Be sure to note, most DNS scans are legitimate traffic. These are requests of our DNS server to provide our home server's DNS records. Some, however, are not legitimate. Our tripwire and honeypot software, do not distinquish between legitimate DNS requests, and those which are hacker attacks. This difference can only be discerned by examination of records. Legitimate traffic passes through and receives a response. Others, well, there are times they receive precisely what they want, and a bit more.
All else you view in these graphical charts, are actual hacker attacks. Many of these attacks are stopped immediately by our androids, Robby and Roberta, after gathering enough data to verify unlawful traffic. What you see, is not a representation of all hacker attacks with many of these hackers suffering defensive measures such as shutting down their systems or mirroring back their DDOS attacks. Otherwords, these records fall short of actual numbers with a hacker's ability to continue attacking, brought to an unpleasant halt.