Help beautify ugly heuristic code

[Jeremy Sanders]

On Wed, 08 Dec 2004 18:38:14 -0500, Stuart D. Gathman wrote:

>> Here are the last 20 (which my subjective judgement says are correct):
> 
> 65.112.76.15    usfshlxmx01.myreg.net 201.128.108.41 
[snip]
> 80.143.79.97    p508F4F61.dip0.t-ipconnect.de DYN

Looks like you could do something like look for a part of the dns name
which is over a certain length with a high fraction of numbers and
punctuation characters.

Of course, you could build up a probability tree of the chance of a
character being followed by another character in a dynamic name and a
static name.

This might work well, as many are sequences of numbers (high chance of
number followed by number), and mixed characters and numbers, which are
unusual in normal dns names.

Jeremy