Warning on DNS name of bangkok-addicts.com

[js89]

This post serves both as a heads up to the operators of bangkok-addicts.com as well as to those of you who use the forum from a work computer.

 

While browsing my netflow records, I happened to notice quite a lot of http connections to a domain called "sexy-teen-pussies.com".

 

Since I have no recollection of browsing any porn from this type and I also use many browser extensions that would prevent, among other things, loading ads from such a site, I immediately started looking at it as it raised a few alarm bells. It turns out that the PTR record (that is to say, the reverse DNS record that maps an IP address to a hostname) for the bangkok-addicts.com IP address does not, as you would expect, return bangkok-addicts.com but instead resolves to sexy-teen-pussies.com.

 

So, for forum users, if you're using this site from a work computer and your employer keeps logs of website access (or collects netflow data), be aware that it will appear that you're accessing a site called sexy-teen-pussies.com.

 

To the operators of bangkok-addicts.com, could I suggest that you update the reverse DNS record for 208.122.218.246 to point to the correct canonical name bangkok-addicts.com

$ nslookup
> sexy-teen-pussies.com
Server:         127.0.0.1
Address:        127.0.0.1#53

** server can't find sexy-teen-pussies.com: NXDOMAIN

> bangkok-addicts.com
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
Name:   bangkok-addicts.com
Address: 208.122.218.246

> set type=ptr
> 208.122.218.246
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
246.218.122.208.in-addr.arpa    name = sexy-teen-pussies.com.

[BA Moderator]

This info has been passed along and will be looked into.

[whitespider]

Hi js89

 

Thanks for raising this. Its a bit beyond me but i can say with 100% certainly that domain/website is not mine. It is also not on our server at all. We have a dedicated server and host only our own sites on there - 100% that is not one of them.

 

I am not tech minded so I don't claim to understand what these people have done but will get it looked into - so thanks again.

[js89]

Hi js89

 

Thanks for raising this. Its a bit beyond me but i can say with 100% certainly that domain/website is not mine. It is also not on our server at all. We have a dedicated server and host only our own sites on there - 100% that is not one of them.

 

I am not tech minded so I don't claim to understand what these people have done but will get it looked into - so thanks again.

 

It's most likey an old PTR record that might have been assigned to some previous client of Mojohost, your hosting provider and never got updated when your server got allocated this IP address.

 

Mojohost.com should have a control panel and there will likely be a tab for DNS settings. It's here that you will find the ability to add / update / delete the forward and reverse record for your server. If you can't see the entry in your control panel there, I suggest pinging their support.

[realdaffyduck]

Simple - contact your hosting provider, (mojohost.com) and tell them to fix the reverse pointer for your domain.