WTF?! Check this out. I need an explanation. - GoFuckYourself.com

NoCarrier · 02-25-2003, 05:36 AM

Ok,

My host http://www.hosthybrid.com

Recently changed ip's for my server and my domains were fucked up yesterday. They were supposed to give us the new ip's so I could login to the new ftp and the cpanel manager and change everything so that they would point to the correct dns.

Well, they moved everything to the new server and I didn't receive the ip's. So I chatted yesterday with the support and they told me everything was ok.

It was not ok. My DNS entries were fucked up and 80% of the internet could not reach me. He told me that I had to wait 24 hours.

So this morning I decide to do a traceroute to my site adult-sex-pictures.com

1 vlan206.inr-203-eva.Berkeley.EDU (128.32.206.1) 0.579 ms 0.419 ms 0.466 ms
2 vlan209.inr-201-eva.Berkeley.EDU (128.32.255.1) 0.579 ms 0.446 ms 0.422 ms
3 gigE2-0.inr-000-eva.Berkeley.EDU (128.32.0.193) 0.310 ms 0.202 ms 0.193 ms
4 pos3-0.c2-berk-gsr.Berkeley.EDU (128.32.0.90) 0.494 ms 0.260 ms 0.255 ms
5 SUNV--BERK.POS.calren2.net (198.32.249.14) 1.511 ms 1.456 ms 1.459 ms
6 PAIX-7206--STAN-1.ATM.calren2.net (198.32.249.130) 2.658 ms PAIX-7206--STAN-2.ATM.calren2.net (198.32.249.166) 2.516 ms 2.728 ms
7 border1-g1-2.pao1.wworks.net (198.32.176.162) 23.870 ms 24.531 ms 25.793 ms
8 69.1.77.152 (69.1.77.152) 40.750 ms 45.392 ms 47.446 ms

Alright, now I know my new ip address..

69.1.77.152

Cool! So I login the cpanel manager and correct the dns entries and everything.

Now everything is ok..

http://www.adult-sex-pictures.com loads fine..

So I decide, just for the fun of it, to test the new IP ADDRESS..

http://69.1.77.152

And guess what, it's a fucking porn page.. and it's not mine..

This means all the time of this bullshit, all my traffic was fucking redirected to that page instead of my sites.

ServerGenius · 02-25-2003, 05:45 AM

Your host is most likely using NameVirtualHost entries which means more websites use the same IP on a server.

If there is a typo in the VirtualHost directive of apache or if the
VirtualHost directive of your site is non existent Apache will send
the user automatically to the first VirtualHost directive that either
uses that IP address and if that doesn´t exist it will go to the
very first VirtualHost that is in the config.

This is probably what is happening.

DynaMite

NoCarrier · 02-25-2003, 05:50 AM

Quote:

Originally posted by DynaSpain
Your host is most likely using NameVirtualHost entries which means more websites use the same IP on a server.

If there is a typo in the VirtualHost directive of apache or if the
VirtualHost directive of your site is non existent Apache will send
the user automatically to the first VirtualHost directive that either
uses that IP address and if that doesn´t exist it will go to the
very first VirtualHost that is in the config.

This is probably what is happening.

DynaMite

So this means that when they say "Your own IP address" it's bullshit?

I don't understand, why is my site adult-sex-pictures.com loading but when I am typing the 69.1.77.152 it's the other site.. Is it possible that they were aware of that fact anyway!? I am not sure it's a typo.

I did a IP WHOIS :

Search results for: 69.1.77.152

OrgName: Digital WireWorks Inc.
OrgID: DIGIT-1
Address: 4960 Almaden Expwy
Address: #301
City: San Jose
StateProv: CA
PostalCode: 95118-2007
Country: US

NetRange: 69.1.64.0 - 69.1.79.255
CIDR: 69.1.64.0/20
NetName: NTBLK-WIREWORKS01
NetHandle: NET-69-1-64-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.WWORKS.NET
NameServer: NS2.WWORKS.NET
Comment:
RegDate: 2002-09-24
Updated: 2002-09-24

TechHandle: GGS4-ARIN
TechName: Granados, Scott G
TechPhone: +1-408-997-7437
TechEmail: [email protected]

OrgTechHandle: GGS4-ARIN
OrgTechName: Granados, Scott G
OrgTechPhone: +1-408-997-7437
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2003-02-24 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.

