[Dshield] IP -> fqdn lookup
Darren Spruell
phatbuckett at gmail.com
Thu Jan 3 21:41:36 GMT 2008
On Jan 3, 2008 2:18 PM, Paul Ferguson <fergdawg at netzero.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> - -- "Darren Spruell" <phatbuckett at gmail.com> wrote:
>
> >I've seen some folks reporting lookups from a service that reports
> >what DNS hostnames a given IP address has / has had recently. Not
> >talking about reverse DNS name, though.
> >
> >Could someone suggest what service that is?
>
> Are you thinking of Passive DNS Replications services? It's hard to
> tell from your description...
>
> If so, here's a good one:
>
> http://cert.uni-stuttgart.de/stats/dns-replication.php
Yeah, sorry for the vague description. That's the site I was thinking
about, thanks.
I don't have good success with lookups though, they tend to fail all
the time with
"The query processing server could not be reached."
or
"The server did not return any data. The server status is 201 Okay."
Is this typically a reliable source of information?
DS
More information about the list
mailing list