing "FTL-queries" from 3784704 to (90112 * 44) == 3964928 (/dev/shm: 4.8MB used, 981.6MB total, FTL uses 4.8MB)
[2022-08-18 13:37:27.320 597M] Resizing "FTL-queries" from 3964928 to (94208 * 44) == 4145152 (/dev/shm: 5.0MB used, 981.6MB total, FTL uses 5.0MB)
[2022-08-18 13:37:27.439 597M] Resizing "FTL-queries" from 4145152 to (98304 * 44) == 4325376 (/dev/shm: 5.2MB used, 981.6MB total, FTL uses 5.2MB)
[2022-08-18 13:37:27.555 597M] Resizing "FTL-queries" from 4325376 to (102400 * 44) == 4505600 (/dev/shm: 5.4MB used, 981.6MB total, FTL uses 5.4MB)
[2022-08-18 13:37:27.605 597M] Resizing "FTL-strings" from 122880 to (163840 * 1) == 163840 (/dev/shm: 5.6MB used, 981.6MB total, FTL uses 5.6MB)
[2022-08-18 13:37:27.663 597M] Resizing "FTL-queries" from 4505600 to (106496 * 44) == 4685824 (/dev/shm: 5.6MB used, 981.6MB total, FTL uses 5.6MB)
[2022-08-18 13:37:27.774 597M] Resizing "FTL-queries" from 4685824 to (110592 * 44) == 4866048 (/dev/shm: 5.8MB used, 981.6MB total, FTL uses 5.8MB)
[2022-08-18 13:37:27.900 597M] Resizing "FTL-queries" from 4866048 to (114688 * 44) == 5046272 (/dev/shm: 6.0MB used, 981.6MB total, FTL uses 6.0MB)
[2022-08-18 13:37:28.007 597M] Resizing "FTL-queries" from 5046272 to (118784 * 44) == 5226496 (/dev/shm: 6.1MB used, 981.6MB total, FTL uses 6.1MB)
[2022-08-18 13:37:28.129 597M] Resizing "FTL-queries" from 5226496 to (122880 * 44) == 5406720 (/dev/shm: 6.3MB used, 981.6MB total, FTL uses 6.3MB)
[2022-08-18 13:37:28.248 597M] Resizing "FTL-queries" from 5406720 to (126976 * 44) == 5586944 (/dev/shm: 6.5MB used, 981.6MB total, FTL uses 6.5MB)
[2022-08-18 13:37:28.341 597M] Imported 126744 queries from the long-term database
[2022-08-18 13:37:28.342 597M] -> Total DNS queries: 126744
[2022-08-18 13:37:28.342 597M] -> Cached DNS queries: 15713
[2022-08-18 13:37:28.342 597M] -> Forwarded DNS queries: 99461
[2022-08-18 13:37:28.342 597M] -> Blocked DNS queries: 11505
[2022-08-18 13:37:28.342 597M] -> Unknown DNS queries: 3
[2022-08-18 13:37:28.342 597M] -> Unique domains: 2454
[2022-08-18 13:37:28.342 597M] -> Unique clients: 2
[2022-08-18 13:37:28.342 597M] -> Known forward destinations: 2
[2022-08-18 13:37:28.342 597M] Successfully accessed setupVars.conf
[2022-08-18 13:37:28.347 597M] listening on 0.0.0.0 port 53
[2022-08-18 13:37:28.348 597M] listening on :: port 53
[2022-08-18 13:37:28.352 603M] PID of FTL process: 603
[2022-08-18 13:37:28.353 603/T604] Listening on port 4711 for incoming IPv4 telnet connections
[2022-08-18 13:37:28.353 603/T606] Listening on Unix socket
[2022-08-18 13:37:28.355 603/T605] Listening on port 4711 for incoming IPv6 telnet connections
[2022-08-18 13:37:28.355 603M] INFO: FTL is running as user pihole (UID 999)
[2022-08-18 13:37:28.359 603M] Reloading DNS cache
