The way my latest code works, is that it pulls the address from the DNS table, then checks if the address is in the IPTRACKER table, and if it is, then it removes that address from the IPTRACKER table. This means that the maximum number of searches matches the number of items in the DNS table, rather than having to do a search for each tokenized item that is in the IPTRACKER table.
Realistically it should work and provide the results you're looking for, even though it does it in a different way than what you were thinking.
