[21988] in North American Network Operators' Group
Re: identify hostname
daemon@ATHENA.MIT.EDU (Joe Shaw)
Tue Dec 1 00:08:15 1998
Date: Mon, 30 Nov 1998 22:44:08 -0600 (CST)
From: Joe Shaw <jshaw@insync.net>
To: Brandon Ross <bross@mindspring.net>
cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.3.96.981130194949.6061b-100000@xymox.netops.mindspring.net>
That's UUNet dialup dns.
>nslookup 1Cust76.tnt1.sfo2.da.uu.net
Server: yarbles.insync.net
Address: 209.113.65.3
Non-authoritative answer:
Name: 1Cust76.tnt1.sfo2.da.uu.net
Address: 208.251.189.76
Regards,
Joseph Shaw - jshaw@insync.net
NetAdmin/Security - Insync Internet Services
Free UNIX advocate - "I hack, therefore I am."
On Mon, 30 Nov 1998, Brandon Ross wrote:
> Logs recovered after a ping flood attack cut off the end of a hostname
> that the perpetrator may have used in the attack. If anyone knows who
> uses the following format for their dialup IP hostnames, please contact me
> privately:
>
> 1Cust76.tnt1.sfo2.da.
>
> Brandon Ross Network Engineering 404-815-0770 800-719-4664
> Director, Network Engineering, MindSpring Ent., Inc. info@mindspring.com
> ICQ: 2269442
>
> Stop Smurf attacks! Configure your router interfaces to block directed
> broadcasts. See http://www.quadrunner.com/~chuegen/smurf.cgi for details.
>