Weird reverse-resolution of IP number

No periods in the domain at all!

[Everyman]

This is weird: an IP number resolves to "apnc20"

No top-level domain, no nothing. Happens in two different nslookup environments.

nslookup 211.216.216.36
Server: [deleted]
Address: [deleted]

Name: apnc20
Address: 211.216.216.36

Someplace in Korea.

Have any of you seen a domain resolve to something without periods in it at all? This will screw up my log parsing routines!

[toolman]

I don't recall seeing that off the top of my head but maybe this will help:

inetnum: 211.216.216.0 - 211.216.216.255
netname: KORNET-NETINFRA-JUNGANG-KR
descr: CENTRAL DATA COMMUNICATION OFFICE
descr: 128-9 YEUNKEONDONG JONGROKU
descr: SEOUL
descr: 110-460
country: KR
admin-c: DL4142-KR
tech-c: GK1279-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
mnt-by: MNT-KRNIC-AP
changed: [e-mail] 20020204
source: KRNIC

[Air]

That's an anonymous open proxy, the hostname can be anything as long as it is not propagated via DNS which this one isn't.

Here are the qualities of this server based on it's setup.

Anonymous - HTTP Proxy server does not send HTTP_X_FORWARDED_FOR variable to host, this improves privacy since your IP address cannot be logged.

High anonymity - HTTP Servers of this type don't send HTTP_X_FORWARDED_FOR, HTTP_VIA and HTTP_PROXY_CONNECTION variables. Host doesn't even know you are using proxy server an of course it doesn't know your IP address.