How to get all CIDR IP ranges of a Datacenter?

Discussion in 'Security' started by Dollar, Feb 1, 2008.

  1. #1
    As a Figurative example so your blog was being scrapped/harrased/spammed by some IPs owned by a certian DC. So you best move would to be block all IP from this Datacenter from being able to access your server.

    How to get all the IP addresses of that DC?
    I can ping the datacenter. Example Ping: exampleDatacenter.com
    and you get xx.xx.xx.xx - xx.xx.xx.xx or CIDR xx.xx.xx.xx/18 (Net Range)

    Okay the DC's usually have more then 1 Range they may own several large block of net ranges. Is there a diffenant way to get them all? Is there a public list somewhere?

    Edit:
    Okay it appears you can go to http://ws.arin.net/whois/
    Put the IP of that datacenter. Then click on "NetName:"
    It displays all IP ranges owned by that Datacenter.
    Okay problem solved...

    </closed>
     
    Dollar, Feb 1, 2008 IP
  2. hans

    hans Well-Known Member

    Messages:
    2,923
    Likes Received:
    126
    Best Answers:
    1
    Trophy Points:
    173
    #2
    there might be several solutions
    I use on my linux laptop following in my shell:

    whois xxx.xxx.xxx.xxx

    xxx being the one IP address I know to spam my site.
    the whois output gives the full range of all IP's belonging to the same network-owner - i use this procedure to create iptables entries to ground spammers/hackers or their entire network.

    may be that is one kind of data you need ??
     
    hans, Feb 6, 2008 IP
  3. Dollar

    Dollar Active Member

    Messages:
    2,598
    Likes Received:
    82
    Best Answers:
    0
    Trophy Points:
    90
    #3
    Yes to get all the Ip addresses owned by that network.
    Can you do that in windows CMD?



     
    Dollar, Feb 6, 2008 IP
  4. hans

    hans Well-Known Member

    Messages:
    2,923
    Likes Received:
    126
    Best Answers:
    1
    Trophy Points:
    173
    #4
    unknown to me if windows command / tool available

    but

    if you are logged in to your server via SSH or telnet and your server runs linux, and has "whois" tool installed,
    then you could run it on remote server.
     
    hans, Feb 6, 2008 IP