Domain and IP Hotlist passive DNS improvements
Changed
The Domain Hotlist and IP Hotlist feeds now include improved passive DNS integration:
- Enhanced activity tracking: Passive DNS data is more tightly integrated to provide better indication of which domains are actively resolving
- Improved accuracy: More precise identification of domains that are truly active within the 24-hour observation window
- Better threat detection: Enhanced pDNS correlation helps identify active threats more reliably
These improvements ensure that hotlist entries more accurately reflect domains and IPs that are actively being used, helping you focus on the most relevant threats.
Documentation
Categories: Threat Feeds, Domain Hotlist, IP Hotlist, Daily Feeds