Strange domain!

Mark Tranchant mark at tranchant.plus.com
Mon Oct 4 11:18:59 UTC 2004


I noticed a very strange entry in my Apache logs, with a domain name of 
just "test".

"dig test" failed, as you might expect, so I used netstat -aln to read 
the connected IP addresses. The address is 195.144.130.1, and "dig -x 
195.144.130.1 gives the output below. What's this all about?! Who's 
setting up their own TLDs?

Hold on, a black helicopter's just landed outside. Back in a minute...

mark at mauve:~$ dig -x 195.144.130.1

; <<>> DiG 9.2.3 <<>> -x 195.144.130.1
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64132
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;1.130.144.195.in-addr.arpa.    IN      PTR

;; ANSWER SECTION:
1.130.144.195.in-addr.arpa. 6276 IN     PTR     test.

;; AUTHORITY SECTION:
130.144.195.in-addr.arpa. 6276  IN      NS      ns2.uk.cw.net.
130.144.195.in-addr.arpa. 6276  IN      NS      ns3.uk.cw.net.
130.144.195.in-addr.arpa. 6276  IN      NS      ns0.uk.cw.net.
130.144.195.in-addr.arpa. 6276  IN      NS      ns1.uk.cw.net.

;; ADDITIONAL SECTION:
ns0.uk.cw.net.          29105   IN      A       194.177.160.6
ns1.uk.cw.net.          29105   IN      A       194.177.170.35
ns2.uk.cw.net.          29105   IN      A       194.6.79.4
ns3.uk.cw.net.          29105   IN      A       195.224.151.84

;; Query time: 26 msec
;; SERVER: 192.168.7.3#53(192.168.7.3)
;; WHEN: Mon Oct  4 12:18:24 2004
;; MSG SIZE  rcvd: 207


-- 
Mark.
http://tranchant.plus.com/


More information about the bind-users mailing list