ServerGenius · 02-25-2003, 06:04 AM

If it´s working on hostname and not on IP then yes it´s defenitely
Name based Virtualhosting. So Yes you use the same IP together
with X more sites. do a nslookup of the domain that shows up
if you browse on the IP. I bet it will show the same IP as for a
nslookup from your own IP.

if it works by typing in the domain then there is no typo in the
config. You just can´t use the IP to go to your site then.

DynaMite

rogerbo · 02-25-2003, 06:20 AM

The Strange thing is that with a trace you get only till here
Exchange Point Blocks
and not through to your domain or IP. If you enter the IP
in the IP-Detective you get nothing, if you enter the Domain Name you get a coplete different IP 64.157.30.35 and the ns is
NS1.HOSTHYBRID.COM
So the IP change is not jet comunicated to all .

Keep on waiting.

NoCarrier · 02-25-2003, 06:26 AM

Quote:

Originally posted by rogerbo
The Strange thing is that with a trace you get only till here
Exchange Point Blocks
and not through to your domain or IP. If you enter the IP
in the IP-Detective you get nothing, if you enter the Domain Name you get a coplete different IP 64.157.30.35 and the ns is
NS1.HOSTHYBRID.COM
So the IP change is not jet comunicated to all .

Keep on waiting.

Huh?!?!

64.157.30.35 was my old host

How did you get this ip address?!

ServerGenius · 02-25-2003, 06:32 AM

From my server an nslookup comes back with this:

[root@www root]# nslookup adult-sex-pictures.com
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
Server: 62.129.129.10
Address: 62.129.129.10#53

Non-authoritative answer:
Name: adult-sex-pictures.com
Address: 69.1.77.152

DynaMite

ServerGenius · 02-25-2003, 06:34 AM

Which is the same IP that the authoritive NS server is advertising

[/usr/www/gallerycode.com/htdocs] root@linux11197(pts/2) [8:23am]# nslookup
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
> server NS1.HOSTHYBRID.COM
Default server: NS1.HOSTHYBRID.COM
Address: 69.1.77.150#53
> ADULT-SEX-PICTURES.COM
Server: NS1.HOSTHYBRID.COM
Address: 69.1.77.150#53

Name: ADULT-SEX-PICTURES.COM
Address: 69.1.77.152
> www.ADULT-SEX-PICTURES.COM
Server: NS1.HOSTHYBRID.COM
Address: 69.1.77.150#53

www.ADULT-SEX-PICTURES.COM canonical name = ADULT-SEX-PICTURES.COM.
Name: ADULT-SEX-PICTURES.COM
Address: 69.1.77.152

DynaMite

SquarePants · 02-25-2003, 07:43 AM

Quote:

canonical name = ADULT-SEX-PICTURES.COM.

Get rid of the C-Name and make it an A-Record. That's one, also, not knowing what account you have, find out if you have a dedicated IP, if so bitch, if not oh well, then wait for DNS to propogate. Looks like others are seeing old info.

p00p · 02-25-2003, 10:20 AM

Change hosting companies. The guy spamming for them on this board is a lying jackass.

rogerbo · 02-26-2003, 06:32 AM

Quote:

Originally posted by NoCarrier

Huh?!?!

64.157.30.35 was my old host

How did you get this ip address?!

http://www.ipdetective.com/detect.ph...x-pictures.com

NoCarrier · 02-26-2003, 06:34 AM

Quote:

Originally posted by rogerbo

http://www.ipdetective.com/detect.ph...x-pictures.com

LOL! Well, looks like their database is really old. I was using gighost 2 months ago.

