Wednesday, July 2, 2025

IPv6 newsservers sorted on IPv6 address

 ... shows which newsservers are hosted on the same IPv6 address, or in the same IPv6 ranges.



$ grep "has IPv6 address" *.txt | sed -e 's/\.txt:/ /'  | awk '{ print $1 " " $2 " " $NF }' | awk '{ for (i=NF; i>1; i--) printf("%s ",$i); print $1; }' | sort -u 


1:67c:174:101:0:65:ff02:177 news.usenetdeal.com news.usenetdeal.com

2001:49f0:d086:1000::1:2 bonus.frugalusenet.com bonus.frugalusenet.com

2001:4de0:1::128 post6.eweka.nl post6.eweka.nl

2001:4de0:1::201 news6.astraweb.com news6.astraweb.com

2001:4de0:1::203 news6.astraweb.com news6.astraweb.com

2001:4de0:1::205 news6.eweka.nl news6.eweka.nl

2001:4de0:1::219 news6.eweka.nl news6.eweka.nl

2001:4de0:1::220 eu.geo.newsleecher.com eu.newsleecher.com

2001:4de0:1::220 eu.geo.newsleecher.com news.newsleecher.com

2001:4de0:1::220 news.am4.highwinds-media.com news.snelnl.com

2001:4de0:1::220 news.am4.highwinds-media.com power2.usenet.nl

2001:4de0:1::220 news.am4.highwinds-media.com ssl-news.snelnl.com

2001:4de0:1::220 news.ams.highwinds-media.com news-nl.newsgroup.ninja

2001:4de0:1::220 nl.sslusenet.com nl.sslusenet.com

2001:4de0:1::220 secure.newsfarm.ams2.highwinds-media.com europessl.usenet-access.com

2001:4de0:1::220 secure.newsfarm.ams2.highwinds-media.com news.ssl.nl.prepaid-usenet.de

2001:4de0:1::224 news6.ams.newshosting.com news6.ams.newshosting.com

2001:4de0:1::224 news6.ams.newshosting.com news-eu6.newshosting.com

2001:4de0:1::224 news6.ams.newshosting.com news-nl6.newshosting.com

2001:4de0:1::225 news6.ams.usenetserver.com news6.ams.usenetserver.com

2001:4de0:1::225 news6.eu.usenetserver.com news6.eu.usenetserver.com

2001:4de0:1::225 news6.eu.usenetserver.com news-eu6.usenetserver.com

2001:4de0:1::233 news6.eweka.nl news6.eweka.nl

2001:4de0:1::234 eu.geo.newsleecher.com eu.newsleecher.com

2001:4de0:1::234 eu.geo.newsleecher.com news.newsleecher.com

2001:4de0:1::234 news.am4.highwinds-media.com news.snelnl.com

2001:4de0:1::234 news.am4.highwinds-media.com power2.usenet.nl

2001:4de0:1::234 news.am4.highwinds-media.com ssl-news.snelnl.com

2001:4de0:1::234 news.ams.highwinds-media.com news-nl.newsgroup.ninja

2001:4de0:1::234 nl.sslusenet.com nl.sslusenet.com

2001:4de0:1::234 secure.newsfarm.ams2.highwinds-media.com europessl.usenet-access.com

2001:4de0:1::234 secure.newsfarm.ams2.highwinds-media.com news.ssl.nl.prepaid-usenet.de

