Monday, November 25, 2013

Scanning for Google's internal corporate subdomains - part 2

And here are some more domain names:
hulk.corp.google.com172.26.191.134
coffee.corp.google.com172.22.66.19
flip.corp.google.com172.22.95.138
pizza.corp.google.com100.104.4.37
pond.corp.google.com172.22.118.28
welcome.corp.google.com172.24.172.92
nonprofit.corp.google.com172.22.115.13
ship.corp.google.com172.22.108.124
lens.corp.google.com172.17.94.141
miracle.corp.google.com172.22.122.67
jet.corp.google.com172.29.86.122
unity.corp.google.com172.24.206.3
twist.corp.google.com100.104.42.23
uncertainty.corp.google.com172.22.108.157
seal.corp.google.com172.24.8.84
jeans.corp.google.com172.22.72.81
bolt.corp.google.com172.22.98.178
bow.corp.google.com172.22.112.36
sunny.corp.google.com172.27.82.125
shark.corp.google.com172.28.149.4
buddy.corp.google.com172.22.115.127
peanut.corp.google.com172.22.102.44
rain.corp.google.com172.27.80.52
pile.corp.google.com172.17.133.81
twist.corp.google.com100.104.42.23
bull.corp.google.com172.22.103.54
sheep.corp.google.com172.27.86.154
hurricane.corp.google.com172.18.84.167
robot.corp.google.com172.22.115.107
brain.corp.google.com172.17.90.153
search.corp.google.com172.16.255.28
cut.corp.google.com172.24.8.65
hero.corp.google.com172.18.172.24
river.corp.google.com172.27.84.63
ear.corp.google.com172.18.117.91
engage.corp.google.com172.25.121.235
gift.corp.google.com172.31.70.65
sugar.corp.google.com172.22.97.53
analyst.corp.google.com172.27.196.24
jury.corp.google.com172.24.184.119
pocket.corp.google.com172.26.64.54
earth.corp.google.com172.27.22.33
bear.corp.google.com172.22.64.65
cash.corp.google.com172.18.82.80
predict.corp.google.com172.22.115.33
brown.corp.google.com172.18.117.56
ad.corp.google.com[2620:0:10c0:115b:d6ae:52ff:fe72:375b], [2620:0:10c1:1130:862b:2bff:fe01:bb49], [2620:0:10c1:1130:862b:2bff:fe01:b86a], [2620:0:10c0:1157:7a2b:cbff:fe40:8b45], [2620:0:10c8:111f:7a2b:cbff:fe22:ac0a], [2620:0:10cc:1109:7a2b:cbff:fe1e:a39c], [2620:0:10c0:1155:7a2b:cbff:fe40:9863], [2620:0:10cc:1109:7a2b:cbff:fe1e:b48c], [2620:0:10c1:1130:862b:2bff:fe01:b710], [2620:0:10c8:1120:7a2b:cbff:fe51:4505] 172.25.118.210 172.24.204.11, 172.25.119.213, 172.25.118.69, 172.24.156.19, 172.24.204.12, 172.16.255.204, 172.25.152.139, 172.24.156.20, 172.25.152.208, 172.24.204.10
anywhere.corp.google.com172.22.123.28
forth.corp.google.com172.18.117.154
secret.corp.google.com172.22.113.69
shade.corp.google.com172.22.122.96
element.corp.google.com172.22.116.103
spot.corp.google.com172.18.219.36
prompt.corp.google.com172.28.12.24
sun.corp.google.com172.18.92.133
quit.corp.google.com127.0.0.1
ice.corp.google.com172.17.90.17
silent.corp.google.com172.22.117.137
creative.corp.google.com172.24.194.41
rocket.corp.google.com100.104.26.42
perfect.corp.google.com100.104.7.16
lady.corp.google.com172.28.15.15
chip.corp.google.com172.22.114.129
green.corp.google.com[2620:0:1000:3803:a800:1ff:fe00:4e9b], 172.24.98.22
iron.corp.google.com172.22.98.108
king.corp.google.com[::ffff:172.16.255.48], 172.16.255.48
visible.corp.google.com172.22.114.89
crack.corp.google.com172.22.124.73
galaxy.corp.google.com172.18.82.132
sand.corp.google.com172.22.109.255
knife.corp.google.com172.18.121.170
pole.corp.google.com172.25.67.53
free.corp.google.com172.18.104.61
shell.corp.google.com192.168.132.163
tomato.corp.google.com172.22.64.67
spot.corp.google.com172.18.219.36
evolution.corp.google.com172.22.124.99
hudson.corp.google.com172.18.56.49
No comments:

Friday, November 22, 2013

Scanning for Google's internal corporate subdomains

For some reason Gmail appears to use an internal DNS server. This allows to verify existence and even resolve the IP addresses of Google's internal corporate domain names. For example, if you send an e-mail to test@root.corp.google.com you will receive an error response:

So apparently there's a server located at root.corp.google.com and its ip address is 172.16.115.10.
Here's a list of some of these domain names (of course it's not comprehensive).
Some companies:
yahoo.corp.google.com172.31.9.1
oracle.corp.google.com172.25.116.205
microsoft.corp.google.com172.31.9.1
myspace.corp.google.com172.25.121.235
bebo.corp.google.com172.17.90.16
makani.corp.google.com172.27.145.31
splunk.corp.google.com172.25.117.23
netapp.corp.google.com[::ffff:172.16.255.48], 172.16.255.48
tableau.corp.google.com172.25.100.77
fireeye.corp.google.com172.24.0.7

Google's corporate structure:
marketing.corp.google.com172.18.77.12

And a lot of other words:
male.corp.google.com172.25.208.116
offer.corp.google.com172.25.121.53
girl.corp.google.com172.22.73.34
computer.corp.google.com172.26.77.190
fail.corp.google.com172.25.121.235
fear.corp.google.com172.17.80.52
death.corp.google.com172.17.81.204
ash.corp.google.com172.22.64.63
dust.corp.google.com172.25.129.187
spirit.corp.google.com172.17.90.106
policy.corp.google.com172.24.184.119
nothing.corp.google.com172.22.122.136
gypsy.corp.google.com172.18.76.135
boot.corp.google.com172.18.84.202
root.corp.google.com172.16.115.10
surveys.corp.google.com70.32.156.24
license.corp.google.com172.24.98.14
humor.corp.google.com172.22.115.121
peregrine.corp.google.com172.18.116.84
rda.corp.google.com172.17.90.30
sierra.corp.google.com172.18.125.44
lattice.corp.google.com172.22.116.27
manhattan.corp.google.com172.18.135.203
research.corp.google.com172.22.132.245
discovery.corp.google.com172.22.96.46
concepts.corp.google.com172.24.0.202
invent.corp.google.com172.17.81.164
effort.corp.google.com172.25.66.67
free.corp.google.com172.18.104.61
kick.corp.google.com172.22.133.156
air.corp.google.com216.239.44.190
never.corp.google.com172.22.102.87
event.corp.google.com172.25.138.70
you.corp.google.com172.17.132.179
aqualung.corp.google.com172.22.118.62
No comments:
Subscribe to: Posts (Atom)