DomainTools

Finding Patterns That Only Match Registered Domains (and Which Don't "Overmatch" Against Subdomains)

54 — Thu, 18 Jan 2024 18:51:01 +0000

Sometimes you may want to match domains that have a particular string followed by a top-level domain (TLD), but run into problems with “overmatching,” such as finding subdomains buried deep in domains that also match your pattern of interest. In this article, we’ll show you how to use Farsight DNSDB to find such a set […]

Finding New ASNs

54 — Thu, 04 Jan 2024 16:48:31 +0000

A surprisingly large number of ASNs get assigned by the Internet’s regional registries every month, see table 1. Regional Registry Average New ASNs/Month Reference RIPE NCC 181 https://www.iana.org/numbers/allocations/ripencc/asn/ APNIC 146 https://www.iana.org/numbers/allocations/apnic/asn/ ARIN 90 https://www.iana.org/numbers/allocations/arin/asn/ LACNIC 53 https://www.iana.org/numbers/allocations/lacnic/asn/ AFRINIC 15 https://www.iana.org/numbers/allocations/afrinic/asn/ TOTAL 485 Table 1. Average New ASNs/Month by Regional Registry That’s a lot of new […]

New Report Available: Aggregate Count Data for All Internet IPv4 Addresses as Seen in DNSDB “A” Records

54 — Thu, 02 Nov 2023 15:42:13 +0000

Curiosity about the Internet is “in our DNA.” DomainTools mission is “To map the Internet to detect and predict emerging threats.” Farsight Security, now part of DomainTools, previously reported on both domain names and IP addresses seen in Farsight DNSDB. However, the most recent IPv4 address study (from way back in 2017) only looked at […]

How Are The Results From A DNSDB Standard Search Ordered?

57 — Wed, 15 Dec 2021 06:17:04 +0000

DNSDB Standard Search results get returned in a default and consistent order, but one which might not always be immediately apparent. This article describes the subtleties of how DNSDB Standard Search results are ordered by the server, and the impact of that ordering on the subset of results you may end up seeing when making queries that potentially find large numbers of results.

Passive DNS and SIE File Formats

57 — Fri, 19 Nov 2021 05:00:02 +0000

This blog post discusses MTBL files in DNSTABLE format, NMSG files, and JSON Lines format files as used by DNSDB and the Security Information Exchange (SIE).

Going From An IP Address to A Fully Qualified Domain Name (FQDN) In DNSDB - DomainTools

57 — Thu, 31 Oct 2024 04:00:07 +0000

In the first article from this series, we started with a fully qualified domain name (FQDN) and talked about using DNSDB to resolve that FQDN to its IP address. Normally that’s a pretty straightforward process, but in some cases, we may run into some less straightforward answers. We discussed some of the most common examples of those, and explained how to handle them. In this article, we’re going to go “the other direction,” and talk about using DNSDB to go from an IP address to a FQDN. Again, this is often quite straightforward, but we wanted to make sure that you’re ready for the times when you might end up going through some “chicanes.”

Going From A Domain Name to IP Address in DNSDB: Some "Pro Tips" To Keep In Mind

57 — Wed, 29 Sep 2021 10:22:45 +0000

Virtually every DNSDB user makes domain name to IP address queries. Often that will be quite straight forward, but today we’re going to talk about some of the times when you may run into surprises – and how you can easily deal with them. Part 1 of a 2 part series

Hunting for synthetic substances using DNSDB Search

57 — Thu, 15 Jul 2021 11:44:09 +0000

What DNSDB can tell us about online sellers of illegal synthetic drugs

Year-by-Year TLD Volumetric Data Covering A Decade

57 — Mon, 28 Jun 2021 03:06:56 +0000

New Farsight research shows DNS network traffic for more than 1500 top-level domains, from 2010-2019

What's a UUID?

57 — Tue, 22 Jun 2021 05:22:35 +0000

What are UUIDs and what are their different types?