2001:4de0:1::238 news6.ams.newshosting.com news6.ams.newshosting.com

2001:4de0:1::238 news6.ams.newshosting.com news-eu6.newshosting.com

2001:4de0:1::238 news6.ams.newshosting.com news-nl6.newshosting.com

2001:4de0:1::239 news6.ams.usenetserver.com news6.ams.usenetserver.com

2001:4de0:1::239 news6.eu.usenetserver.com news6.eu.usenetserver.com

2001:4de0:1::239 news6.eu.usenetserver.com news-eu6.usenetserver.com

2001:4de0:3:119::101 ams2.sslusenet.com ams2.sslusenet.com

2001:4de0:3:119::101 de.sslusenet.com de.sslusenet.com

2001:4de0:3:119::101 de.sslusenet.com news.sslusenet.com

2001:4de0:3:119::101 news.fr7.highwinds-media.com news3.snelnl.com

2001:4de0:3:119::101 news.fr7.highwinds-media.com news-de.newsgroup.ninja

2001:4de0:3:119::101 news.fr7.highwinds-media.com news.newsgroup.ninja

2001:4de0:3:119::101 news.fr7.highwinds-media.com news.premium-news.de

2001:4de0:3:119::101 news.fr7.highwinds-media.com news.shemes.com

2001:4de0:3:119::101 news.fr7.highwinds-media.com reader.snelnl.com

2001:4de0:3:119::109 secure6.news.eu.easynews.com secure6.news.easynews.com

2001:4de0:3:119::109 secure6.news.eu.easynews.com secure6.news.eu.easynews.com

2001:4de0:3:119::109 test-secure-eu-ipv6.news.easynews.com test-secure-eu-ipv6.news.easynews.com

2001:4de0:3:119::109 test-secure-eu.news.easynews.com test-secure-eu.news.easynews.com

2001:4de0:3:119::129 news6.fr7.newshosting.com news6.fr7.newshosting.com

2001:4de0:3:119::129 news6.fr7.newshosting.com news6.newshosting.com

2001:4de0:3:119::129 news6.fr7.newshosting.com news-de6.newshosting.com

2001:4de0:3:119::160 extremeusenet.sslusenet.com news.extremeusenet.nl

2001:4de0:3:119::160 extremeusenet.sslusenet.com reader.extremeusenet.nl

2001:4de0:3:119::161 pro.sslusenet.com pro.sslusenet.com

2001:4de0:3:119::162 news6.xlned.com news6.xlned.com

2001:4de0:3:119::163 news6.sunnyusenet.com news6.sunnyusenet.com

2001:4de0:3:119::164 news6.pureusenet.nl news6.pureusenet.nl

2001:4de0:3:119::170 extremeusenet.sslusenet.com news.extremeusenet.nl

2001:4de0:3:119::170 extremeusenet.sslusenet.com reader.extremeusenet.nl

2001:4de0:3:119::171 pro.sslusenet.com pro.sslusenet.com

2001:4de0:3:119::172 news6.xlned.com news6.xlned.com

2001:4de0:3:119::173 news6.sunnyusenet.com news6.sunnyusenet.com

2001:4de0:3:119::174 news6.pureusenet.nl news6.pureusenet.nl

2001:4de0:3:119::175 usenetbucket.sslusenet.com news.usenetbucket.com

2001:4de0:3:119::175 usenetbucket.sslusenet.com reader.usenetbucket.com

2001:4de0:3:119::176 news6.tweaknews.nl news6.tweaknews.nl

2001:4de0:3:119::177 news6.tweaknews.eu news6.tweaknews.eu

2001:4de0:3:119::64 news6.eu.usenetserver.com news6.eu.usenetserver.com

2001:4de0:3:119::64 news6.eu.usenetserver.com news-eu6.usenetserver.com

2001:4de0:3:119::64 news6.fr7.usenetserver.com news6.fr7.usenetserver.com

2001:4de0:3:119::64 news6.fr7.usenetserver.com news6.usenetserver.com

2001:4de0:3:119::65 news6.fr7.newshosting.com news6.fr7.newshosting.com

2001:4de0:3:119::65 news6.fr7.newshosting.com news6.newshosting.com

2001:4de0:3:119::65 news6.fr7.newshosting.com news-de6.newshosting.com

2001:4de0:3:119::69 ams2.sslusenet.com ams2.sslusenet.com

2001:4de0:3:119::69 de.sslusenet.com de.sslusenet.com

2001:4de0:3:119::69 de.sslusenet.com news.sslusenet.com

2001:4de0:3:119::69 news.fr7.highwinds-media.com news3.snelnl.com

2001:4de0:3:119::69 news.fr7.highwinds-media.com news-de.newsgroup.ninja

2001:4de0:3:119::69 news.fr7.highwinds-media.com news.newsgroup.ninja

2001:4de0:3:119::69 news.fr7.highwinds-media.com news.premium-news.de

2001:4de0:3:119::69 news.fr7.highwinds-media.com news.shemes.com

2001:4de0:3:119::69 news.fr7.highwinds-media.com reader.snelnl.com

2001:4de0:3:119::76 news6.eu.easynews.com news6.easynews.com

2001:4de0:3:119::76 news6.eu.easynews.com news6.eu.easynews.com

2001:4de0:3:119::76 test-eu-ipv6.news.easynews.com test-eu-ipv6.news.easynews.com

