Comment by xena

Comment by xena 3 months ago

Randomly selected IPs from my logs show that 80% of them have the matching that forward confirming reverse DNS domain. The most aggressive ones were from the amazonbot domain.

Believe what you want though. Search for `xeiaso.net` in ticketing if you want proof.

guardiangod 3 months ago

So you said the IPs are residential IP, but their reverse DNS points to a amazonbot domain? Does that even make sense?

Reply View 0 replies

petee 3 months ago

Reverse DNS doesn't mean much, they can set it to anything; can you forward match them to any amazon domain?

Reply View 4 replies

xena 3 months ago

It's forward confirming reverse DNS. I assumed that everyone does that by default.

Reply View | 3 replies
- petee 3 months ago
  
  What everyone does by default doesn't matter really here, it's that an IP owner/user can literally set the reverse to any arbitrary domain regardless if the actual domain has a record for that IP. What matters is both match, thats all I meant
  
  Reply View | 2 replies
  
  nalllar 3 months ago
  
  xena said "forward confirming reverse" twice which means rdns and then resolving that forward to confirm it matches.
  
  Reply View | 1 reply
  
  petee 3 months ago
  
  I don't know if it was edited or I missed it in the first post but you're right.
  I'd still be surprised if an Amazon domain resolved to a residential IP
  
  Reply View | 0 replies