joeyh

joeyh at

Apparenly there's something called Passive DNS, invented by Florian Weimer that captures a large amount of DNS information.


(This is .. a little surprising to me, since the Florian Weimer I know is a Debian Developer.)


https://www.farsightsecurity.com/Technical/Passive_DNS_Sensor/

"The passive DNS sensor only collects the DNS data received by a caching server as the result of recursion. The queries sent by individual clients are never logged."


Sounds like that could not produce the logs that are on that website. It could be used to help verify the legitimacy of such a more detailed log however.