2001:4de0:3:119::76 test-eu.news.easynews.com test-eu.news.easynews.com

2001:4de0:3:119::96 news6.eu.usenetserver.com news6.eu.usenetserver.com

2001:4de0:3:119::96 news6.eu.usenetserver.com news-eu6.usenetserver.com

2001:4de0:3:119::96 news6.fr7.usenetserver.com news6.fr7.usenetserver.com

2001:4de0:3:119::96 news6.fr7.usenetserver.com news6.usenetserver.com

2001:4de0:3:119::97 news6.fr7.newshosting.com news6.fr7.newshosting.com

2001:4de0:3:119::97 news6.fr7.newshosting.com news6.newshosting.com

2001:4de0:3:119::97 news6.fr7.newshosting.com news-de6.newshosting.com

2001:67c:174:101:0:65:ff02:122 reader6.newsxs.nl reader6.newsxs.nl

2001:67c:174:101:0:65:ff02:126 news.gebruikhet.net news.gebruikhet.net

2001:67c:174:101:0:65:ff02:128 nl.eu.easyusenet.nntpnet.com news.easyusenet.nl

2001:67c:174:101:0:65:ff02:128 nl.eu.easyusenet.nntpnet.com reader.easyusenet.nl

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com news.xsnews.nl

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.com

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.co.uk

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.de

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.es

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.fr

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.it

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.nl

2001:67c:174:101:0:65:ff02:131 nl.eu.xsnews.nntpnet.com reader.xsnews.pt

2001:67c:174:101:0:65:ff02:154 news.bulknews.eu news.bulknews.eu

2001:67c:174:101:0:65:ff02:155 reader.usenetdiscounter.com reader.usenetdiscounter.com

