News for hackers. Stuff that matters.

A comment on Top DNS domains seen on the Quad9 recursive resolver array each day. Parent comment

Re:Top DNS domains seen on the Quad9 recursive resolver arra... by t0mas88 on Friday July 11, 2025 @11:46AM (#44533508)
Or malware, those would typically be fairly random domain names that are queried for updates or instructions by a large number of infected devices.
[ Parent | on HN ]
Re:Top DNS domains seen on the Quad9 recursive resolver arra... by 0points on Friday July 11, 2025 @11:49AM (#44533556)
That's what I'm thinking too. That would suggest some very large operational botnets ... :-/
[ Parent | on HN ]
Re:Top DNS domains seen on the Quad9 recursive resolver arra... by netsharc on Friday July 11, 2025 @12:02PM (#44533758)
Or they query the DNS very often. Most devices have DNS caching, so if things like tiktok.com end up there, there must be a loot of devices (also, a lot of subdomains, which aren't visible in these lists).
[ Parent | on HN ]