WDH-051 Websites, Domains & Internet Infrastructure
What is dynamic DNS and why might a website use it?¶
Dynamic DNS automatically updates a hostname when the public IP address changes. It is commonly used with home broadband, small-office networks and self-hosted services.
A router, device or software client reports the current address to the provider, which updates the DNS record.
Investigative value¶
The provider may hold:
- account details;
- hostname creation records;
- update history;
- source IP addresses;
- access logs; and
- payment information.
Historic updates may show which public address was linked to the hostname at a relevant time.
The account holder is not automatically the operator. Credentials may be shared or stolen, the reporting device may be compromised and the hostname may point to a tunnel or proxy.
Key takeaway
Dynamic DNS can provide valuable historic account and update records, but those records must still be linked to the person controlling the service.