2001:67c:174:101:0:65:ff02:167 reader.usenet.agency reader.usenet.agency

2001:67c:174:101:0:65:ff02:168 news.stingyusenet.com news.stingyusenet.com

2001:67c:174:101:0:65:ff02:169 news.usenet.org news.usenet.org

2001:67c:174:101:0:65:ff02:170 reader.usenight.com reader.usenight.com

2001:67c:174:101:0:65:ff02:171 news.kpn.nl news.kpn.nl

2001:67c:174:101:0:65:ff02:172 news.xs4all.nl news.xs4all.nl

2001:67c:174:101:0:65:ff02:172 newszilla.xs4all.nl newszilla.xs4all.nl

2001:67c:174:101:0:65:ff02:174 news.hitnews.com news.hitnews.com

2001:67c:174:101:0:65:ff02:181 reader.turbousenet.com reader.turbousenet.com

2001:67c:174:101::1002 news.xennanews.com news.xennanews.com

2001:67c:174:101:1:65:201:236 test.xsnews.com test.xsnews.com

2607:bc40:0:119::2:1 news-v6.frugalusenet.com news-v6.frugalusenet.com

2607:bc40:0:119::2:2 news-v6.frugalusenet.com news-v6.frugalusenet.com

2607:bc40:0:119::2:3 news-v6.frugalusenet.com news-v6.frugalusenet.com

2607:bc40:0:119::2:4 news-v6.frugalusenet.com news-v6.frugalusenet.com

2607:bc40:100::2 asnews-v6.frugalusenet.com asnews-v6.frugalusenet.com

2607:bc40:101::2 sanews-v6.frugalusenet.com sanews-v6.frugalusenet.com

2607:bc40:102::3 aunews-v6.frugalusenet.com aunews-v6.frugalusenet.com

2607:bc40:2:119::1:1 eunews-v6.blocknews.net eunews-v6.blocknews.net

2607:bc40:2:119::1:2 eunews-v6.blocknews.net eunews-v6.blocknews.net

2607:bc40:2:119::1:3 eunews-v6.blocknews.net eunews-v6.blocknews.net

2607:bc40:2:119::1:4 eunews-v6.blocknews.net eunews-v6.blocknews.net

2607:bc40:2:119::2:1 eunews-v6.frugalusenet.com eunews-v6.frugalusenet.com

2607:bc40:2:119::2:2 eunews-v6.frugalusenet.com eunews-v6.frugalusenet.com

2607:bc40:2:119::2:3 eunews-v6.frugalusenet.com eunews-v6.frugalusenet.com

2607:bc40:2:119::2:4 eunews-v6.frugalusenet.com eunews-v6.frugalusenet.com

2607:bc40:2:119::3:1 eunews-v6.usenetnow.net eunews-v6.usenetnow.net

2607:bc40:2:119::3:2 eunews-v6.usenetnow.net eunews-v6.usenetnow.net

2607:bc40:2:119::3:3 eunews-v6.usenetnow.net eunews-v6.usenetnow.net

2607:bc40:2:119::3:4 eunews-v6.usenetnow.net eunews-v6.usenetnow.net

2a00:1d38:fa:1001:119::1 news6.usenet.farm news6.usenet.farm

2a00:1d38:fa:1001:119::1 news.usenet.farm news.usenet.farm

2a00:1d38:fa:1001:119::1 news.usenet.farm news.usenetfarm.eu

2a00:1d38:fa:1001:119::2 blue.usenetnews.net blue.usenetnews.net

2a00:1d38:fa:1001:119::4 news6.usenet.farm news6.usenet.farm

2a00:1d38:fa:1001:119::4 news.usenet.farm news.usenet.farm

2a00:1d38:fa:1001:119::4 news.usenet.farm news.usenetfarm.eu

2a00:1d38:fa:1001:119::6 rid47.usenet.business farm.newsgroupdirect.com

2a01:4f8:1c17:f346::1 news.solani.org news.solani.org

2a01:4f8:c010:63b5::1 news.solani.org news.solani.org

2a01:4f9:4b:44c2::2 news.eternal-september.org news.eternal-september.org

2a01:4f9:c012:f55a::1 nntp.eternal-september.org reader443.eternal-september.org

2a01:788:4:100::217 iad.sslusenet.com iad.sslusenet.com

2a01:788:4:100::217 news.iad.highwinds-media.com news2.snelnl.com

2a01:788:4:100::217 news.iad.highwinds-media.com news-us.newsgroup.ninja

2a01:788:4:100::217 news.iad.highwinds-media.com ssl-news2.snelnl.com

2a01:788:4:100::217 secure.newsfarm.iad.highwinds-media.com news.ssl.usa.prepaid-usenet.de

2a01:788:4:100::217 secure.newsfarm.iad.highwinds-media.com secure.newsgroup-binaries.com

2a01:788:4:100::217 secure.newsfarm.iad.highwinds-media.com ssl.usenet-access.com

2a01:788:4:100::217 us.geo.newsleecher.com us.newsleecher.com

2a01:788:4:100::217 us.sslusenet.com us.sslusenet.com

2a01:788:4:100::219 us6.astraweb.com us6.astraweb.com

2a01:788:4:100::220 iad.sslusenet.com iad.sslusenet.com

2a01:788:4:100::220 news.iad.highwinds-media.com news2.snelnl.com

2a01:788:4:100::220 news.iad.highwinds-media.com news-us.newsgroup.ninja

2a01:788:4:100::220 news.iad.highwinds-media.com ssl-news2.snelnl.com

2a01:788:4:100::220 secure.newsfarm.iad.highwinds-media.com news.ssl.usa.prepaid-usenet.de

2a01:788:4:100::220 secure.newsfarm.iad.highwinds-media.com secure.newsgroup-binaries.com

2a01:788:4:100::220 secure.newsfarm.iad.highwinds-media.com ssl.usenet-access.com

