Deciphering Munged Numeric URLs
If you see a URL of the form http://3350170066/, you need to use these instructions to figure out it's TCP/IP address.
A normal TCP/IP address is generally expressed in dotted-quad notation. In this form you see 4 numbers with values separated by .'s, ie. 199.175.137.210. However, to a computer, a TCP/IP address is really a single 32-bit number, and the address can be expressed as such. This form is very rare and is used by spammers because it's hard to figure out the dotted-quad form of the URL from the single number. We need the dotted-quad form of the address to find out who it belongs to and therefore who to complain to.
To convert, we divide the original number (3350170066) by 16,777,216. We're only interested in the whole number of the result, not the remainder. In this case, this is 199, which is the first part of our dotted-quad. Next we subtract 199x16,777,216 from the original number, which gives us 11,504,082. We divide this by 65536, which gives us 175, which is the second part of our dotted-quad. Next we subtract 175x65536 from 11,504,082, which leaves us with 35282. We divide this by 256, which gives us 137, which is the third part of our dotted-quad. Finally we subtract 137x256 from 35282, which gives us 210, the final part of our dotted-quad. This has converted 3350170066 into the dotted-quad TCP/IP adddress 199.175.137.210.
You can use the utility at Sam Spade to do this for you, just put http://3350170066/ in the form area with the Decipher button, and press Decipher.
[ Back to Skyway West Knowledge Center ]
[ Back to Spam Resource Page ]
Please send corrections or suggestions for improvements in this page to abuse@skywaywest.com
