How do I trace name servers back to the web hosting company?
There is a website that is sharing my copyrighted information and I want to contact their hosting company.
They are using nameservers
NS.theirwebsite.com
N2.theirwebsite.com
Anyone have a tool for this?
Will the nameservers work if the nameservers are pointed to a parking page?
For example:
I need to change my nameservers to ns1.mywebhost.com and ns2.mywebhost.com
(nameservers are made up)
These nameservers are from my web hosting service provider. When I visit the nameservers, it shows up a parking page from a domain parking service (let's say NameDrive parking page)
Will the nameservers function correctly and will my websites work? I have this question because usually the nameservers that I use, they always point to a CP page or something like that rather than a parking page.
I don't know whether possible or not if we can trace the dns from certain reseller webhosting and found where she or he bought the package... maybe it is important because we must know the reputation of the seller.
View 2 Replies View RelatedI got 3 IP addresses i am trying to trace and I want to know where this person has send me those from. Is is possible to get exact addresses/locations?, where the person who sent me the emails is from? and Infos which websites have been visited?
This are the 3 IP's i have got:
216.139.189.105
41.204.234.10
82.13.210.203
After Trace route whats the next thing to do ? When my ISP dynamic IP address is some like and starts with 112.0.0.0 I cannot see all sites on the server. So what I did run a tracert on DOS prompt. After 9 hops and reach this IP 216.18.239.6 everything timed out and it cannot reach my server.
I already tested several Internet access and its reaching the server except my home DSL with the IP 112. I also checked if the IP is block on the firewall but its not present on the block list. I also mentioned this with my internet provider and still waiting for notification.
what to do next?
How would I trace a malware file uploaded to a particular account? ....
View 2 Replies View RelatedI dont know much about server. I was wondering: if I plug in my laptop at work would the server log my connection, even if my laptop is not a client?
View 2 Replies View Relatedanybody here have a review or a way to trace proccess from scratch after top -c or ps -aux
how i got the exact file or user cause this process ....
I found that recently a lot of nobody files appear in my /tmp.
I delete and delete.. by still same. I don't know how to trace where they from. I suspect is from my hosting users, but I don't know how to check and trace. Anybody can give me some guide?
Can anyone please tell me how dangerous in fact Apache's TRACE and TRACK functions?
I have read common explanation but would disabling TRACK and TRACE improve my server's ability to fight cross site scripting and similar attacks and make it more secure?
I can't remember the name of the utility that lets you watch what a process is doing. You call it on a PID and you can see all the memory allocations, file IO, library loading, etc. that the process is doing as it happens. Anyone know what I'm thinking of?
View 2 Replies View RelatedI recently moved a customer's site to a new server. Everything went smoothly except for the fact my customer cannot access the new site. When he pings it he gets the right IP address but it just times out.
The URL is regalfire.co.uk
I asked him to run a tracert command and it seems to find the right path but stops just short of finding the server. The last server he connects to is ge-5-2.the.uk.euroconnex.net [87.127.231.90] which is the same as me. The next step is the actual server but for him it just times out.
I can see the new site fine. His ISP is Virgin Media and I have asked several other customers with the same ISP and they can see the site OK.
He has flushed his DNS cache and the problem remains.
Does anyone have any ideas what I could try next?
How can i trace my datacenter detail through my website ip?
View 14 Replies View RelatedI have pure-ftp server.
I have checked some ftp failure login attempt made but when i check log file but only see real ip address which is external ip address but i want to trace main ip so anyone tell me howto trace that ip address.
I had a bandwidth spike yesterday for a short while and I wanted to know where I can look to trace what IP(s) caused the high traffic spike.....
View 1 Replies View RelatedMy server is constantly crashing (halting to dead) and needing reboot literally every few hours. I cannot trace the cause of this whatsoever. Please help out.
CPU/Memory/MySQL Usage shows no accounts in red or yellow zone ....
root@server # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda3 145G 145G 0 100% /
/dev/sda1 99M 41M 54M 44% /boot
none 250M 0 250M 0% /dev/shm
/usr/tmpDSK 6.7G 74M 6.3G 2% /tmp
/tmp 6.7G 74M 6.3G 2% /var/tmp]
I cannot trace where the usage is coming from. There is only one account on this box using 26GB. Its a centos/cpanel box. I checked /var/log and had already deleted audit.d directory. /usr/local/apache/domlogs and logs show almost nothing.