[2022-08-18 13:37:28.473 603/T607] Compiled 1 whitelist and 1 blacklist regex filters for 2 clients in 10.5 msec
[2022-08-18 13:37:28.473 603/T607] Blocking status is enabled
[2022-08-18 13:50:48.621 603M] WARN: Found database entries in the future (2022-08-18 13:55:00 (1660856100), last timestamp for importing: 2022-08-18 13:35:00 (1660854900)). Your over-time statistics may be incorrect (found in src/dnsmasq_interface.c:667)
*** [ DIAGNOSING ]: contents of /dev/shm
-rw------- 1 pihole pihole 668K Aug 18 13:37 /dev/shm/FTL-clients
-rw------- 1 pihole pihole 240 Aug 18 13:37 /dev/shm/FTL-counters
-rw------- 1 pihole pihole 4.0K Aug 18 13:37 /dev/shm/FTL-dns-cache
-rw------- 1 pihole pihole 60K Aug 18 13:50 /dev/shm/FTL-domains
-rw------- 1 pihole pihole 56 Aug 18 13:37 /dev/shm/FTL-lock
-rw------- 1 pihole pihole 12K Aug 18 13:37 /dev/shm/FTL-overTime
-rw------- 1 pihole pihole 4.0K Aug 18 13:37 /dev/shm/FTL-per-client-regex
-rw------- 1 pihole pihole 5.4M Aug 18 13:37 /dev/shm/FTL-queries
-rw------- 1 pihole pihole 12 Aug 18 13:37 /dev/shm/FTL-settings
-rw------- 1 pihole pihole 160K Aug 18 13:37 /dev/shm/FTL-strings
-rw------- 1 pihole pihole 156K Aug 18 13:37 /dev/shm/FTL-upstreams
*** [ DIAGNOSING ]: contents of /etc
-rw-r--r-- 1 root root 24 May 16 13:14 /etc/dnsmasq.conf
conf-dir=/etc/dnsmasq.d
-rw-r--r-- 1 root root 64 Jul 12 13:39 /etc/resolv.conf
nameserver 1.1.1.1
nameserver 1.0.0.1
*** [ DIAGNOSING ]: Pi-hole diagnosis messages
*** [ DIAGNOSING ]: Locale
LANG=
*** [ DIAGNOSING ]: Pi-hole log
-rw-r--r-- 1 pihole pihole 522M Aug 18 13:50 /var/log/pihole.log
-----head of pihole.log------
Aug 18 00:00:09 dnsmasq[11443]: query[A] cooper.logs.roku.com from 192.168.1.1
Aug 18 00:00:09 dnsmasq[11443]: gravity blocked cooper.logs.roku.com is 0.0.0.0
Aug 18 00:00:09 dnsmasq[11443]: query[AAAA] cooper.logs.roku.com from 192.168.1.1
Aug 18 00:00:09 dnsmasq[11443]: gravity blocked cooper.logs.roku.com is ::
Aug 18 00:00:11 dnsmasq[11443]: query[A] cc-api-data.adobe.io from 192.168.1.1
Aug 18 00:00:11 dnsmasq[11443]: gravity blocked cc-api-data.adobe.io is 0.0.0.0
Aug 18 00:00:11 dnsmasq[11443]: query[AAAA] cc-api-data.adobe.io from 192.168.1.1
Aug 18 00:00:11 dnsmasq[11443]: gravity blocked cc-api-data.adobe.io is ::
Aug 18 00:00:14 dnsmasq[11443]: query[A] e.reddit.com from 192.168.1.1
Aug 18 00:00:14 dnsmasq[11443]: gravity blocked e.reddit.com is 0.0.0.0
Aug 18 00:00:19 dnsmasq[11443]: query[A] www.google.com from 192.168.1.1
Aug 18 00:00:19 dnsmasq[11443]: cached www.google.com is 142.251.46.228
Aug 18 00:00:20 dnsmasq[11443]: query[A] v10.events.data.microsoft.com from 192.168.1.1
Aug 18 00:00:20 dnsmasq[11443]: forwarded v10.events.data.microsoft.com to 1.1.1.1
Aug 18 00:00:20 dnsmasq[11443]: query[AAAA] v10.events.data.microsoft.com from 192.168.1.1
