Seeing some strange DNS queries?

Seeing some DNS queries in my work network that I cannot explain. Would anyone have any insight for me? Thank you. https://i.imgur.com/1WZ9wra.jpg

1 Answer

Sort by » oldest newest most voted

Chuckc
3023 ●6 ●608 ●20

Looks like the .67 node is looking for Windows shares that don't exist.
If there is nothing obvious in the system config, you can dig deeper with Windows sysinternals.

Here are examples of using sysinternals tools to look at network traffic on Windows:
Get IP/host informations of an app.
UDP Port 889 Broadcast (ip.ttl "Time to Live" only 1)

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 follower

Asked: 2020-12-03 15:49:50 +0000

Seen: 518 times

Last updated: Dec 03 '20