Alerts from 127.0.0.53

[Taomyn]

I recently updated the Fedora 41 server running my OpenCanary and now each midnight I receive the following 4 alerts:

{"dst_host": "127.0.0.1", "dst_port": "37782", "local_time": "2025-03-25 23:01:00.295012", "local_time_adjusted": "2025-03-26 00:01:00.295081", "logdata": {"ACK": "", "DF": "", "ID": "0", "IN": "lo", "LEN": "60", "MAC": "00:00:00:00:00:00:00:00:00:00:00:00:08:00", "OUT": "", "PREC": "0x00", "PROTO": "TCP", "RES": "0x00", "SYN": "", "TOS": "0x00", "TTL": "1", "URGP": "0", "WINDOW": "65483"}, "logtype": 5001, "node_id": "frink-01", "src_host": "127.0.0.53", "src_port": "53", "utc_time": "2025-03-25 23:01:00.295075"}

{"dst_host": "127.0.0.1", "dst_port": "37782", "local_time": "2025-03-25 23:01:00.389722", "local_time_adjusted": "2025-03-26 00:01:00.389747", "logdata": {"ACK": "", "DF": "", "ID": "4548", "IN": "lo", "LEN": "52", "MAC": "00:00:00:00:00:00:00:00:00:00:00:00:08:00", "OUT": "", "PREC": "0x00", "PROTO": "TCP", "RES": "0x00", "TOS": "0x00", "TTL": "1", "URGP": "0", "WINDOW": "512"}, "logtype": 5001, "node_id": "frink-01", "src_host": "127.0.0.53", "src_port": "53", "utc_time": "2025-03-25 23:01:00.389742"}

{"dst_host": "127.0.0.1", "dst_port": "37782", "local_time": "2025-03-25 23:01:00.472883", "local_time_adjusted": "2025-03-26 00:01:00.472908", "logdata": {"ACK": "", "DF": "", "ID": "0", "IN": "lo", "LEN": "60", "MAC": "00:00:00:00:00:00:00:00:00:00:00:00:08:00", "OUT": "", "PREC": "0x00", "PROTO": "TCP", "RES": "0x00", "SYN": "", "TOS": "0x00", "TTL": "1", "URGP": "0", "WINDOW": "65483"}, "logtype": 5001, "node_id": "frink-01", "src_host": "127.0.0.53", "src_port": "53", "utc_time": "2025-03-25 23:01:00.472903"}

{"dst_host": "127.0.0.1", "dst_port": "37782", "local_time": "2025-03-25 23:01:00.557734", "local_time_adjusted": "2025-03-26 00:01:00.557761", "logdata": {"ACK": "", "DF": "", "ID": "4548", "IN": "lo", "LEN": "52", "MAC": "00:00:00:00:00:00:00:00:00:00:00:00:08:00", "OUT": "", "PREC": "0x00", "PROTO": "TCP", "RES": "0x00", "TOS": "0x00", "TTL": "1", "URGP": "0", "WINDOW": "512"}, "logtype": 5001, "node_id": "frink-01", "src_host": "127.0.0.53", "src_port": "53", "utc_time": "2025-03-25 23:01:00.557757"}

Nothing more is alerted until the next day.

Any idea if I can suppress these? I'm not sure why they suddenly started, but it seems it's related to the local DNS service so I don't think it's malicious.