2a01:788:4:100::220 us.geo.newsleecher.com us.newsleecher.com

2a01:788:4:100::220 us.sslusenet.com us.sslusenet.com

2a01:788:4:100::221 news6.iad.usenetserver.com news6.iad.usenetserver.com

2a01:788:4:100::221 news6.iad.usenetserver.com news-us6.usenetserver.com

2a01:788:4:100::225 news6.iad.newshosting.com news6.iad.newshosting.com

2a01:788:4:100::225 news6.iad.newshosting.com news-us6.newshosting.com

2a01:788:4:100::230 news6.us.easynews.com news6.us.easynews.com

2a01:788:4:100::230 test-us-ipv6.news.easynews.com test-us-ipv6.news.easynews.com

2a01:788:4:100::230 test-us.news.easynews.com test-us.news.easynews.com

2a01:788:4:100::231 secure6.news.us.easynews.com secure6.news.us.easynews.com

2a01:788:4:100::231 test-secure-us-ipv6.news.easynews.com test-secure-us-ipv6.news.easynews.com

2a01:788:4:100::231 test-secure-us.news.easynews.com test-secure-us.news.easynews.com

2a01:788:4:100::240 news6.iad.usenetserver.com news6.iad.usenetserver.com

2a01:788:4:100::240 news6.iad.usenetserver.com news-us6.usenetserver.com

2a01:788:4:100::243 news6.us.easynews.com news6.us.easynews.com

2a01:788:4:100::243 test-us-ipv6.news.easynews.com test-us-ipv6.news.easynews.com

2a01:788:4:100::243 test-us.news.easynews.com test-us.news.easynews.com

2a01:788:4:100::244 secure6.news.us.easynews.com secure6.news.us.easynews.com

2a01:788:4:100::244 test-secure-us-ipv6.news.easynews.com test-secure-us-ipv6.news.easynews.com

2a01:788:4:100::244 test-secure-us.news.easynews.com test-secure-us.news.easynews.com

2a01:788:4:100::251 news6.iad.newshosting.com news6.iad.newshosting.com

2a01:788:4:100::251 news6.iad.newshosting.com news-us6.newshosting.com

2a01:788:4:100::254 us6.astraweb.com us6.astraweb.com

2a02:d28:10:1b:0:431:ff02:164 news.cheapnews.eu news.cheapnews.eu

2a02:d28:10:1b:0:431:ff02:165 block.cheapnews.eu block.cheapnews.eu

2a07:8080:119:1fe::132 news.usenetexpress.com news.usenetexpress.com

2a07:8080:119:1fe::133 nd.tlsusenet.com europe.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com europe-ssl.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com news.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com nl.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com useast.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com us.newsdemon.com

2a07:8080:119:1fe::133 nd.tlsusenet.com us-secure.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com europe.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com europe-ssl.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com news.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com nl.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com useast.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com us.newsdemon.com

