Comment by xena

Comment by xena 3 months ago

6 replies

Randomly selected IPs from my logs show that 80% of them have the matching that forward confirming reverse DNS domain. The most aggressive ones were from the amazonbot domain.

Believe what you want though. Search for `xeiaso.net` in ticketing if you want proof.

guardiangod 3 months ago

So you said the IPs are residential IP, but their reverse DNS points to a amazonbot domain? Does that even make sense?

petee 3 months ago

Reverse DNS doesn't mean much, they can set it to anything; can you forward match them to any amazon domain?

  • xena 3 months ago

    It's forward confirming reverse DNS. I assumed that everyone does that by default.

    • petee 2 months ago

      What everyone does by default doesn't matter really here, it's that an IP owner/user can literally set the reverse to any arbitrary domain regardless if the actual domain has a record for that IP. What matters is both match, thats all I meant

      • nalllar 2 months ago

        xena said "forward confirming reverse" twice which means rdns and then resolving that forward to confirm it matches.

        • petee 2 months ago

          I don't know if it was edited or I missed it in the first post but you're right.

          I'd still be surprised if an Amazon domain resolved to a residential IP