homepage Welcome to WebmasterWorld Guest from 54.211.235.255
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
Whmcsxtra dedicated servers
AlphaServer
keyplyr




msg:4478485
 6:03 pm on Jul 24, 2012 (gmt 0)



Host: server-176.53.43.107.as42926.net
UA: Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
robots.txt: no

Whmcsxtra dedicated servers
176.53.43.0 - 176.53.43.255
176.53.43.0/24

 

dstiles




msg:4478514
 8:21 pm on Jul 24, 2012 (gmt 0)

Make that 176.53.0.0/17
Turkey (TR)
Radore Hosting Telekomunikasyon Hizmetleri San. ve Tic. Ltd. Sti.

keyplyr




msg:4478567
 11:02 pm on Jul 24, 2012 (gmt 0)


Thanks dstiles. Do you happen to have that range in long form?

keyplyr




msg:4478608
 1:22 am on Jul 25, 2012 (gmt 0)

All I could find for Radore Hosting is:

176.53.0.0 - 176.53.0.255
176.53.0.0/24

dstiles




msg:4478879
 9:09 pm on Jul 25, 2012 (gmt 0)

/17 is half /16 where /16 is nnn.nnn.0.0 - nnn.nnn.255.255 so /17 is either nnn.nnn.0.0 - nnn.nnn.127.255 or nnn.nnn.128.0 - nnn.nnn.255.255.

And so it goes on, halving each time - /18 /19 /20 etc. The linux Internet Protocol Calculator is useful here.

Radore is one of those annoying companies that only register in DNS in /24 units. I often get impatient with these and dunp them whether or not they really are servers/nasties (also companies that register in DNS with gmail or hotmail addresses!). In the case of Radore, the full /17 belongs to them: you have to check each /24 (or skip a few, anyway) to find the full range. Usually a check at 0.0, 31.0, 32.0, 63.0, 64.0 etc (ie every /19) is sufficient.

Although some records give the "owner" as SAYFA, robtex says the full /17 is Radore.

I use linux Network Tools (the Whois tab) for most of the work but occasionally use robtex for deeper digging. On Windows I used to use a downloaded version of Sam Spade but I'm fairly sure the Whois on that is now well out of date. I usually use robtex in its cnet mode - paste in all but the last IP digit (eg nnn.nnn.nnn.) and it will return a) a sample of IPs within that /24 unit; b) the range(s) that it thinks are related (eg /17 plus /16 plus /15) (although not for Radore); c) the range's "owner".

I also use spamhaus and blacklistalert.org sometimes to find out more about an IP's reputation. These are geared towards mail but can sometimes be interpreted for servers. Spamhaus also has a server-useable blacklist.

If there is an ambiguity about a range of IPs (ie is it a server farm or a broadband network) I sometimes hit a couple or so sample IPs with linux Umit to check for open ports etc.

keyplyr




msg:4478896
 10:42 pm on Jul 25, 2012 (gmt 0)


Very useful, thanks dstiles

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved