[dns-operations] Strange queries found in querylog

SM sm at resistor.net
Mon Jun 15 09:16:07 UTC 2009


At 00:03 15-06-2009, Steffen Kluge wrote:
>As far as I can tell, the queries are always for A records of the form
>"d.random.ts.ciphertrust.net", and the "random" part always changes. The
>queries always return IP addresses in unallocated netblocks. For example
>the query above returns "0.0.0.116".

These are hashes which are sent in a DNS query.  The IP address 
returned is used as a score.

Regards,
-sm 




More information about the dns-operations mailing list