NextDNS · home network device coverage
29 MAY 2026 · window -24h
At a glance
- ❌ RED — 32.1% of queries from unidentified devices (34,597 of 107,797)
- 5 named device(s) accounting for 73,200 queries
- Threshold: ≤5% green · 5-20% amber · >20% red
Why this matters
Unidentified traffic is the home-network equivalent of an unaccounted-for log line — something is making DNS queries and we can’t tell which device it is. Most often it’s: a router doing recursive resolution (forward to NextDNS but don’t tag with device id), an IoT device NextDNS can’t fingerprint, or a device that’s deliberately or accidentally bypassing the profile (guest Wi-Fi, plain-DNS escape, VPN flip).
The fix is one of: name the device in the NextDNS dashboard so it stops rolling up under UNIDENTIFIED, or configure the router to forward per-client DNS rather than recursing centrally.
Device breakdown
| Device | Queries | Share |
|---|---|---|
unidentified (__UNIDENTIFIED__) |
34,597 | 32.1% |
| Apple TV Upstairs | 22,821 | 21.2% |
| Dan’s M2 | 18,520 | 17.2% |
| iPhone 13 Pro | 12,654 | 11.7% |
| Audrey iMac M1 | 10,873 | 10.1% |
| Lounge TV | 8,332 | 7.7% |
What to do next
- Open https://my.nextdns.io/9bb389/analytics/devices and look at the UNIDENTIFIED bucket.
- Cross-reference with router/DHCP leases — which IP is sending the queries?
- If it’s the router itself: configure per-client DNS forwarding (LAN clients query NextDNS directly via DHCP option 6, not through the router’s recursive resolver).
- If it’s a real device: name it in the NextDNS dashboard so it leaves the unidentified bucket.
Generated by dare_nextdns_audit.py --check device_coverage