So Confused...

tarantula · April 14th, 2008, 8:06 PM

Hi All,

So I have an interesting and reallly confusing problem. I sent the problem to the helpdesk, but in the meantime, I'd love to hear everyone's opinion on the matter:

I was browsing through my logs today, and I found several odd domain names referring to my site. Upon further inspection, I learned that they are exact mirrors of my site, and when I pinged them, I learned that they ping back to my IP address. What is particularly concerning is if you go to /webmail or /cpanel it keeps the domain name, but gets into my site. This leads me to believe that the domains are somehow parked on my system, but they don't seem to show up in WHM at all (I have a dedi btw). The domain names follow. Thanks as always!

*Tarantula

Domains:
My actual domain:
-http://www.tarantulawebsolutions.com
Other random domains:
- http://www.nnonievrsoccer.com
- http://www.nocrvesioncern.com
- http://www.nreconrvesiocn.com
- http://www.rconsreviocnen.com
- http://www.rcnoversiconen.com
- http://www.nreooisrvencnc.com
- http://www.ncooversincner.com
- http://www.nrncievrsonoce.com

tarantula · April 14th, 2008, 9:02 PM

Update: The helpdesk people (who have been amazing, by the way) found out that whoever these people are set their A-records to my IP address. So there isn't actually a security threat to me, it's really strange though. Why do you think anyone would want to do that?

H · April 14th, 2008, 9:07 PM

Maybe the IP got reused?

April 14th, 2008, 8:06 PM	#1 (permalink)
tarantula Registered User Seasoned Poster Joined in Jun 2004 34 posts Gave thanks: 0 Thanked 3 times	So Confused... Hi All, So I have an interesting and reallly confusing problem. I sent the problem to the helpdesk, but in the meantime, I'd love to hear everyone's opinion on the matter: I was browsing through my logs today, and I found several odd domain names referring to my site. Upon further inspection, I learned that they are exact mirrors of my site, and when I pinged them, I learned that they ping back to my IP address. What is particularly concerning is if you go to /webmail or /cpanel it keeps the domain name, but gets into my site. This leads me to believe that the domains are somehow parked on my system, but they don't seem to show up in WHM at all (I have a dedi btw). The domain names follow. Thanks as always! Tarantula Domains: My actual domain: -http://www.tarantulawebsolutions.com Other random domains: - http://www.nnonievrsoccer.com - http://www.nocrvesioncern.com - http://www.nreconrvesiocn.com - http://www.rconsreviocnen.com - http://www.rcnoversiconen.com - http://www.nreooisrvencnc.com - http://www.ncooversincner.com - http://www.nrncievrsonoce.com __________________ Dedicated Server: featherleg.tarantulawebsolutions.com* Last edited by tarantula; April 14th, 2008 at 8:08 PM.

April 14th, 2008, 9:02 PM	#2 (permalink)
tarantula Registered User Seasoned Poster Joined in Jun 2004 34 posts Gave thanks: 0 Thanked 3 times	Update: The helpdesk people (who have been amazing, by the way) found out that whoever these people are set their A-records to my IP address. So there isn't actually a security threat to me, it's really strange though. Why do you think anyone would want to do that? __________________ Dedicated Server: featherleg.tarantulawebsolutions.com

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

April 14th, 2008, 9:07 PM	#3 (permalink)
H after g, before i Super #1 Joined in Jul 2004 Hosted on Gojira 7,870 posts Gave thanks: 44 Thanked 127 times	Maybe the IP got reused?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)