[Internet-e-architetture-di-rete] esercizi riepilogativi governance, IPv4, IPv6, routing
sugo
sugo at olografix.org
Fri May 6 14:38:51 CEST 2016
IP: 203.114.102.100
A: sugo at vm:~$ whois 203.114.102.100 |grep inetnum
inetnum: 203.114.96.0 - 203.114.127.255
B: sugo at vm:~$ whois 203.114.102.100 |grep source
source: APNIC
C: sugo at vm:~$ whois 203.114.102.100 |grep descr
descr: TOT public company limited
descr: Telecommunication Provider, Network Service Provider
(NSP)
descr: Internet Service Provider (ISP) in Thailand
descr: TOT Public Company Limited
D: sugo at vm:~$ whois 203.114.102.100 |grep origin
origin: AS9737
E: il record PTR fa pensare ad un server web:
sugo at vm:~$ dig -x 203.114.102.100 +short
www.tot.co.th.
Interrogando quell'ip su http://www.ipvoid.com/ sembra che non ci siano
problemi di reputazione (botnet, etc...)
Interrogando invece la reputazione per quanto riguarda il servizio mail
sembra ci siano parecchi problemi di blacklist:
http://multirbl.valli.org/lookup/203.114.102.100.html
C'è un firewall che blocca gli ICMP:
# ping -c 3 203.114.102.100
PING 203.114.102.100 (203.114.102.100) 56(84) bytes of data.
--- 203.114.102.100 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 12000ms
Anzi, sembra che i servizi "well know" siano bloccati..
root at vm_sugo:~# nmap -P0 203.114.102.100
Starting Nmap 5.51 ( http://nmap.org ) at 2016-05-06 14:32 CEST
Nmap scan report for www.tot.co.th (203.114.102.100)
Host is up.
All 1000 scanned ports on www.tot.co.th (203.114.102.100) are filtered
Nmap done: 1 IP address (1 host up) scanned in 201.74 seconds
More information about the Internet-e-architetture-di-rete
mailing list