misconfigured server?

**jdcopelin** · April 25th, 2006, 4:28 PM

Hi,

I've just been reviewing the logs on my server and noticed that another computer with a dimenoc ip accesses my server every five minutes. I presume that they must have some sort of script that is misconfigured, or is it surpass checking that the server is up (although the ip concerned appears to belong to one of their customers)? Here is an extract of the apache status from WHM:

5-0 30750/1933/1933_ 5.471781910.08.698.69 otherdimenocip myserver.dimenocGET / HTTP/1.0
6-0 30760/1940/1940_ 5.662442710.08.858.85 otherdimenocip myserver.dimenocGET / HTTP/1.0
7-0 30770/1934/1934_ 5.951781910.08.908.90 otherdimenocip myserver.dimenocGET / HTTP/1.0
It visits the server more frequently than I do

Is it good "netiquette" to attempt to contact who I believe the server belongs to or do I go through the surpass helpdesk?

Any advice appreciated!

Cheers
Jonathan

**David** · April 25th, 2006, 5:45 PM

Contact the help desk. Anytime I notice any Dimenoc related ip addresses doing weird things in my logs, I let them know.

**Emmanuel** · April 25th, 2006, 9:24 PM

It may be our monitoring server but without knowning the ip it is hard to tell like David said sending a helpdesk ticket will let us check for sure.

**Geoff** · April 25th, 2006, 9:55 PM

what i have been wondering is how different bots are showing up trying to index all teh domains on my server at about the same time. its like that can obtain a list of domains associated with an IP address? lol

**David** · April 26th, 2006, 6:18 AM

Quote:

Originally Posted by Geoff

like that can obtain a list of domains associated with an IP address? lol

You can using reverse IP searches.

**Geoff** · April 26th, 2006, 7:13 AM

ive done a reverse ip lookup before, but it usually returns just the servers hostname, such as mine is server.adepttechs.net, they wont normally list all the sites associated with it? unless you know of a service somewhere i dont:P lol

**David** · April 26th, 2006, 8:25 AM

Try the reverse ip done on http://www.Domaintools.com (formerly whois.sc)

You have to have a membership there to do it. I only pulled up two domains on yours though, but yours doesn't seem to be working the same as everyone elses.

**Geoff** · April 26th, 2006, 9:18 AM

impressive, ive been using various dns tools for a wide range of reasons the last few years, and ive never come accross this service. but then again, i cant say i
ever needed it.

but lol, if youd like to know why mine isnt working? lol. I have my business domains set up on its own IP to accomodate SSL, so when it tried to resolve my servers hostname, server.adepttechs.net, it was resolving to a private IP address which only had 2 domains. my main shared IP lists like 15, which still isnt the total as i have a few other people on private IPs as well.

**jdcopelin** · April 26th, 2006, 3:32 PM

Thanks guys, I have submitted a ticket stating the IP address concerned.

April 25th, 2006, 4:28 PM	#1 (permalink)
jdcopelin Surpass Fan Comfy Contributor Joined in Feb 2004 Lives in Norfolk, England Hosted on Pass32 167 posts Gave thanks: 23 Thanked 19 times	misconfigured server? Hi, I've just been reviewing the logs on my server and noticed that another computer with a dimenoc ip accesses my server every five minutes. I presume that they must have some sort of script that is misconfigured, or is it surpass checking that the server is up (although the ip concerned appears to belong to one of their customers)? Here is an extract of the apache status from WHM: 5-0 30750/1933/1933_ 5.471781910.08.698.69 otherdimenocip myserver.dimenocGET / HTTP/1.0 6-0 30760/1940/1940_ 5.662442710.08.858.85 otherdimenocip myserver.dimenocGET / HTTP/1.0 7-0 30770/1934/1934_ 5.951781910.08.908.90 otherdimenocip myserver.dimenocGET / HTTP/1.0 It visits the server more frequently than I do Is it good "netiquette" to attempt to contact who I believe the server belongs to or do I go through the surpass helpdesk? Any advice appreciated! Cheers Jonathan __________________ Server: Pass32 and dedicated server

April 25th, 2006, 5:45 PM	#2 (permalink)
David says GIMME SOME MORE! Resident. Joined in Mar 2004 Lives in fear of Obama. Hosted on Pass 7 13,092 posts Gave thanks: 8 Thanked 34 times	Contact the help desk. Anytime I notice any Dimenoc related ip addresses doing weird things in my logs, I let them know. __________________

April 25th, 2006, 9:24 PM	#3 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,823 posts Gave thanks: 10 Thanked 134 times	It may be our monitoring server but without knowning the ip it is hard to tell like David said sending a helpdesk ticket will let us check for sure. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

April 25th, 2006, 9:55 PM	#4 (permalink)
Geoff Yabadabadoo Super #1 Joined in Nov 2004 Lives in B.C., Canada Hosted on Dedicated 1,013 posts Gave thanks: 7 Thanked 28 times	what i have been wondering is how different bots are showing up trying to index all teh domains on my server at about the same time. its like that can obtain a list of domains associated with an IP address? lol __________________ Geoff Ellis - Surpass Dedicated Server Customer www.adepttechs.net

April 26th, 2006, 7:13 AM	#6 (permalink)
Geoff Yabadabadoo Super #1 Joined in Nov 2004 Lives in B.C., Canada Hosted on Dedicated 1,013 posts Gave thanks: 7 Thanked 28 times	ive done a reverse ip lookup before, but it usually returns just the servers hostname, such as mine is server.adepttechs.net, they wont normally list all the sites associated with it? unless you know of a service somewhere i dont:P lol __________________ Geoff Ellis - Surpass Dedicated Server Customer www.adepttechs.net

April 26th, 2006, 8:25 AM	#7 (permalink)
David says GIMME SOME MORE! Resident. Joined in Mar 2004 Lives in fear of Obama. Hosted on Pass 7 13,092 posts Gave thanks: 8 Thanked 34 times	Try the reverse ip done on http://www.Domaintools.com (formerly whois.sc) You have to have a membership there to do it. I only pulled up two domains on yours though, but yours doesn't seem to be working the same as everyone elses. __________________

April 26th, 2006, 9:18 AM	#8 (permalink)
Geoff Yabadabadoo Super #1 Joined in Nov 2004 Lives in B.C., Canada Hosted on Dedicated 1,013 posts Gave thanks: 7 Thanked 28 times	impressive, ive been using various dns tools for a wide range of reasons the last few years, and ive never come accross this service. but then again, i cant say i ever needed it. but lol, if youd like to know why mine isnt working? lol. I have my business domains set up on its own IP to accomodate SSL, so when it tried to resolve my servers hostname, server.adepttechs.net, it was resolving to a private IP address which only had 2 domains. my main shared IP lists like 15, which still isnt the total as i have a few other people on private IPs as well. __________________ Geoff Ellis - Surpass Dedicated Server Customer www.adepttechs.net

April 26th, 2006, 3:32 PM	#9 (permalink)
jdcopelin Surpass Fan Comfy Contributor Joined in Feb 2004 Lives in Norfolk, England Hosted on Pass32 167 posts Gave thanks: 23 Thanked 19 times	Thanks guys, I have submitted a ticket stating the IP address concerned. __________________ Server: Pass32 and dedicated server

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search