Google Public DNS Usage Detection

info Nessus Network Monitor Plugin ID 8996

Synopsis

The remote host is utilizing Google's public DNS service.

Description

The remote host was observed making DNS queries to one or more Google public DNS servers. Utilizing Google's public DNS service may allow users to bypass web filtering or circumvent other security measures. Malicious actors may also use these servers in an attempt to discretely reach out to internet resources while remaining undetected.

Google Public DNS Addresses :
- 8.8.8.8
- 8.8.4.4

Solution

Ensure this DNS configuration is sanctioned by policy and guidelines regarding acceptable network usage.

See Also

https://developers.google.com/speed/public-dns

http://googlecode.blogspot.com/2009/12/introducing-google-public-dns-new-dns.html

Plugin Details

Severity: Info

ID: 8996

Family: Policy

Published: 11/17/2015

Updated: 11/19/2015