{"id":381,"date":"2007-11-05T22:40:13","date_gmt":"2007-11-05T21:40:13","guid":{"rendered":"http:\/\/wp.devco.net\/?p=381"},"modified":"2007-11-05T22:40:13","modified_gmt":"2007-11-05T21:40:13","slug":"idiots","status":"publish","type":"post","link":"https:\/\/www.devco.net\/archives\/2007\/11\/05\/idiots.php","title":{"rendered":"Idiots"},"content":{"rendered":"

I’ve been seeing some fake hostnames in my HTTP logs and did some investigation. What kind of idiot puts internal DNS names on routed ips?<\/p>\n

\n
\n% host -t any 42.165.55.65.in-addr.arpa\n42.165.55.65.in-addr.arpa domain name pointer bl2sch1081908.phx.gbl.\n<\/pre>\n<\/blockquote>\n

Had to do some tcpdumps etc to get them because my apache logs doesn’t log hostname and IP address, but eventually found it:<\/p>\n

\n
\nOrgName:    Microsoft Corp\nOrgID:      MSFT\nAddress:    One Microsoft Way\nCity:       Redmond\nStateProv:  WA\nPostalCode: 98052\nCountry:    US\nNetRange:   65.52.0.0 - 65.55.255.255\n<\/pre>\n<\/blockquote>\n

Some people should just be disconnected from the internet.<\/p>\n","protected":false},"excerpt":{"rendered":"

I’ve been seeing some fake hostnames in my HTTP logs and did some investigation. What kind of idiot puts internal DNS names on routed ips? % host -t any 42.165.55.65.in-addr.arpa 42.165.55.65.in-addr.arpa domain name pointer bl2sch1081908.phx.gbl. Had to do some tcpdumps etc to get them because my apache logs doesn’t log hostname and IP address, but […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","footnotes":""},"categories":[6],"tags":[],"_links":{"self":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts\/381"}],"collection":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/comments?post=381"}],"version-history":[{"count":0,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts\/381\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/media?parent=381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/categories?post=381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/tags?post=381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}