2a07:8080:119:1fe::157 nd.tlsusenet.com us-secure.newsdemon.com

2a07:8080:119:1fe::158 news.usenetexpress.com news.usenetexpress.com

2a07:8080:119:fe::121 news.newsgroupdirect.com de.newsgroupdirect.com

2a07:8080:119:fe::121 news.newsgroupdirect.com news-eu.newsgroupdirect.com

2a07:8080:119:fe::121 news.newsgroupdirect.com news-eu-ssl.newsgroupdirect.com

2a07:8080:119:fe::121 news.newsgroupdirect.com news.maximumusenet.com

2a07:8080:119:fe::121 news.newsgroupdirect.com news.newsgroupdirect.com

2a07:8080:119:fe::121 news.newsgroupdirect.com news-ssl.newsgroupdirect.com

2a07:8080:119:fe::121 news.newsgroupdirect.com useast.maximumusenet.com

2a07:8080:119:fe::121 news.newsgroupdirect.com us-secure.maximumusenet.com

2a07:8080:119:fe::124 usenetprime.tlsusenet.com news.usenetprime.com

2a07:8085:119:fe::170 news-eu.usenetexpress.com news-eu.usenetexpress.com

2a07:8085:119:fe::176 nd-eu.tlsusenet.com eu.newsdemon.com

2a07:8085:119:fe::180 news-eu.usenetexpress.com news-eu.usenetexpress.com

2a07:8085:119:fe::181 eu-tst.newsgroupdirect.com eu-tst.newsgroupdirect.com

2a07:8085:119:fe::186 nd-eu.tlsusenet.com eu.newsdemon.com

2a13:d6c0:1:16::119 news6.dwld.link news6.dwld.link

2a13:d6c0:1:16::119 news.dwld.link news.dwld.link

2a13:d6c0:1:16::119 news.dwld.link reader.high-way.me

2a13:d6c0:1:16::119 news.dwld.link reader.simply-premium.com

IPv6 ranges of newsservers

Based on the overview on https://www.appelboor.com/newsservers/newsservers-with-SSL-TLS-OK.html with about 300 newsservers, I did resolving, and some sorting to find IPv6 ranges of newsservers:


$ lynx --dump https://www.appelboor.com/newsservers/newsservers-with-SSL-TLS-OK.html | grep -E ".*\..*\."  | awk '{ print "host " $1 " > " $1 ".txt"  }' | sh


and only using the left 4x4-octet parts (what's the official name?):


$ cat *.txt | grep "has IPv6 address"   | awk '{ print $NF }'   | awk -F\: '{ print $1 ":" $2 ":" $3 ":" $4 "::" }'   | sort | uniq -c | sort -rn

     59 2001:4de0:3:119::

     40 2a01:788:4:100::

     36 2001:4de0:1:::

     26 2001:67c:174:101::

     16 2a07:8080:119:1fe::

     12 2607:bc40:2:119::

      9 2a07:8080:119:fe::

      8 2a00:1d38:fa:1001::

      5 2a07:8085:119:fe::

      4 2a13:d6c0:1:16::

      4 2607:bc40:0:119::

      2 2a02:d28:10:1b::

      1 2a01:4f9:c012:f55a::

      1 2a01:4f9:4b:44c2::

      1 2a01:4f8:c010:63b5::

      1 2a01:4f8:1c17:f346::

      1 2607:bc40:102:::

      1 2607:bc40:101:::

      1 2607:bc40:100:::

      1 2001:49f0:d086:1000::

      1 1:67c:174:101::



So 2001:4de0:3:119:: is the most occuring IPv6 range (note the funny 119 ... port 119 of NNTP). Which is Eweka. 

Let's see which newsserver point to this range:




$ grep 2001:4de0:3:119 *.txt | awk -F\: '{ print $1 }'   | sort -u | sed -e 's/.txt//'

ams2.sslusenet.com

de.sslusenet.com

news3.snelnl.com

news6.easynews.com

news6.eu.easynews.com

news6.eu.usenetserver.com

news6.fr7.newshosting.com

news6.fr7.usenetserver.com

news6.newshosting.com

news6.pureusenet.nl

news6.sunnyusenet.com

news6.tweaknews.eu

news6.tweaknews.nl

news6.usenetserver.com

news6.xlned.com

news-de6.newshosting.com

news-de.newsgroup.ninja

news-eu6.usenetserver.com

news.extremeusenet.nl

news.newsgroup.ninja

news.premium-news.de

news.shemes.com

news.sslusenet.com

news.usenetbucket.com

pro.sslusenet.com

reader.extremeusenet.nl

reader.snelnl.com

reader.usenetbucket.com

secure6.news.easynews.com

secure6.news.eu.easynews.com

test-eu-ipv6.news.easynews.com

test-eu.news.easynews.com

test-secure-eu-ipv6.news.easynews.com

test-secure-eu.news.easynews.com


Ah: Eweka itself is in another range


$ host news6.eweka.nl

news6.eweka.nl has IPv6 address 2001:4de0:1::219

news6.eweka.nl has IPv6 address 2001:4de0:1::205

news6.eweka.nl has IPv6 address 2001:4de0:1::233


So let's use less octets from the IPv6 addresses: just 2x4octets:


$ cat *.txt | grep "has IPv6 address"   | awk '{ print $NF }'   | awk -F\: '{ print $1 ":" $2 "::" }'   | sort | uniq -c | sort -rn

     95 2001:4de0::

     40 2a01:788::

     26 2001:67c::

     25 2a07:8080::

     19 2607:bc40::

      8 2a00:1d38::

      5 2a07:8085::

      4 2a13:d6c0::

      2 2a02:d28::

      2 2a01:4f9::

      2 2a01:4f8::

      1 2001:49f0::

      1 1:67c::


Eweka number one!


