Latest posts for the topic "How to find the IP-address"

How to find the IP-address

Niels — GMT

Where can I find the logged IP's of the guests? Because I really want to ban some spam!

Carbonize — GMT

Admin - Easy Admin but they are stored as hostnames and not IP. use www.dnstools.com to resolve the hostname to the IP and ISP.

Niels — GMT

IP Whois Results:

Connecting to whois.arin.net...

OrgName: Defender Technologies Group, LLC
OrgID: DTGL
Address: 44470 Chilum Place, Building 1
Address: Suite 1197
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US

ReferralServer: rwhois://rwhois.defenderhosting.com:4321/

NetRange: 205.234.96.0 - 205.234.111.255
CIDR: 205.234.96.0/20
NetName: DEFENDER-1
NetHandle: NET-205-234-96-0-1
Parent: NET-205-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.DEFTECHGROUP.COM
NameServer: NS2.DEFTECHGROUP.COM
Comment:
RegDate: 2005-07-15
Updated: 2005-07-15

OrgAbuseHandle: DTGAD-ARIN
OrgAbuseName: DTG Admin
OrgAbusePhone: +1-703-621-3565
OrgAbuseEmail: abuse@defenderhosting.com

OrgTechHandle: DTGAD-ARIN
OrgTechName: DTG Admin
OrgTechPhone: +1-703-621-3565
OrgTechEmail: abuse@defenderhosting.com

So what is the IP, so I can ban it?

Carbonize — GMT

Post the hostname here.

Niels — GMT

Host: beta.servers-serving.net

Carbonize — GMT

At the top of the information it clearly states [b]beta.servers-serving.net resolves to 205.234.97.216[/b]

Niels — GMT

I know, Carbonize. So I banned this IP, but however anoter message came into my guestbook with the same host. Strange, isn't it?

Carbonize — GMT

Not really. As the look up showed that host name is connected to a range of IPs. [b]NetRange: 205.234.96.0 - 205.234.111.255[/b]

Niels — GMT

So what should I ban?

Carbonize — GMT

You could ban 205.234.

Niels — GMT

Thanx!

And no "normal" guest could have an IP which begins with 205.234 ?

Carbonize — GMT

Yes they could.

Niels — GMT

Hmm.. That's not very nice than. But there's no other solution, right?

Carbonize — GMT

you could add

205.234.96.
205.234.97.
205.234.98.
etc upto
205.234.111.

Wchich will only be thir IP's. Or you could report this to the people who own the IP's.

Niels — GMT

Why only those IP's?

Carbonize — GMT

that covers all the IP's assigned to that hostname

Niels — GMT

All right, I'll do that. But still there could be normal guests with that host name or is that impossible now?

Carbonize — GMT

All the ip's covered in that list reso,ve to the hostname in question.

Niels — GMT

Oké, I banned those IP's. Thanx for helping. When I'll get spam again, now I know what to do!

Niels — GMT

How to find out what is the IP of the next host: duesselderf.vhm-ibb.de

Carbonize — GMT

Use dnstools.com same as before.

Niels — GMT

I did, but he says:

Domain Whois Results:

domain: vhm-ibb.de
status: connect

IP Whois Results:

Connecting to whois.arin.net...

No match found for duesselderf.vhm-ibb.de..

# ARIN WHOIS database, last updated 2005-12-09 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Carbonize — GMT

Whats the full hostname from the guestbook?

Niels — GMT

Host: duesselderf.vhm-ibb.de

Carbonize — GMT

Have you tried just visiting vhm-ibb.de ?

JTD — GMT

I even tried it.

[code]Domain Whois Results:

domain: vhm-ibb.de
status: connect

IP Whois Results:

Connecting to whois.arin.net...

No match found for vhm-ibb.de..

# ARIN WHOIS database, last updated 2005-12-09 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Checking Port 80...

Warning: fsockopen(): php_network_getaddresses: getaddrinfo failed: Name or service not known in /home/dnstools/public_html/houston/index.php on line 306

Warning: fsockopen(): unable to connect to vhm-ibb.de:80 in /home/dnstools/public_html/houston/index.php on line 306
Port 80 does not appear to be open.

Ping Results:

Ping server http://vhm-ibb.de (down!!)
Site link http://vhm-ibb.de is down!![/code]

[b]Now if you just use the ibb.de this is what you get. It looks to be a website for a bank.[/b]

[code]Domain Whois Results:

domain: ibb.de
status: connect

IP Whois Results:

Connecting to whois.arin.net...

Deferred to specific whois server: whois.ripe.net...

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.61.227.160 - 213.61.227.191'

inetnum: 213.61.227.160 - 213.61.227.191
netname: DE-COLT-IBB-1
descr: INVESTITIONSBANK BERLIN
descr: BUNDESALLEE 210
descr: D-10719 BERLIN
descr: abuse? mailto:waldemar.frankowski@investitionsbank.de
country: DE
admin-c: FW412-RIPE
tech-c: FW412-RIPE
status: ASSIGNED PA
mnt-by: DE-COLT-MNT
source: RIPE # Filtered

person: Frankowski Waldemar
address: Spichernstr. 2
address: D-10777 Berlin
address: Germany
phone: +49 3021 252920
fax-no: +49 3021 252902
e-mail: webmaster@investitionsbank.de
nic-hdl: FW412-RIPE
remarks: administrator contact
mnt-by: BO-DOMREG
source: RIPE # Filtered

% Information related to '213.61.0.0/16AS9126'

route: 213.61.0.0/16
descr: DE-COLT-INTERNET-213-61
origin: AS9126
mnt-by: DE-COLT-MNT
source: RIPE # Filtered

% Information related to '213.61.0.0/16AS8220'

route: 213.61.0.0/16
descr: COLT-DE
origin: AS8220
mnt-by: DE-COLT-MNT
source: RIPE # Filtered

Checking Port 80...

Port 80 is open and accepting connections.

Ping Results:

Ping server http://ibb.de (<3 ms)
Site link http://ibb.de OK![/code]

Niels — GMT

I banned all the IP's between 213.61.227.160 and 213.61.227.191, but still spam is in my guestbook!

Carbonize — GMT

Blocking the IP's will only stop future spam entries from them IP's.

Niels — GMT

Yes off course. After I banned those IP's, still spam was entering in my guestbook. Isn't that strange?

Carbonize — GMT

Just means you got IP wrong. Search the forum for my mod to make AG store the ip and not the hostname.