Tracking down reverse for ip

Thu Apr 15 20:21:49 UTC 2010

On Apr 15, 2010, at 4:13 PM, Joe Johnson wrote:

>> What is the best way to find out the responciable servers for this?
>> Thanx in advance.
> 
> Call AT&T? Or Gary Surdyke Motorcycle, inc?
> 
> root at jjohnson-ubuntu:~# whois 12.43.95.126
> AT&T WorldNet Services ATT (NET-12-0-0-0-1)
>                                  12.0.0.0 - 12.255.255.255
> GARY SURDYKE MOTORCYCLE INC. ATT240-95-112 (NET-12-43-95-112-1)
>                                  12.43.95.112 - 12.43.95.127
> 
> # ARIN WHOIS database, last updated 2010-04-14 20:00
> # Enter ? for additional hints on searching ARIN's WHOIS database.
> #
> # ARIN WHOIS data and services are subject to the Terms of Use
> # available at https://www.arin.net/whois_tou.html
> 

it appears that AT&T has delegate the PTRs to...
112-28.95.43.12.in-addr.arpa. 172800 IN	NS	ns2.nightowl.net.
112-28.95.43.12.in-addr.arpa. 172800 IN	NS	mail.nightowl.net.

[doon at gyruss:~] dig ns +trace -x 12.43.95.126

; <<>> DiG 9.3.3 <<>> ns +trace -x 12.43.95.126
;; global options:  printcmd
.			502744	IN	NS	b.root-servers.net.
.			502744	IN	NS	l.root-servers.net.
.			502744	IN	NS	c.root-servers.net.
.			502744	IN	NS	g.root-servers.net.
.			502744	IN	NS	a.root-servers.net.
.			502744	IN	NS	f.root-servers.net.
.			502744	IN	NS	m.root-servers.net.
.			502744	IN	NS	e.root-servers.net.
.			502744	IN	NS	k.root-servers.net.
.			502744	IN	NS	d.root-servers.net.
.			502744	IN	NS	j.root-servers.net.
.			502744	IN	NS	i.root-servers.net.
.			502744	IN	NS	h.root-servers.net.
;; Received 480 bytes from 127.0.0.1#53(127.0.0.1) in 2 ms

12.in-addr.arpa.	86400	IN	NS	CBRU.BR.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.	86400	IN	NS	DMTU.MT.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.	86400	IN	NS	DBRU.BR.NS.ELS-GMS.ATT.NET.
12.in-addr.arpa.	86400	IN	NS	CMTU.MT.NS.ELS-GMS.ATT.NET.
;; Received 143 bytes from 192.228.79.201#53(b.root-servers.net) in 80 ms

126.95.43.12.in-addr.arpa. 172800 IN	CNAME	126.112-28.95.43.12.in-addr.arpa.
112-28.95.43.12.in-addr.arpa. 172800 IN	NS	ns2.nightowl.net.
112-28.95.43.12.in-addr.arpa. 172800 IN	NS	mail.nightowl.net.
;; Received 117 bytes from 199.191.128.105#53(CBRU.BR.NS.ELS-GMS.ATT.NET) in 42 ms

-Patrick

--
Patrick Muldoon
Network/Software Engineer
INOC (http://www.inoc.net)
PGPKEY (http://www.inoc.net/~doon)
Key ID: 0x370D752C

There are only 10 types of people in this world, those that understand binary and those that don't