Why is NextDNS resorting back to using Russian DNS servers - 37.252.254.39?

NextDNS 

The source code of this tool is available at https://github.com/nextdns/diag

Do you want to continue? (press enter to accept)y
Resolvers:   74.40.74.40,74.40.74.41
Testing IPv6 connectivity
  available: false
Fetching https://test.nextdns.io
Fetch error: Get "https://test.nextdns.io": dial tcp: lookup test.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Fetching PoP name for ultra low latency primary IPv4 (ipv4.dns1.nextdns.io)
Fetch error: Get "https://dns.nextdns.io/info": dial tcp: lookup ipv4.dns1.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Fetching PoP name for ultra low latency secondary IPv4 (ipv4.dns2.nextdns.io)
Fetch error: Get "https://dns.nextdns.io/info": dial tcp: lookup ipv4.dns2.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Fetching PoP name for anycast primary IPv4 (45.90.28.0)
  vultr-ewr: 8.042ms
Fetching PoP name for anycast secondary IPv4 (45.90.30.0)
  anexia-mow: 125.992ms
Pinging PoPs
error: Get "https://router.nextdns.io/?limit=10&stack=dual": dial tcp: lookup router.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Traceroute error: lookup ipv4.dns1.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Traceroute error: lookup ipv4.dns2.nextdns.io on 127.0.0.1:53: dial udp: lookup 74.40.74.40,74.40.74.41: no such host
Traceroute for anycast primary IPv4 (45.90.28.0)
    1   32.221.200.1    2ms   1ms   2ms
    2   172.76.21.25    2ms   2ms   2ms
    3  45.52.201.234    5ms   6ms   5ms
    4  74.41.143.173    9ms  12ms   6ms
    5     4.68.10.29    6ms   6ms   6ms

Lucasa 

Lucasa 

Lucasa 

Appears to be USA only for now; thank you... Im going to sleep, Happy Thanksgiving. Email me if you need anything.

Been using OPNsense (attached config for NextDNS) for years with DNS over TLS; works wonderfully, allows me to filter as needed and I watch the Analytics constantly; noticed Russian Federation, since I block RU and CN, I became concerned.

Ran https://browserleaks.com/dns and noticed the Russian DNS servers (masquerading as German?), so I reported it.

Hope this helps,

Lucas

lucasa@laengine.com

Lucasa 

Its back again.....

Lucasa 

IP Address Lookup
IP Address    37.252.254.39
Hostname dns.nextdns.io
Hide Your IP AddressIP Address Location
Country    Russia (RU)
State/Region    Moscow
City    Moscow
ISP    ANEXIA Internetdienstleistungs GmbH
Organization    ANX
Network    AS42473 ANEXIA Internetdienstleistungs GmbH (VPN, TOR)
Usage Type    Corporate / Hosting
Timezone    Europe/Moscow (MSK)
Local Time    Thu, 28 Nov 2024 07:52:58 +0300
Coordinates    55.7558,37.6173
Tor Relay Details
Relays    This IP is not identified to be a Tor Relay

Lucasa 

Should be this "instead of dns.nextdns.io"

IP Location via IP2Location(PRODUCT: DB, NOVEMBER 16 2024)

 IP: 37.252.254.39

 COUNTRY: Russian Federation

 COUNTRY ISO: RU

 STATE: Moskva

 CITY: Moscow

 POSTAL CODE: 101990

 LATITUDE: 55.7522

 LONGITUDE: 37.6154

 ORGANIZATION: ANEXIA Internetdienstleistungs GmbH

 ISP: ANEXIA Internetdienstleistungs GmbH

Lucasa 

Using Quad9 - 39.254.252.37.in-addr.arpa. 3600 IN PTR dns.nextdns.io.

PTR[HIDE RAW]

id: 34500
opcode: QUERY
status: NOERROR
flags: QR RD RA CD
;; QUESTION SECTION:
;39.254.252.37.in-addr.arpa. IN PTR
;; ANSWER SECTION:
39.254.252.37.in-addr.arpa. 3600 IN PTR dns.nextdns.io.

TypeDomain NameTTLCanonical Name

PTR37.252.254.393600

dns.nextdns.io.

NextDNS 

Thank you, https://browserleaks.com/dns looks correct (below) and Analytics shows "no Russian Federation" overnight.

We value your service amd appreciate your time...

Happy Thanksgiving,

Lucas 

DNS Leak Test
Incorrect network configurations or faulty VPN/proxy software can lead to your device sending DNS requests directly to your ISP's server, potentially enabling ISPs or other third parties to monitor your online activity.

