PDA

View Full Version : Info on saneeka.com


Useless
2006-12-18, 07:11 PM
As the title says, I'm wondering if anyone knows anything about saneeka.com or its owner.
Hint:
reverse mapping checking getaddrinfo for server1.saneeka.com failed - POSSIBLE BREAKIN ATTEMPT!

cd34
2006-12-18, 07:14 PM
that message comes from an IP address that has a reverse dns entry, where the forward dns entry either doesn't match or doesn't exist.

In this case:


mcd@tsavo:~$ host server1.saneeka.com
server1.saneeka.com does not exist, try again


So, you probably need to find out what the Ip address is, who owns that, and then determine if that IP is a threat.

Useless
2006-12-18, 07:23 PM
So, you probably need to find out what the Ip address is, who owns that, and then determine if that IP is a threat.Well, that's the funny thing - I get the daily emails from my server's brute force detection letting me know that it has blocked such and such IP. But the one for saneeka.com was completely different. Intead of an IP being blocked, server1.saneeka.com has been blocked. Plus it had the wonderful "POSSIBLE BREAKIN ATTEMPT!" statement in the message.

I'd like to take this time to let any possible hackers know that I don't have enough traffic to make your time worthwhile. |cry|

Toby
2006-12-18, 08:29 PM
Search results for: 67.15.41.4

Everyones Internet EVRY-BLK-15 (NET-67-15-0-0-1)
67.15.0.0 - 67.15.255.255
Empire Host Inc. EVRY-55 (NET-67-15-41-0-1)
67.15.41.0 - 67.15.41.255

# ARIN WHOIS database, last updated 2006-12-17 19:10

Empire Host Inc.
1800 Rue Beaulac
Saint-Laurent, QC
H4R 1W8
Telephone: (514) 807-3642

tickler
2006-12-18, 11:49 PM
I'm not positive, but, that IP address looks like one that kept trying to hit me with IRC.trojans all the time until I turned the ports off.

Useless
2006-12-19, 08:29 AM
The brute force attempts on my server have doubled since posting this last night.
|jackinthe