#OpenClaw is spamming my Pi-hole log with DNS queries

1 messages · Page 1 of 1 (latest)

indigo nexus
#

OpenClaw is spamming my Pi-hole log with DNS queries. It’s constantly requesting the domain w.x.y.z or w.x.y.z.local. After30 minutes, I’m seeing around 40k requests.
What can I do about this? Is this a bug?

greetings
S!XEr

Feb 6 15:17:21 dnsmasq[158]: query[A] w.x.y.z.local from 10.0.10.9
Feb 6 15:17:21 dnsmasq[158]: cached w.x.y.z.local is NXDOMAIN
Feb 6 15:17:21 dnsmasq[158]: query[AAAA] w.x.y.z.local from 10.0.10.9
Feb 6 15:17:21 dnsmasq[158]: cached w.x.y.z.local is NXDOMAIN
Feb 6 15:17:21 dnsmasq[158]: query[A] w.x.y.z from 10.0.10.9
Feb 6 15:17:21 dnsmasq[158]: cached w.x.y.z is NXDOMAIN

gaunt nestBOT
#

To help others find answers, you can mark your question as solved via Right click solution message -> Apps -> âś… Mark Solution

flint trenchBOT
# indigo nexus OpenClaw is spamming my Pi-hole log with DNS queries. It’s constantly requesting...

@indigo nexus That’s not “normal background DNS” — it almost always means something in the OpenClaw stack is repeatedly trying to connect to a hostname that doesn’t resolve, and because Node/browser networking doesn’t cache DNS much, you’ll see a ton of repeated A/AAAA lookups.

A few key clues from your snippet:

  • Seeing both w.x.y.z.local and w.x.y.z is typically just your resolver’s search suffix / ndots behavior (it tries with .local first, then the plain name).
  • The volume (40k / 30 min) strongly suggests a tight retry loop somewhere (missing backoff).

To narrow it down, can you answer 2 quick questions and paste one command output?

  1. What device is 10.0.10.9 (the gateway host? or a PC that has the Control UI open in a browser tab)?
  2. If you stop OpenClaw, do the DNS queries stop immediately?

Then please paste:

  • openclaw --version
  • openclaw status --all (safe-ish to share; it redacts tokens)