Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so:
1- Their DNS server resolves
18.104.22.168 (the ISP doesn't own/control this IP)
2- The ISP hosts a site at
x.x.x.x which the ISP controls and maybe part of their network.
3- The ISP has a dst-nat firewall rule so that if you connect to
22.214.171.124) it actually connects to
x.x.x.x and displays the site hosted by ISP.
If you run a
whois test on
126.96.36.199 you'll get a real data of the faked/spoofed IP.
I don't know the real IP (
x.x.x.x) and don't know where it leads.
How can I gather more information about the real server that hosts the site? is it possible to investigate about an IP that's behind a dst-nat.
If it's not possible to get the real IP then can I at least get the distance between my location(my IP) and the location of the server(