レンタル掲示板サービスには毎日ものすごい数のスパム投稿があるわけですが、そのスパム投稿の中に前々から気になっていることがあったのです。

ホスト名がドット(.)のみ

そんなの有り?

ドットで正引きしても当然ながらIPを引ける訳もないので、掲示板スクリプトの中にトラップを仕込んでIPを割り出してみました。

IPアドレス:92.48.122.3

逆引き結果
> nslookup 92.48.122.3

Non-authoritative answer:
3.122.48.92.in-addr.arpa name = .

Authoritative answers can be found from:
122.48.92.in-addr.arpa nameserver = a.ns.as29550.net.
122.48.92.in-addr.arpa nameserver = b.ns.as29550.net.

whoisの結果
> whois 92.48.122.3

[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
% To receive output for a database update, use the “-B” flag.

% Information related to ‘92.48.122.0 - 92.48.122.31′

inetnum: 92.48.122.0 - 92.48.122.31
netname: PH-V3SERVERS-28069
descr: v3servers
country: RS
admin-c: SA4464-RIPE
tech-c: SA4464-RIPE
status: ASSIGNED PA
mnt-by: blueconnex-mnt
mnt-routes: blueconnex-mnt
source: RIPE # Filtered
remarks: ******************************************************
remarks: Please contact abuse@v3servers.net for any abuse issues
remarks: E-mail sent to other addresses may not be acted upon.
remarks: ******************************************************

person: Sogreev Anton
address: v3Servers.net
address: 12 Knez Mihailova
address: apt. 18
address: Belgrade
address: 11000
address: Serbia
phone: +381 (0)11 124-1264
nic-hdl: SA4464-RIPE
mnt-by: blueconnex-mnt
source: RIPE # Filtered
e-mail: mail@v3servers.net
e-mail: abuse@v3servers.net

% Information related to ‘92.48.64.0/18AS29550′

route: 92.48.64.0/18
descr: Blueconnex Networks Ltd
origin: AS29550
remarks: ***********************************
remarks: * *
remarks: * Abuse: abuse@blueconnex.net *
remarks: * *
remarks: * Peering: peering@blueconnex.net *
remarks: * *
remarks: ***********************************
mnt-by: blueconnex-mnt
source: RIPE # Filtered

国コードRSってどこだ???

調べてみたらどうやらセルビアらしい( ´ー`)