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

Your IP Address
IP Address    32.220.169.126
ISP    Southern New England Telephone Company and SNET America
Location    United States, New Haven
Hide Your IP AddressDNS Leak Test
Test Results    Found 4 Servers, 2 ISP, 2 Locations
Your DNS Servers    
IP Address :    ISP :    Location :
66.135.25.157    The Constant Company, LLC    United States, Piscataway
162.220.223.23    ANEXIA Internetdienstleistungs GmbH    United States, New York
2001:19f0:c:a8e:3eec:efff:feb9:eede    The Constant Company, LLC    United States, Piscataway
2a00:11c0:46:4::5    ANEXIA Internetdienstleistungs GmbH    United States, New York

Lucasa 

Refreshing https://browserleaks.com/dns shows 6 Servers, 3 ISP, 4 Locations; all in USA.

Thank you,

Lucas

DNS Leak Test
Incorrect network configurations or faulty VPN/proxy software can lead to your device sending DNS requests directly to your ISP's server, potentially enabling ISPs or other third parties to monitor your online activity.

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

Your IP Address
IP Address    32.220.169.126
ISP    Southern New England Telephone Company and SNET America
Location    United States, New Haven
Hide Your IP AddressDNS Leak Test
Test Results    Found 6 Servers, 3 ISP, 4 Locations
Your DNS Servers    
IP Address :    ISP :    Location :
66.135.25.157    The Constant Company, LLC    United States, Piscataway
162.220.223.23    ANEXIA Internetdienstleistungs GmbH    United States, New York
199.119.65.94    Misaka Network, Inc.    United States, Dover
2001:19f0:c:a8e:3eec:efff:feb9:eede    The Constant Company, LLC    United States, Piscataway
2a00:11c0:46:4::5    ANEXIA Internetdienstleistungs GmbH    United States, New York
2a0b:4342:1a32:f:5054:ff:fe48:d17f    Misaka Network, Inc.    United States, Ashburn

Lucasa 

Refreshing https://browserleaks.com/dns found 4 Servers, 2 ISP, 3 Locations

went down from 6 servers to 4 servers (inconsistent)?

DNS Leak Test
Incorrect network configurations or faulty VPN/proxy software can lead to your device sending DNS requests directly to your ISP's server, potentially enabling ISPs or other third parties to monitor your online activity.

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

Your IP Address
IP Address    32.220.169.126
ISP    Southern New England Telephone Company and SNET America
Location    United States, New Haven
Hide Your IP AddressDNS Leak Test
Test Results    Found 4 Servers, 2 ISP, 3 Locations
Your DNS Servers    
IP Address :    ISP :    Location :
66.135.25.157    The Constant Company, LLC    United States, Piscataway
199.119.65.94    Misaka Network, Inc.    United States, Dover
2001:19f0:c:a8e:3eec:efff:feb9:eede    The Constant Company, LLC    United States, Piscataway
2a0b:4342:1a32:f:5054:ff:fe48:d17f    Misaka Network, Inc.    United States, Ashburn

Lucasa 

Refreshing https://browserleaks.com/dns found 8 Servers, 5 ISP, 5 Locations

Went from 6 to 4 to 8...

Best,

Lucas

DNS Leak Test
Incorrect network configurations or faulty VPN/proxy software can lead to your device sending DNS requests directly to your ISP's server, potentially enabling ISPs or other third parties to monitor your online activity.

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

Your IP Address
IP Address    32.220.169.126
ISP    Southern New England Telephone Company and SNET America
Location    United States, New Haven
Hide Your IP AddressDNS Leak Test
Test Results    Found 8 Servers, 5 ISP, 5 Locations
Your DNS Servers    
IP Address :    ISP :    Location :
66.135.25.157    The Constant Company, LLC    United States, Piscataway
162.220.223.23    ANEXIA Internetdienstleistungs GmbH    United States, New York
172.70.109.96    Cloudflare    United States, Newark
199.119.65.94    Misaka Network, Inc.    United States, Dover
208.69.32.192    Cisco OpenDNS, LLC    United States, Ashburn
2001:19f0:c:a8e:3eec:efff:feb9:eede    The Constant Company, LLC    United States, Piscataway
2a00:11c0:46:4::5    ANEXIA Internetdienstleistungs GmbH    United States, New York
2a0b:4342:1a32:f:5054:ff:fe48:d17f    Misaka Network, Inc.    United States, Ashburn
 

Lucasa 

Dear Nino,

Thank you for the explanation and resolving the issue.

Best,

Lucas