Re: Tracking down reverse for ip

[Patrick Muldoon <doon.bulk () inoc net>]

On Apr 15, 2010, at 4:13 PM, Joe Johnson wrote:

> > What is the best way to find out the responciable servers for this?
> > Thanx in advance.
>
> Call AT&T? Or Gary Surdyke Motorcycle, inc?
>
> root@jjohnson-ubuntu:~# whois 12.43.95.126
> AT&T WorldNet Services ATT (NET-12-0-0-0-1)
>                                  12.0.0.0 - 12.255.255.255
> GARY SURDYKE MOTORCYCLE INC. ATT240-95-112 (NET-12-43-95-112-1)
>                                  12.43.95.112 - 12.43.95.127
>
> # ARIN WHOIS database, last updated 2010-04-14 20:00
> # Enter ? for additional hints on searching ARIN's WHOIS database.
> #
> # ARIN WHOIS data and services are subject to the Terms of Use
> # available at https://www.arin.net/whois_tou.html



it appears that AT&T has delegate the PTRs to...
112-28.95.43.12.in-addr.arpa. 172800 IN NS      ns2.nightowl.net.
112-28.95.43.12.in-addr.arpa. 172800 IN NS      mail.nightowl.net.


[doon@gyruss:~] dig ns +trace -x 12.43.95.126

; <<>> DiG 9.3.3 <<>> ns +trace -x 12.43.95.126
;; global options:  printcmd
.                       502744  IN      NS      b.root-servers.net.
.                       502744  IN      NS      l.root-servers.net.
.                       502744  IN      NS      c.root-servers.net.
.                       502744  IN      NS      g.root-servers.net.
.                       502744  IN      NS      a.root-servers.net.
.                       502744  IN      NS      f.root-servers.net.
.                       502744  IN      NS      m.root-servers.net.
.                       502744  IN      NS      e.root-servers.net.
.                       502744  IN      NS      k.root-servers.net.
.                       502744  IN      NS      d.root-servers.net.
.                       502744  IN      NS      j.root-servers.net.
.                       502744  IN      NS      i.root-servers.net.
.                       502744  IN      NS      h.root-servers.net.
;; Received 480 bytes from 127.0.0.1#53(127.0.0.1) in 2 ms

12.in-addr.arpa.        86400   IN      NS      CBRU.BR.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.        86400   IN      NS      DMTU.MT.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.        86400   IN      NS      DBRU.BR.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.        86400   IN      NS      CMTU.MT.NS.ELS-GMS.ATT.NET.
;; Received 143 bytes from 192.228.79.201#53(b.root-servers.net) in 80 ms

126.95.43.12.in-addr.arpa. 172800 IN    CNAME   126.112-28.95.43.12.in-addr.arpa.
112-28.95.43.12.in-addr.arpa. 172800 IN NS      ns2.nightowl.net.
112-28.95.43.12.in-addr.arpa. 172800 IN NS      mail.nightowl.net.
;; Received 117 bytes from 199.191.128.105#53(CBRU.BR.NS.ELS-GMS.ATT.NET) in 42 ms


-Patrick

--
Patrick Muldoon
Network/Software Engineer
INOC (http://www.inoc.net)
PGPKEY (http://www.inoc.net/~doon)
Key ID: 0x370D752C

There are only 10 types of people in this world, those that understand binary and those that don't