Hi,

Recently I have come across this random ping from my main deco m5 to popular domains such as live.com, amazon.com, reddit.com, linkedin.com, facebook.com, a.root-servers.net

My network setup TL-ER6120 as my main DHCP/ VPN Router, Raspberry Pi managing my DNS and 3x Deco M5 as AP.  My DNS log shows that the main Deco M5 is making this request each and every minute. 

I don't understand why if this is designed in such a way to work then aren't we contributing to a coordinated DDOS? First of all, why should it ping to these domains? If it's just to check if my connection is active/ up then why not google.com for the ping? there are other better ways to do the same