Bogon IP address space includes private, reserved, special-purpose, and unallocated IP ranges that are generally not expected in public DNS responses. Nevertheless, these addresses appear frequently in passive DNS data, and their presence does not always have the same operational meaning.
DNS answers containing bogon addresses can reveal how organizations name and connect services under...
Long-term passive DNS data contains patterns that are difficult to uncover through conventional analysis. Aggregating large datasets is necessary for scalability, but overly aggressive aggregation can hide temporal patterns and unexpected behavior. Moreover, different users may be interested in different aspects of the same traffic, making fixed analyses and visualizations limiting.
We...
