more on nmap
You can see what happens if you look for hosts on an address range.
try this:
dig www.number-10.gov.uk
and youll get
www.number-10.gov.uk. 6138 IN A 194.201.189.210
so what else is on the 194.201.189 block?
nmap -sL 194.201.189.0/24
or, to capture to a file:
nmap sL 194.201.189.0/24 -oN btdowningstreet
and youll see theres another government site next door.
nmap -A -T4 194.201.189.210
will show you that its running on windows and http is the only port open.
Anyway, so whats the point of this? If youre about to buy some hosting, you can see what sort of scale your prospective host is at. Have they bought a block if ip numbers from a larger provider or do they own the entire address space? Are they giving you an ip number in the same area as their own business site or are they selling you somewhere else? What machine is there? Whats the setup? Forewarned is forearmed.
