Queries to githubusercontent.com

RouterOS
1

Hi,

I have a Mikrotik router with RouterOS installed, and after monitoring the DNS queries, I realised it is making DNS queries to the domain raw.githubusercontent.com.

I have not installed anything from any third party neither installed any custom script, so the device is running a proper and up-to-date firmware.

Can someone tell me why my router is making queries to this domain, please ?

Thanks.

2

Check if your DNS settings have “allow remote requests” enabled, in that case, any user in your LAN will be using your router for DNS. Also in the command line (terminal), type “/export” and see if anything is configured regarding this domain.

RouterOS by default is not making queries to github.

3

You likely have to investigate further. Just two pointers:

  • Mikrotiks are often configured as dns recursors, so they look up whatever their clients request
  • if you use the Adlist feature, many blocklists are hosted on githubusercontent (e.g. the official MT tutorial suggests such a list)
4

Thanks for the suggestions. No, I don’t use any adlist feature.

5

Thanks, I will do that.