Security researchers and network administrators are increasingly observing unusual DNS record types in network traffic, raising questions about their purpose and potential security implications. Following recent attention on NAPTR records and their relationship to Rich Communication Services (RCS), another obscure record type has emerged in DNS logs: NIMLOC. While not entirely new, the appearance of this rarely seen record type warrants closer examination.
NIMLOC, short for Node Identification Location, is a DNS record type defined in RFC 2137 back in 1997. It was originally designed to provide location information for nodes within a network infrastructure, potentially aiding in network management and routing decisions. The record type uses