This is a RHEL3 box. It has a couple hundred sites, most of which are pretty quiet most of the time, lately I can't get the load below 3 most of the time. I've tried all the usual TOP PS and the rest, but I'm not seeing my problem. I've attached a text file with extended outputs. but here's what I'm seeing now from TOP and VMSTAT. I'm not sure what else I could be looking at.
I've been watching, and it seems to be Apache most of the time at the top of TOP, and I'm logging slow-queries for myslq, but there aren't many there.
top
10:02:03 up 3 days, 21:23, 2 users, load average: 2.81, 2.83, 3.05
140 processes: 137 sleeping, 2 running, 1 zombie, 0 stopped ....
How to trace the nobody spam mail sent from my sevrer?
I fond near to 15k spam mail sent from m server and bounced back.
All mails is sent by nobody. May I know how can I trave the mail is sent from which domain user? (I am using whm/cpanel)
The mail header i found from WHM is below: ....
Hi over the last week ive been having numerous problems with hosting accounts on 2 different servers which has lead me to think that my 'security' is not 'secure' and a malicious user is at play. im in the uk on broadband on a private connection to the internet - no-one else should be sharing this connection. This is the traceroute from my connection at home to the server ive had the most problems with - is this normal?
Traceroute has started ...
Hi, I can ping also can trace to but cannot browse the website?
View 6 Replies View RelatedI need some help tracing a spammer on my shared hosting cpanel server.
First off this is my configuration:
- apache 2.2 / php 5x
- suphp enabled
- prevent nobody user from sending mail = enabled
- my exim config ....
i am looking some shared hosting plan,
some companies say each account can not use system resource (ram and cpu) over 5%,
i want to ask how do they record the value?
ps.the server is centos with cpanel.
Shell uploaded - Site hacked - How to trace?
Many of my customers let me know that their websites had been hacked. I think it comes from local hacker ....
Just wondering if there was a way to trace if an email has been blocked by a webhosts server.
My customer gets an automated email when he books online for Qantas Australia (Australia's biggest Airline Company). I have moved them from an Australian based web host to a US based server and host.
Since the host move, these emails no longer go through to the clients email address on the new hosts server.
I got Qantas to send the email through to me which is on a US server also but a different host to that of my client?? But they did not come through to me even.
I got Qantas to send it through to my personal email address (an Australian bigname ISP) which went through fine and I received it.
The auto generated email possibly could be coming through a 3rd party server so I was thinking maybe this server IP has been blocked for whatever reason (if 3rd party it could have been anyone) It is just strange that used to get them OK through the Australian server and still through my persoanl Australian ISP.
So is there a way to check and confirm and secondly if my suspicions are right would there be a process of trying to get the hosts to accept an email from Qantas as this customer doesnt want to have another email account.
i want to ask any any setting or script can help medo the purpose?
i hope i can set a cron to trace server load every five minutes,
and help me record the load number on a log file,
by the way,
i can trace the past load of my server when i need the data.
My server is saturated in SPAM e-mails being sent from it, however I am struggling in tracing the root of this problem. I have now exhausted 4 IP addresses and our provider is blocking port 25 automatically on a number of occasions now.
I have used the KB article: [URL] .... to trace the highest senders of e-mail, however this has proved to be unsuccessful in finding "all" of the offending domains.
I have suspended e-mail and domains on a number of subscriptions due to the high number of e-mails being sent from the system. I have also enabled outbound mail control and set limits to 10/hr however there are domains attempting to exceed this on an hourly basis. I have investigated these subscriptions but am not able to find anything offending. Is there any feature within plesk that can show me exactly where the spam is coming from...
I have a shared server (root access) using Cpanel / Centos with suphp enabled.
Twice this week the sever's load skyrocketed and was unable to login to trace teh cause, had to reboot instead.
After reboot, I went to whm > CPU/Memory/MySQL Usage and saw nothing in red aside netstat (21% cpu). I'm not sure if this is the cause, but how can I trace the absolute user or script causing this spike?