killspamdead Posted October 17, 2008 Posted October 17, 2008 Hello, we have been getting reports, non-stop. i have located the issue. when i ping any one of the domains that are in the reports we get, i get this. --------------------------------------------------------------------------------------------------- [root[at]processing ~]# ping www.morethan-greatprogress.cn PING www.morethan-greatprogress.cn (200.201.193.194) 56(84) bytes of data. 64 bytes from celtec.hosting.matrix.com.br (200.201.193.194): icmp_seq=1 ttl=113 time=173 ms 64 bytes from celtec.hosting.matrix.com.br (200.201.193.194): icmp_seq=2 ttl=113 time=172 ms --- www.morethan-greatprogress.cn ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms rtt min/avg/max/mdev = 172.098/172.832/173.567/0.843 ms [root[at]processing ~]# [root[at]processing ~]# ping www.morethan-greatprogress.cn PING www.morethan-greatprogress.cn (200.35.146.207) 56(84) bytes of data. 64 bytes from www.sendhomeeflyer.com (200.35.146.207): icmp_seq=1 ttl=116 time=98.7 ms 64 bytes from www.sendhomeeflyer.com (200.35.146.207): icmp_seq=2 ttl=116 time=98.5 ms --- www.morethan-greatprogress.cn ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 2294ms rtt min/avg/max/mdev = 98.520/98.656/98.792/0.136 ms [root[at]processing ~]# [root[at]processing ~]# [root[at]processing ~]# ping www.morethan-greatprogress.cn PING www.morethan-greatprogress.cn (200.6.158.80) 56(84) bytes of data. 64 bytes from server-0062.dnspprincipal.com (200.6.158.80): icmp_seq=1 ttl=117 time=492 ms 64 bytes from server-0062.dnspprincipal.com (200.6.158.80): icmp_seq=2 ttl=117 time=53.3 ms --- www.morethan-greatprogress.cn ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1071ms rtt min/avg/max/mdev = 53.387/273.173/492.959/219.786 ms [root[at]processing ~]# [root[at]processing ~]# [root[at]processing ~]# ping www.morethan-greatprogress.cn PING www.morethan-greatprogress.cn (213.143.2.58) 56(84) bytes of data. 64 bytes from synan03.wiredworkplace.net (213.143.2.58): icmp_seq=1 ttl=111 time=123 ms 64 bytes from synan03.wiredworkplace.net (213.143.2.58): icmp_seq=2 ttl=111 time=123 ms --- www.morethan-greatprogress.cn ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms rtt min/avg/max/mdev = 123.964/123.971/123.979/0.352 ms --------------------------------------------------------------------------------------------------- random ip addresses. one of them comes up as ours, and that is not correct. how can i help get this corrected? TIA.
StevenUnderwood Posted October 17, 2008 Posted October 17, 2008 we have been getting reports, non-stop. i have located the issue. when i ping any one of the domains that are in the reports we get, i get this. --------------------------------------------------------------------------------------------------- random ip addresses. one of them comes up as ours, and that is not correct. how can i help get this corrected? Have you completely checked that IP address and made sure that it is not hosting a spammers site. That is usually what these do. C:\Documents and Settings\sunderwood>nslookup www.morethan-greatprogress.cn Server: dc1.carroll-ent.com Address: 192.168.4.1 Non-authoritative answer: Name: www.morethan-greatprogress.cn Addresses: 200.6.158.80, 200.35.146.207, 200.201.193.194, 208.79.36.202 213.143.2.58, 220.227.6.242, 67.210.77.55 C:\Documents and Settings\sunderwood> http://67.210.77.55/ appears to be hosting a Pharmacy web site at this very moment. Once you fix that, reply to the report you receive that the issue is resolved and you will stop getting reports for a while. BTW, that IP was chosen because it is close to your posting address. Posting the IP address qith the queston would have helped the investigation.
killspamdead Posted October 17, 2008 Author Posted October 17, 2008 DOH!!! workin on it right now. I HATE WINDOWS. IIS SUX. and btw, THANK YOU!
Recommended Posts
Archived
This topic is now archived and is closed to further replies.