02-25-2003, 05:36 AM	#1
NoCarrier We need more free porn Join Date: Mar 2002 Location: Montreal Posts: 16,356	WTF?! Check this out. I need an explanation. Ok, My host http://www.hosthybrid.com Recently changed ip's for my server and my domains were fucked up yesterday. They were supposed to give us the new ip's so I could login to the new ftp and the cpanel manager and change everything so that they would point to the correct dns. Well, they moved everything to the new server and I didn't receive the ip's. So I chatted yesterday with the support and they told me everything was ok. It was not ok. My DNS entries were fucked up and 80% of the internet could not reach me. He told me that I had to wait 24 hours. So this morning I decide to do a traceroute to my site adult-sex-pictures.com 1 vlan206.inr-203-eva.Berkeley.EDU (128.32.206.1) 0.579 ms 0.419 ms 0.466 ms 2 vlan209.inr-201-eva.Berkeley.EDU (128.32.255.1) 0.579 ms 0.446 ms 0.422 ms 3 gigE2-0.inr-000-eva.Berkeley.EDU (128.32.0.193) 0.310 ms 0.202 ms 0.193 ms 4 pos3-0.c2-berk-gsr.Berkeley.EDU (128.32.0.90) 0.494 ms 0.260 ms 0.255 ms 5 SUNV--BERK.POS.calren2.net (198.32.249.14) 1.511 ms 1.456 ms 1.459 ms 6 PAIX-7206--STAN-1.ATM.calren2.net (198.32.249.130) 2.658 ms PAIX-7206--STAN-2.ATM.calren2.net (198.32.249.166) 2.516 ms 2.728 ms 7 border1-g1-2.pao1.wworks.net (198.32.176.162) 23.870 ms 24.531 ms 25.793 ms 8 69.1.77.152 (69.1.77.152) 40.750 ms 45.392 ms 47.446 ms Alright, now I know my new ip address.. 69.1.77.152 Cool! So I login the cpanel manager and correct the dns entries and everything. Now everything is ok.. http://www.adult-sex-pictures.com loads fine.. So I decide, just for the fun of it, to test the new IP ADDRESS.. http://69.1.77.152 And guess what, it's a fucking porn page.. and it's not mine.. This means all the time of this bullshit, all my traffic was fucking redirected to that page instead of my sites. __________________ Last edited by NoCarrier; 02-25-2003 at 05:44 AM..

02-25-2003, 05:45 AM	#2
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	Your host is most likely using NameVirtualHost entries which means more websites use the same IP on a server. If there is a typo in the VirtualHost directive of apache or if the VirtualHost directive of your site is non existent Apache will send the user automatically to the first VirtualHost directive that either uses that IP address and if that doesn´t exist it will go to the very first VirtualHost that is in the config. This is probably what is happening. DynaMite __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

02-25-2003, 06:04 AM	#4
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	If it´s working on hostname and not on IP then yes it´s defenitely Name based Virtualhosting. So Yes you use the same IP together with X more sites. do a nslookup of the domain that shows up if you browse on the IP. I bet it will show the same IP as for a nslookup from your own IP. if it works by typing in the domain then there is no typo in the config. You just can´t use the IP to go to your site then. DynaMite __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

02-25-2003, 06:32 AM	#7
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	From my server an nslookup comes back with this: [root@www root]# nslookup adult-sex-pictures.com Note: nslookup is deprecated and may be removed from future releases. Consider using the `dig' or `host' programs instead. Run nslookup with the `-sil[ent]' option to prevent this message from appearing. Server: 62.129.129.10 Address: 62.129.129.10#53 Non-authoritative answer: Name: adult-sex-pictures.com Address: 69.1.77.152 DynaMite __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

02-25-2003, 06:34 AM	#8
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	Which is the same IP that the authoritive NS server is advertising [/usr/www/gallerycode.com/htdocs] root@linux11197(pts/2) [8:23am]# nslookup Note: nslookup is deprecated and may be removed from future releases. Consider using the `dig' or `host' programs instead. Run nslookup with the `-sil[ent]' option to prevent this message from appearing. > server NS1.HOSTHYBRID.COM Default server: NS1.HOSTHYBRID.COM Address: 69.1.77.150#53 > ADULT-SEX-PICTURES.COM Server: NS1.HOSTHYBRID.COM Address: 69.1.77.150#53 Name: ADULT-SEX-PICTURES.COM Address: 69.1.77.152 > www.ADULT-SEX-PICTURES.COM Server: NS1.HOSTHYBRID.COM Address: 69.1.77.150#53 www.ADULT-SEX-PICTURES.COM canonical name = ADULT-SEX-PICTURES.COM. Name: ADULT-SEX-PICTURES.COM Address: 69.1.77.152 DynaMite __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

02-25-2003, 06:20 AM	#5
rogerbo Confirmed User Join Date: Jan 2002 Posts: 193	The Strange thing is that with a trace you get only till here Exchange Point Blocks and not through to your domain or IP. If you enter the IP in the IP-Detective you get nothing, if you enter the Domain Name you get a coplete different IP 64.157.30.35 and the ns is NS1.HOSTHYBRID.COM So the IP change is not jet comunicated to all . Keep on waiting. __________________ Teen Elf's Blog Teenhouse<br> MAKE ME RICH NOW ------ ICOO

02-25-2003, 10:20 AM	#10
p00p Confirmed User Join Date: Dec 2002 Location: CanaDUH Posts: 5,125	Change hosting companies. The guy spamming for them on this board is a lying jackass.