[3039] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Spam Header

daemon@ATHENA.MIT.EDU (Yer too fucking nosey..)
Mon Sep 23 15:48:35 1996

Date: Mon, 23 Sep 1996 14:01:41 -0400
From: "Yer too fucking nosey.." <root@localhost.foo.foo>
To: David Kennedy <76702.3557@compuserve.com>
CC: WWW Security List <WWW-SECURITY@ns2.rutgers.edu>
Errors-To: owner-www-security@ns2.rutgers.edu

David Kennedy wrote:
> 
>  >> Received: from shell1.cybercom.net (shell1.cybercom.net
>  >> [206.28.134.6]) by kalypso.cybercom.net (8.6.12/8.6.12) with
>  >> ESMTP id BAA20402 for
> 

[..snipped for bandwidth..]

> 
> A whois check on cybercom.net reveals:
> (run whois from your machine or from the web at:
> http://rs.internic.net/cgi-bin/whois)
> (there is no whois registration for kalypso or shell1)
> 
> Cyber Access Internet Communications, Inc. (CYBERCOM2-DOM)
>    422 Salem Street, Suite 152
>    Medford, MA  02155
> 
>    Domain Name: CYBERCOM.NET

[..snip again..]
> 
> A traceroute reveals they're on the end of an MCI Net line:
> (run traceroute from your machine if you have it or from the web at
> http://www.net.cmu.edu/bin/traceroute)
> 
> traceroute to kalypso.cybercom.net (206.28.134.5), 30 hops max

[..snipped traceroute lines]

>  9  * * kalypso.cybercom.net (206.28.134.5)  44 ms
> 
> That isn't the same IP as shell1, so a traceroute to it's IP is:
> 
> traceroute to 206.28.134.6 (206.28.134.6), 30 hops max

[..snip #3..]

>  9  shell1.cybercom.net (206.28.134.6)  45 ms * *
> 
> (which tells me the computer is _on_ right now.  It would respond unreachable or
> time out if the computer at shell1 were turned off.)

Note #1: shell1.cybercom.com is apparently their primary dialup/shell
access server...  I doubt it goes down much.

Note #2: You could've avoided all that... by using NSLOOKUP:

{outlaw:1} nslookup shell1.cybercom.net

Name:    shell1.cybercom.net
Address:  206.28.134.6

{outlaw:2} nslookup kalypso.cybercom.net

Non-authoritative answer:
Name:    kalypso.cybercom.net
Address:  206.28.134.5


Knowing their IP doesn't do much...  Just ask the site's admins as to
who owns/runs/uses kalypso.  

-Greg

home help back first fref pref prev next nref lref last post