Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Thu Jan 22, 2015 9:13 am 
Offline
Junior Member

Joined: Wed Apr 25, 2012 5:38 pm
Posts: 47
When looking ayt my dns I note on one domain it shows 3 different IP addresses. Why are there different ones and what do they mean please ??

A/AAAA Records


Hostname IP Address TTL Options
176.58.100.62 Default Edit | Remove
new 178.79.139.244 Default Edit | Remove
serps 176.56.57.6 Default Edit | Remove


Top
   
PostPosted: Thu Jan 22, 2015 1:10 pm 
Offline
Senior Member
User avatar

Joined: Thu Nov 24, 2011 12:46 pm
Posts: 138
Location: Mesa AZ
You appear based on what you posted have a domain with 2 subdomains/hostnames which are pointed to different IP's.

You haven't provided the actual domain name so we will substitute domainname for it.

Code:
@     is pointed to 176.58.100.62  (hostname is domainname)
new   is pointed at 178.79.139.244 (hostname is new.domainname)
serps is pointed at 176.56.57.6    (hostname is serps.domainname)


Two are linode IP's the third has no rDNS but is related to ns1.nimbushosting.co.uk prehaps a hosting account there.

You should know about these if this is your domain.

_________________
Kevin a.k.a. Dweeber


Top
   
PostPosted: Thu Jan 22, 2015 1:46 pm 
Offline
Junior Member

Joined: Wed Apr 25, 2012 5:38 pm
Posts: 47
nope, I know nothing of these.


Top
   
PostPosted: Thu Jan 22, 2015 1:55 pm 
Offline
Junior Member

Joined: Wed Apr 25, 2012 5:38 pm
Posts: 47
176.58.100.62 is my current ip address for my linode.
178.79.139.244 is my old linode, about to be powered down and deactivated.

I paid someone to upgrade and set up the new linode in late December. The third IP address means nothing at all to me.

Ive never heard of Nimbushhosting and I dont understand how they are in anyway connect to my linode?? Have I been hacked or something ?? How do you know its Nimbushhosting ??


Top
   
PostPosted: Fri Jan 23, 2015 1:36 pm 
Offline
Senior Member
User avatar

Joined: Thu Nov 24, 2011 12:46 pm
Posts: 138
Location: Mesa AZ
glennk wrote:
176.58.100.62 is my current ip address for my linode.
178.79.139.244 is my old linode, about to be powered down and deactivated.

I paid someone to upgrade and set up the new linode in late December. The third IP address means nothing at all to me.

Ive never heard of Nimbushhosting and I dont understand how they are in anyway connect to my linode?? Have I been hacked or something ?? How do you know its Nimbushhosting ??

Someone who has access to your Linode added the entry into your DNS. If someone has access to your Linode that you don't know about, I would consider that to be a serious issue and steps should be taken to remedy that. They basically have the keys to your entire host.


Ref:
# dig -x 176.56.57.6

; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> -x 176.56.57.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;6.57.56.176.in-addr.arpa. IN PTR

;; AUTHORITY SECTION:
57.56.176.in-addr.arpa. 3600 IN SOA ns1.nimbushosting.co.uk. hostmaster.nimbushosting.co.uk. 2015012304 3600 3600 86400 3600

Image

_________________
Kevin a.k.a. Dweeber


Top
   
PostPosted: Fri Jan 23, 2015 1:45 pm 
Offline
Senior Member
User avatar

Joined: Tue Apr 13, 2004 6:54 pm
Posts: 833
Dweeber wrote:
glennk wrote:
I paid someone to upgrade and set up the new linode in late December. The third IP address means nothing at all to me.

Someone who has access to your Linode added the entry into your DNS.

Not necessarily with access to the linode, but to the linode control panel where DNS editing can be done (assuming this domain is using the linode DNS service).

It's likely the OP's consultant set it up, so the question should be for the OP to ask the consultant why it is there.

_________________
Rgds
Stephen
(Linux user since kernel version 0.11)


Top
   
PostPosted: Fri Jan 23, 2015 3:21 pm 
Offline
Junior Member

Joined: Wed Apr 25, 2012 5:38 pm
Posts: 47
What is it ?? Please understand Im a newbie to servers and dns. Ive usually bought shared hosting before.


Top
   
PostPosted: Fri Jan 23, 2015 3:56 pm 
Offline
Senior Member
User avatar

Joined: Tue Apr 13, 2004 6:54 pm
Posts: 833
You said "I paid someone to upgrade and set up the new linode in late December. The third IP address means nothing at all to me."

You need to talk to that person to find out why the "serps" entry is there.

_________________
Rgds

Stephen

(Linux user since kernel version 0.11)


Top
   
PostPosted: Sat Jan 24, 2015 3:17 am 
Offline
Senior Member

Joined: Fri May 02, 2008 8:44 pm
Posts: 1121
A casual Google search shows that "serps" has something to do with search engine optimization (SEO) and/or advertising. Have you ever partnered with an advertiser, or trusted your website with a company that claimed to help you with SEO?

If you're absolutely sure that you have nothing to do with this "serps" thing and no relation whatsoever with the Nimbus Hosting IP address, why not just delete it and see if it breaks anything? If something breaks, you can quickly add it back.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group