Aug 18 00:00:20 dnsmasq[11443]: forwarded v10.events.data.microsoft.com to 1.1.1.1
Aug 18 00:00:20 dnsmasq[11443]: query[A] v10.events.data.microsoft.com from 192.168.1.1
Aug 18 00:00:20 dnsmasq[11443]: forwarded v10.events.data.microsoft.com to 1.1.1.1
Aug 18 00:00:20 dnsmasq[11443]: forwarded v10.events.data.microsoft.com to 1.0.0.1
Aug 18 00:00:20 dnsmasq[11443]: query[AAAA] v10.events.data.microsoft.com from 192.168.1.1
-----tail of pihole.log------
Aug 18 13:38:40 dnsmasq[603]: forwarded 1.0.0.1.in-addr.arpa to 1.0.0.1
Aug 18 13:38:45 dnsmasq[603]: query[PTR] 1.0.0.1.in-addr.arpa from 127.0.0.1
Aug 18 13:38:45 dnsmasq[603]: forwarded 1.0.0.1.in-addr.arpa to 1.1.1.1
Aug 18 13:38:45 dnsmasq[603]: forwarded 1.0.0.1.in-addr.arpa to 1.0.0.1
Aug 18 13:50:48 dnsmasq[603]: query[A] stats.adobe.com from 127.0.0.1
Aug 18 13:50:48 dnsmasq[603]: gravity blocked stats.adobe.com is 0.0.0.0
Aug 18 13:50:48 dnsmasq[603]: query[A] stats.adobe.com from 192.168.1.59
Aug 18 13:50:48 dnsmasq[603]: gravity blocked stats.adobe.com is 0.0.0.0
Aug 18 13:50:49 dnsmasq[603]: query[PTR] 59.1.168.192.in-addr.arpa from 127.0.0.1
Aug 18 13:50:49 dnsmasq[603]: config 59.1.168.192.in-addr.arpa is <PTR>
Aug 18 13:50:49 dnsmasq[603]: query[AAAA] tgzobwoutuwn.com from ::1
Aug 18 13:50:49 dnsmasq[603]: gravity blocked tgzobwoutuwn.com is ::
Aug 18 13:50:49 dnsmasq[603]: query[AAAA] tgzobwoutuwn.com from fdfa:464e:34f2:0:ebfe:a950:85a3:ad26
Aug 18 13:50:49 dnsmasq[603]: gravity blocked tgzobwoutuwn.com is ::
Aug 18 13:50:49 dnsmasq[603]: query[AAAA] tgzobwoutuwn.com from fe80::d048:70b1:abfc:98ba
Aug 18 13:50:49 dnsmasq[603]: gravity blocked tgzobwoutuwn.com is ::
Aug 18 13:50:50 dnsmasq[603]: query[PTR] 6.2.d.a.3.a.5.8.0.5.9.a.e.f.b.e.0.0.0.0.2.f.4.3.e.4.6.4.a.f.d.f.ip6.arpa from 127.0.0.1
Aug 18 13:50:50 dnsmasq[603]: config 6.2.d.a.3.a.5.8.0.5.9.a.e.f.b.e.0.0.0.0.2.f.4.3.e.4.6.4.a.f.d.f.ip6.arpa is <PTR>
Aug 18 13:50:50 dnsmasq[603]: query[PTR] a.b.8.9.c.f.b.a.1.b.0.7.8.4.0.d.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa from 127.0.0.1
Aug 18 13:50:50 dnsmasq[603]: config a.b.8.9.c.f.b.a.1.b.0.7.8.4.0.d.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa is <PTR>
********************************************
********************************************
[✓] ** FINISHED DEBUGGING! **
* The debug log can be uploaded to tricorder.pi-hole.net for sharing with developers only.
[i] Debug script running in automated mode
* Using curl for transmission.
* curl failed, contact Pi-hole support for assistance.
* Error message: curl: (6) Could not resolve host: tricorder.pi-hole.net
[✗] There was an error uploading your debug log.
* Please try again or contact the Pi-hole team for assistance.
* A local copy of the debug log can be found at: /var/log/pihole_debug.log
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment