[Dshield] Whom do you trust?

Coxe, John B. JOHN.B.COXE at saic.com
Thu Mar 6 17:42:21 GMT 2003


Look just a little more.  If you do lookups on their web address and then
reverse it from the ip, you find this is probably just some home user on DSL
who got a domain registered and set A records for it in DNS.  However, the
name servers for the domain are his ISP's ones in Gainesville and Orlando,
which is a little unusual.  All-in-all, it is not a very professional
looking situation.  My guess is some user gained the trust of their ISP to
set this up and he is limited in his resources.  Looks like all the best
intentions though.

# nslookup www.njabl.org

Name:    njabl.org
Address:  209.208.94.135
Aliases:  www.njabl.org

# nslookup 209.208.94.135

Name:    209.208.94.135.atlantic.net
Address:  209.208.94.135

# nslookup -q=ns njabl.org

Non-authoritative answer:
njabl.org       nameserver = orldfl-ns-1.atlantic.net
njabl.org       nameserver = dns3.atlantic.net
njabl.org       nameserver = gsvlfl-ns-1.atlantic.net

Authoritative answers can be found from:
orldfl-ns-1.atlantic.net        internet address = 209.208.42.132
gsvlfl-ns-1.atlantic.net        internet address = 209.208.0.2



More information about the list mailing list