I ran across a site that talked about routing all cients requesting by IP to a "dead end." The clients accessing the site via ip it claimed were typically automated exploit tools and bots. Legitimate users type in the web address by it's domain question.
With this context in mind, I don't really understand how DNS really works. I thought it worked by sending an IP back to a client for the requested DNS (like a phone book.) The client then uses the IP to access the site. The information above seems to indicate I misunderstand this. Can someone clarify this?
Provided I understand the method it works like this:
There is a site with ip xxx.xxx.xxx.xxx and domain name www.somesite.com
I attempt to access the site with xxx.xxx.xxx.xxx and I get nothing, no response. I am most likely a bot or automated tool trying to do this (from a public side on port 80) I access the site with www.somesite.com and it shows me the site.
But if the server is being accessed by it's IP even when DNS is looked up, then the method doesn't make sense, since the server only sees a request by ip.