Info on saneeka.com

Useless · 2006-12-18, 06:11 PM

As the title says, I'm wondering if anyone knows anything about saneeka.com or its owner.
Hint:

Quote:

reverse mapping checking getaddrinfo for server1.saneeka.com failed - POSSIBLE BREAKIN ATTEMPT!

cd34 · 2006-12-18, 06:14 PM

that message comes from an IP address that has a reverse dns entry, where the forward dns entry either doesn't match or doesn't exist.

In this case:

Code:

mcd@tsavo:~$ host server1.saneeka.com
server1.saneeka.com does not exist, try again

So, you probably need to find out what the Ip address is, who owns that, and then determine if that IP is a threat.

Useless · 2006-12-18, 06:23 PM

Quote:

Originally Posted by cd34

So, you probably need to find out what the Ip address is, who owns that, and then determine if that IP is a threat.

Well, that's the funny thing - I get the daily emails from my server's brute force detection letting me know that it has blocked such and such IP. But the one for saneeka.com was completely different. Intead of an IP being blocked, server1.saneeka.com has been blocked. Plus it had the wonderful "POSSIBLE BREAKIN ATTEMPT!" statement in the message.

I'd like to take this time to let any possible hackers know that I don't have enough traffic to make your time worthwhile.

Toby · 2006-12-18, 07:29 PM

Search results for: 67.15.41.4

Everyones Internet EVRY-BLK-15 (NET-67-15-0-0-1)
67.15.0.0 - 67.15.255.255
Empire Host Inc. EVRY-55 (NET-67-15-41-0-1)
67.15.41.0 - 67.15.41.255

# ARIN WHOIS database, last updated 2006-12-17 19:10

Empire Host Inc.
1800 Rue Beaulac
Saint-Laurent, QC
H4R 1W8
Telephone: (514) 807-3642

tickler · 2006-12-18, 10:49 PM

I'm not positive, but, that IP address looks like one that kept trying to hit me with IRC.trojans all the time until I turned the ports off.

Useless · 2006-12-19, 07:29 AM

The brute force attempts on my server have doubled since posting this last night.

2006-12-18, 06:14 PM	#2
cd34 a.k.a. Sparky Join Date: Sep 2004 Location: West Palm Beach, FL, USA Posts: 2,396	that message comes from an IP address that has a reverse dns entry, where the forward dns entry either doesn't match or doesn't exist. In this case: Code: mcd@tsavo:~$ host server1.saneeka.com server1.saneeka.com does not exist, try again So, you probably need to find out what the Ip address is, who owns that, and then determine if that IP is a threat. __________________ SnapReplay.com a different way to share photos - iPhone & Android

2006-12-18, 07:29 PM	#4
Toby Lonewolf Internet Sales Join Date: Mar 2005 Location: Houston Posts: 4,826	Search results for: 67.15.41.4 Everyones Internet EVRY-BLK-15 (NET-67-15-0-0-1) 67.15.0.0 - 67.15.255.255 Empire Host Inc. EVRY-55 (NET-67-15-41-0-1) 67.15.41.0 - 67.15.41.255 # ARIN WHOIS database, last updated 2006-12-17 19:10 Empire Host Inc. 1800 Rue Beaulac Saint-Laurent, QC H4R 1W8 Telephone: (514) 807-3642 __________________ Latex Vixens Babes In Boots Well Heeled Women Dressing For Sex Stocking Vixens

2006-12-18, 10:49 PM	#5
tickler If there is nobody out there, that's a lot of real estate going to waste! Join Date: Dec 2003 Posts: 2,177	I'm not positive, but, that IP address looks like one that kept trying to hit me with IRC.trojans all the time until I turned the ports off. __________________ Latina Twins, Solo, NN, Hardcore Latin Teen Cash

2006-12-19, 07:29 AM	#6
Useless Certified Nice Person Join Date: Oct 2003 Location: Dirty Undies, NY Posts: 11,268	The brute force attempts on my server have doubled since posting this last night.