Why would 216.136.44.104 do something like this? ... 14 ip104.44.136.216.in-addr.arpa (216.136.44.104) [AS 4323] 404 msec 400 msec 380 msec
Because the people who run the name servers for 44.136.216.in-addr.arpa, for unknown reasons, have added entries of the form 104.44.136.216.in-addr.arpa. PTR ip104.44.136.216.in-addr.arpa. I guess they want to hide something, and still have a DNS reverse entry. It's rather pointless IMHO, since we can use whois to get Learn Linc (NETBLK-TWTC-ALBY-C-LRNLINC-0) 385 Jordan Rd Troy, NY 12180 US Netname: TWTC-ALBY-C-LRNLINC-0 Netblock: 216.136.44.96 - 216.136.44.127 Coordinator: Hostmaster (HOS8-ORG-ARIN) hostmaster@INC.NET (800)974-4266 Fax: (414)476-2403 Steinar Haug, Nethelp consulting, sthaug@nethelp.no