After removing the unconverted IPv4 addresses from the Webalizer statistics of a domain, there's a long list of PTR records and an occasional A record left behind. nMap has a useful script (--script asn-query) to perform lookups of the ASN, port status, CIDR
block, country code, and even the IPv4 address, all in one go, with an -iL
of that long list.

There's a hitch in this process: Large numbers of hostnames "Failed to resolve."

Can I add {grep "Failed to resolve"  [to one output file]} in addition
to the output file of the successful portions of the nMap scan ? Once the process of an nMap scan is over, I can copy and paste some of what could have been the grep output file from the console, but the vast majority of that output has scrolled off the top of
the console ...

I capture those IPv4 addresses manually by simple inspection, with an occasional one a derivative of the ARPA record (i.e., backwards). In a list of 10,000 such rejected PTR records, about ninety percent can be extracted in a LibreOffice Calc spreadsheet.

Some of the hostnames with embedded IPv4 addresses make it through nMap's reverse hostname lookup process, perhaps because they haven't got a duplicate PTR record with
the same IPv4 address embedded in it.

In the attached file has about half such easily looked-up hostnames, mainly because I selected a group from the batch I captured from the console that have some diversity.

George Langford

Failed to resolve "ppp.246.16.mdl.net".
Failed to resolve "pppoe-95.189.101.86.chittel.su".
Failed to resolve "pppoe-95.189.123.70.chittel.su".
Failed to resolve "pppoe-95.189.78.99.chittel.su".
Failed to resolve "primeinternacional.static.gvt.net.br".
Failed to resolve "printer.accountsstuffleadsone.com".
Failed to resolve "promote.cache-dns.local".
Failed to resolve "proxy-wdc1-134.att.com".
Failed to resolve "proxy-wdc1-135.att.com".
Failed to resolve "proxy.osakidetza.net".
Failed to resolve "prs01-43-076.wlink.com.np".
Failed to resolve "prs01-43-139.wlink.com.np".
Failed to resolve "pubdns-64-23-56-171.hscc.hostwaycloud.com".
Failed to resolve "q.jaso.ru".
Failed to resolve "r-103-57-62-5.consumer-pool.prcdn.net".
Failed to resolve "r-93-56-62-5.consumer-pool.prcdn.net".
Failed to resolve "r-95-128-142-106.parmatel.ru".
Failed to resolve "rdns216-244-77-13.pivps.com".
Failed to resolve "rematetv.static.gvt.net.br".
Failed to resolve "reserve-bras.adelaide.esc.net.au".
Failed to resolve "residencial-200.6.173.58.costanet.com.co".
Failed to resolve "residencial-200.6.180.146.costanet.com.co".
Failed to resolve "rev-103.103.52.53.catlabroadband.com".
Failed to resolve "rev-dns-cloud-bkk-45-147-5-139-th.nipa.cloud".
Failed to resolve "roper.static.gvt.net.br".

Reply via email to