DNS entry flooding

Question

DNS entry flooding

Soham 20

We are receiving a flood of DNS entries on DHCP logfile. 3 entries per second for each asset. This situation starts at 00:00 in the day and continues till 23:59hrs in the night.

The cycle continues with entries like:

DNS Update Request: DNS update request to the named DNS server. (IP Address x.x.x.x)

DNS Update Failed: DNS update failed. (IP Address x.x.x.x)

Renew: A lease was renewed by a client. (IP Address y.y.y.y)

DNS Update Successful: DNS update successful. (IP Address y.y.y.y)

DNS Update Request: DNS update request to the named DNS server. (IP Address y.y.y.y)

It keeps on switching between ip address (x.x.x.x) to (y.y.y.y) for the same notebook.

Any suggestions are welcome.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Anonymous

Has it been rebooted? Does it have multiple adapters? Might check the event logs on notebook for clues.

Soham 20 Reputation points

2023-03-17T23:01:45.2233333+00:00

Our DHCP servers were rebooted, the problem is, it is not bound to one notebook, but all assets are behaving abnormally and the DHCP logs are exponentially growing each day with so many entries.
Anonymous

2023-03-17T23:07:50.1233333+00:00

It keeps on switching between ip address (x.x.x.x) to (y.y.y.y) for the same notebook.

Ok well I guess this wasn't quite true. Hard to say, no history here. Might still want to check a problematic one for clues. Beyond that I'd suggest starting a case here with product support.
https://support.serviceshub.microsoft.com/supportforbusiness

-

--please don't forget to upvote and Accept as answer if the reply is helpful--