Skip navigation

I'm receiving a lot of DNS event log 5504 errors from four hosts, all with an IP address of 216.73.8x.10. What are they?

A. The four hosts are,, and, which are the name servers for, although you might see other addresses. The event description is:

The DNS server encountered an invalid domain name in a packet from <IP address>. The packet is rejected.

You might find the clients trying to contact various other servers, such as,, and The error is caused by the DNS cache-pollution protection not accepting resolutions from nonauthoritative servers. (See the Microsoft article "Description of the DNS Server Secure Cache Against Pollution setting," for more information). You could consider blocking at the firewall or monitor the traffic at a firewall level to ascertain which machines on your network are originating the requests.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.