[LINK] More on spamming from the PMs son's company

[rchirgwin at ozemail.com.au]

Ash Nallawalla wrote:

>>From: rchirgwin at ozemail.com.au
>>    
>>
>
>  
>
>>Question: are there tools to identify which domains are being 
>>hosted by "server X", if you don't already know the name of 
>>the domain?
>>    
>>
>
>Yes, but lots of web hosts have hundreds or thousands of sites on one IP address.
>This range is owned by Pacific Internet.
>
>http://www.whois.sc/reverse-ip/210.23.135.54
>  
>
The range is owned by PI. Net Harbour, rentrort.com.au and 
rentrort.netharbour.com.au (now inactive) all traceroute to the same 
address. Rentrort was registered by Net Harbour according to whois.

>  
>
>>If (for eg) I see that rentrorts.com.au is at the same IP as 
>>Net Harbour, it's easy to surmise that NH is hosting 
>>rentrorts.com.au.
>>    
>>
>
>No, it is not easy to surmise purely based on numerous sites sharing an IP
>address.  If you found a very small number e.g. 3-4, it is conceivable that they
>are hosted for one client, but you'd still have to look up each domain name to
>confirm a common owner.
>
>  
>
>>But how would one discover what other 
>>Liberal Party fronts are hosted from the same location?
>>    
>>
>
>NH has been smart enough not to list their clients but I didn't see anything
>suggesting that they build sites.  (There is a broken tag on one of their own
>pages) :-) The Wayback machine has an older snapshot, but nothing exciting.
>  
>
A pity.

It occurred to me that one might "infer" the relationship between 
different URLs and the host IP address through proxy statistics - ie, if:
favour1.foo.bar
someoneelse.foo.bar
richardisobsessive.foo.bar
and
richardisobsessive.com.au
all came from the one IP address, then there would be some way to 
correlate this out of public cache stats - if that cache had ever seen 
all three URLs. You could say "how many different URLs in this cache 
resolve to 123.123.123.123?" You would then at least have a reasonable 
apprehension that foo.bar was the host for all the others...

But that needs time and tools!

RC

>Ash
>
>
>_______________________________________________
>Link mailing list
>Link at mailman.anu.edu.au
>http://mailman.anu.edu.au/mailman/listinfo/link
>
>  
>