[dns-operations] Strange queries found in querylog
sm at resistor.net
Mon Jun 15 09:16:07 UTC 2009
At 00:03 15-06-2009, Steffen Kluge wrote:
>As far as I can tell, the queries are always for A records of the form
>"d.random.ts.ciphertrust.net", and the "random" part always changes. The
>queries always return IP addresses in unallocated netblocks. For example
>the query above returns "0.0.0.116".
These are hashes which are sent in a DNS query. The IP address
returned is used as a score.
More information about the dns-operations