[Internet-e-architetture-di-rete] esercizi riepilogativi governance, IPv4, IPv6, routing

sugo sugo at olografix.org
Fri May 6 14:38:51 CEST 2016


IP: 203.114.102.100

A: sugo at vm:~$ whois 203.114.102.100 |grep inetnum
inetnum:        203.114.96.0 - 203.114.127.255

B: sugo at vm:~$ whois 203.114.102.100 |grep source
source:         APNIC

C: sugo at vm:~$ whois 203.114.102.100 |grep descr
descr:          TOT public company limited
descr:          Telecommunication Provider, Network Service Provider 
(NSP)
descr:          Internet Service Provider (ISP) in Thailand
descr:          TOT Public Company Limited


D: sugo at vm:~$ whois 203.114.102.100 |grep origin
origin:         AS9737

E: il record PTR fa pensare ad un server web:

sugo at vm:~$ dig -x 203.114.102.100 +short
www.tot.co.th.

Interrogando quell'ip su http://www.ipvoid.com/ sembra che non ci siano 
problemi di reputazione (botnet, etc...)

Interrogando invece la reputazione per quanto riguarda il servizio mail 
sembra ci siano parecchi problemi di blacklist:

http://multirbl.valli.org/lookup/203.114.102.100.html

C'è un firewall che blocca gli ICMP:

# ping -c 3 203.114.102.100
PING 203.114.102.100 (203.114.102.100) 56(84) bytes of data.

--- 203.114.102.100 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 12000ms

Anzi, sembra che i servizi "well know" siano bloccati..

root at vm_sugo:~# nmap -P0 203.114.102.100

Starting Nmap 5.51 ( http://nmap.org ) at 2016-05-06 14:32 CEST
Nmap scan report for www.tot.co.th (203.114.102.100)
Host is up.
All 1000 scanned ports on www.tot.co.th (203.114.102.100) are filtered

Nmap done: 1 IP address (1 host up) scanned in 201.74 seconds




More information about the Internet-e-architetture-di-rete mailing list