Detections
Analytics
Google Public DNS Usage Detection
info Nessus Network Monitor Plugin ID 8996
Synopsis
The remote host is utilizing Google's public DNS service.Description
The remote host was observed making DNS queries to one or more Google public DNS servers. Utilizing Google's public DNS service may allow users to bypass web filtering or circumvent other security measures. Malicious actors may also use these servers in an attempt to discretely reach out to internet resources while remaining undetected.Google Public DNS Addresses :
- 8.8.8.8
- 8.8.4.4
Solution
Ensure this DNS configuration is sanctioned by policy and guidelines regarding acceptable network usage.See Also
https://developers.google.com/speed/public-dns
http://googlecode.blogspot.com/2009/12/introducing-google-public-dns-new-dns.html