Aug 3

Finding Spammers' Hideouts

Posted by Jaimie Sirovich on Aug. 3rd, 2006. 1 comments — voice your opinion.

BECOME AN EGGHEAD. SUBSCRIBE TO OUR RSS FEED OR FOLLOW US ON TWITTER!

Learn to be as nerdy as we are by never missing our latest blog entries. Receive great tips, tricks, and ideas on improving your web site every day! Subscribe via our RSS Feed, follow us, or use the chicklets in the sidebar for more options.
X

RSnake of ha.ckers.org documents in this post how to conveniently obtain all the subdomains of a domain using a search engine.  This can help you isolate some spammers.  He later says " … wouldn’t it be nice if we could somehow get access to all the IP address to hostname maps?"  I agree, and here is a partial solution to that request leveraging a search engine — this time MSN Search.  Use the "IP" command to find all hosts located on a certain IP address like follows:

IP:xxx.xxx.xxx.1

You can join them to locate all hosts located on a range of IP addresses as well:

IP:xxx.xxx.xxx.1 IP:xxx.xxx.xxx.2 … IP:xxx.xxx.xxx.9 IP:xxx.xxx.xxx.10.

Here is an example query to see the hosts located on this site's IP.  Since I have a dedicated IP address, it only lists this site.

I could write a little utility that scans a range using their MSN Search RSS Feed if anyone thinks it would be useful.  Of course any spammer putting stuff in one range like this has probably already been banned, according to Matt Cutts.

Tell an amigo:
  • Sphinn
  • Digg
  • Reddit
  • del.icio.us
  • StumbleUpon
  • Facebook



Related posts:
Guide To Multiple Class C Web Hosting There are many rumors surrounding the venerable IP address as...
The Proper Procedure for Changing Hosting Companies (It's really not always so simple … ) Should the need exist to change hosting companies, the process...
Promo Copies Of SEO PHP Book Shipped From my publisher (Wiley/Wrox): Hello everyone, I have placed the...
Happy Thanksgiving To Spammers! Here's some "oven roasted turkey" just for you: The rest...
Virtual Hosting is a Liability I was playing around with the What is Hosted on...




"Only One Wise Comment Banged Out Somewhere On The Internet ..."


ha.ckers.org web application security lab - Archive » IP to Virtualhost Lookup

[...] Okay, I'm just totally in love with this post by Jaimie Sirovich over at SEO Egghead. He exposed a function that I've been wanting for a good long while. Some way to do IP to virtual host lookup. His solution, similar to my Cname lookup, is to use a search engine. I wasn't aware of this flag in MSN, but apparently if you query it for IP addresses it will do exactly that. Well, nearly exactly that. I also points out any domains that are 301 redirecting or meta refreshing to your site. Strange! But whatever the case, it gets you 90% of the way there with not many false positives. Those false positives can be identified and removed by simply doing another lookup on those domains and seeing if they match the IP. Pretty trick! [...]



Care To Bang On The Keys ... ?

BECOME AN EGGHEAD. SUBSCRIBE TO OUR RSS FEED!

Learn to be as nerdy as we are by never missing our latest blog entries. Receive great tips, tricks, and ideas on improving your web site every day! Subscribe via our RSS Feed or use the chicklets in the sidebar.