I want to detect, with as much accuracy as possible, the IP address of any remote host performing a DNS lookup of my domain name (eg.
nslookup mydomain123.com) and any subdomains as well if possible. Assume the host is at least several hops away.
Now I know that DNS is hierarchial and can involve many parties as queries are propagated. Is there any way to configure the domain or dns server in such a way that lookups from a host encourage that host to connect to the dns server directly or otherwise give up its IP address?
I have a hunch it's possible because sometimes I try to lookup the IP of a hostname and it times out, suggesting my host was unable to reach certain nameservers (directly).
Thanks. This is part of a honeypot proof of concept project I'm cooking up.