And now the interesting part: which newsservers have IPv4, but have not configured the corresponding IPv6 address in their DNS / name resolving. Bad, bad, bad!!!



IPv6 or no IPv6 ... inferring an IPv6 address of a IPv4-only newsserver

Very hacky, but nice:


The newsserver eu.usenetprime.com has no IPv6 address:


$ host eu.usenetprime.com

eu.usenetprime.com is an alias for usenetprime-eu.tlsusenet.com.

usenetprime-eu.tlsusenet.com has address 185.151.15.173


Pity. But with some analysis of others newsservers, I could infer the IPv6 address, and bingo:


$ telnet -6 2a07:8085:119:fe::173 nntp

Trying 2a07:8085:119:fe::173...

Connected to 2a07:8085:119:fe::173.

Escape character is '^]'.

200 Welcome to UsenetPrime

quit

205 Goodbye

Connection closed by foreign host.



These newsservers are hosted by a wholesaler, and there is logic between IPv4 and IPv6 address:


185.151.15.X --- 2a07:8085:119:fe::X

with X written the same. Which means on the left decimal, and hexadecimal on the right. Just ignore that.



See below how I did it.


Ugly logging of "host <newsserver>" commands:


eu.newsdemon.com.txt-eu.newsdemon.com is an alias for nd-eu.tlsusenet.com.

eu.newsdemon.com.txt:nd-eu.tlsusenet.com has address 185.151.15.176

eu.newsdemon.com.txt:nd-eu.tlsusenet.com has address 185.151.15.186

eu.newsdemon.com.txt-nd-eu.tlsusenet.com has IPv6 address 2a07:8085:119:fe::176

eu.newsdemon.com.txt-nd-eu.tlsusenet.com has IPv6 address 2a07:8085:119:fe::186




eu-tst.newsgroupdirect.com.txt:eu-tst.newsgroupdirect.com has address 185.151.15.171

eu-tst.newsgroupdirect.com.txt:eu-tst.newsgroupdirect.com has address 185.151.15.181

eu-tst.newsgroupdirect.com.txt-eu-tst.newsgroupdirect.com has IPv6 address 2a07:8085:119:fe::181



news-eu.usenetexpress.com.txt:news-eu.usenetexpress.com has address 185.151.15.180

news-eu.usenetexpress.com.txt:news-eu.usenetexpress.com has address 185.151.15.170

news-eu.usenetexpress.com.txt-news-eu.usenetexpress.com has IPv6 address 2a07:8085:119:fe::180

news-eu.usenetexpress.com.txt-news-eu.usenetexpress.com has IPv6 address 2a07:8085:119:fe::170



Manual check that telnet works:



$ telnet -6 2a07:8085:119:fe::180 nntp

Trying 2a07:8085:119:fe::180...

Connected to 2a07:8085:119:fe::180.

Escape character is '^]'.

200 Welcome to UsenetExpress (fe02)

quit

205 Goodbye

Connection closed by foreign host.


Good.


Now the IPv4-only newsserver of which we want to infer the IPv6 address:



$ host eu.usenetprime.com

eu.usenetprime.com is an alias for usenetprime-eu.tlsusenet.com.

usenetprime-eu.tlsusenet.com has address 185.151.15.173



... ending in "117", so let's try 2a07:8085:119:fe::173


$ telnet -6 2a07:8085:119:fe::173 nntp

Trying 2a07:8085:119:fe::173...

Connected to 2a07:8085:119:fe::173.

Escape character is '^]'.

200 Welcome to UsenetPrime

quit

205 Goodbye

Connection closed by foreign host.



Bingo!