Speaker
Description
Bogon IP address space includes private, reserved, special-purpose, and unallocated IP ranges that are generally not expected in public DNS responses. Nevertheless, these addresses appear frequently in passive DNS data, and their presence does not always have the same operational meaning.
DNS answers containing bogon addresses can reveal how organizations name and connect services under operational constraints. Private address plans, cloud migration, automation, and security practices can all leave fingerprints in DNS. Our contribution is to investigate this signal at scale and distinguish some of its dominant mechanisms.
In this talk, I present an empirical characterization of domain names and resource record sets associated with bogon addresses. Using longitudinal passive DNS observations, we analyze their prevalence over time, address categories, record types, naming patterns, and likely operational contexts.
| Talk duration | 15 Minutes (pre-recorded no Q&A) |
|---|
