information gathering

In the second meet, I’m study about Information Gathering. I try to searching the information in the network 192.168.0.0, and this is the result

Computer with address 192.168.0.21

Nmap scan report for 192.168.0.21

Host is up (0.00076s latency).

Not shown: 995 closed ports

PORT      STATE SERVICE

22/tcp    open  ssh

80/tcp    open  http

139/tcp   open  netbios-ssn

445/tcp   open  microsoft-ds

10000/tcp open  snet-sensor-mgmt

MAC Address: 08:00:27:F9:C1:BB (Cadmus Computer Systems)

 Nmap scan report for 192.168.0.27

Host is up (0.00036s latency).

Not shown: 997 closed ports

PORT    STATE SERVICE         VERSION

139/tcp open  netbios-ssn     Samba smbd 3.X (workgroup: WORKGROUP)

445/tcp open  netbios-ssn     Samba smbd 3.X (workgroup: WORKGROUP)

902/tcp open  ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC, SOAP)

|_ssl-cert: ERROR

  

And I try searching information about IS2C-dojo.net, IS2C-dojo.com, spentera.com. I’m searching the DNS with “intodns.com” and than this is the result

IS2C-dojo.net

Domain NS records    :

Nameserver records returned by the parent servers are:
partnerit1.mercury.orderbox-dns.com.   ['50.23.136.173', '50.23.136.174', '50.23.136.229', '50.23.136.230']   [TTL=172800]
partnerit1.venus.orderbox-dns.com.   ['50.23.75.44', '50.23.75.45', '50.23.75.96', '50.23.75.97']   [TTL=172800]
partnerit1.earth.orderbox-dns.com.   ['67.15.253.219', '67.15.253.220', '67.15.47.188', '67.15.47.189']   [TTL=172800]
partnerit1.mars.orderbox-dns.com.   ['184.173.149.221', '184.173.149.222', '184.173.150.57', '184.173.150.58']   [TTL=172800]

NS records from your nameservers :
NS records got from your nameservers listed at the parent NS are:
partnerit1.mercury.orderbox-dns.com  ['50.23.136.174', '50.23.136.173', '50.23.136.229', '50.23.136.230']   [TTL=38400]
partnerit1.venus.orderbox-dns.com  ['50.23.75.44', '50.23.75.45', '50.23.75.96', '50.23.75.97']   [TTL=38400]
partnerit1.mars.orderbox-dns.com  ['184.173.149.222', '184.173.149.221', '184.173.150.57', '184.173.150.58']   [TTL=38400]
partnerit1.earth.orderbox-dns.com  ['67.15.253.220', '67.15.47.189', '67.15.47.188', '67.15.253.219']   [TTL=38400]

Glue for NS records :

IPs of your NS records. The nameservers without glue are:
67.15.47.189
50.23.75.97
50.23.136.230
184.173.150.58

SOA record :

Primary nameserver                 : partnerit1.mars.orderbox-dns.com
Hostmaster E-mail address     : mrp.bpp.gmail.com
Serial #                                    : 2011122208
Refresh                                    : 7200
Retry                                       : 7200
Expire                                      : 172800   2 days
Default TTL                            : 7200

WWW A Record :

www.is2c-dojo.net -> ghs.google.com -> ghs.l.google.com -> [ 173.194.65.121  ]

IS2C-dojo.com

Domain NS records    :

Nameserver records returned by the parent servers are:
ns1.partnerit.us.   ['67.222.154.106'] (NO GLUE)   [TTL=172800]
ns2.partnerit.us.   ['67.222.154.107'] (NO GLUE)   [TTL=172800]
l.gtld-servers.net was kind enough to give us that information.

NS records from your nameservers :
NS records got from your nameservers listed at the parent NS are:
ns2.partnerit.us  ['67.222.154.107']   [TTL=86400]
ns1.partnerit.us  ['67.222.154.106']   [TTL=86400]

SOA record :

Primary nameserver                 : ns1.partnerit.us
Hostmaster E-mail address     : adi88nugroho.gmail.com
Serial #                                    : 2012012505
Refresh                                    : 86400
Retry                                       : 7200
Expire                                      : 3600000   5 weeks
Default TTL                            : 86400

WWW A Record :

www.is2c-dojo.com -> is2c-dojo.com -> [ 67.222.154.106  ]

spentera.com

Domain NS records    :

Nameserver records returned by the parent servers are:
dns1.namecheaphosting.com.   ['74.81.65.92']   [TTL=172800]
dns2.namecheaphosting.com.   ['199.204.19.79']   [TTL=172800]

Glue for NS records :

IPs of your NS records. The nameservers without glue are:
199.204.19.79
74.81.65.92

The SOA record is:
Primary nameserver                 : dns1.namecheaphosting.com
Hostmaster E-mail address     : hosting-notifications.namecheaphosting.com
Serial #                                    : 2011102204
Refresh                                    : 86400
Retry                                       : 7200
Expire                                      : 3600000   5 weeks
Default TTL                            : 86400

Default TTL                            : 86400

WWW A Record :

www.spentera.com -> spentera.com -> [ 74.81.66.104  ]