Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Aug 2006 13:09:42 -0300 (ADT)
From:      "Marc G. Fournier" <scrappy@freebsd.org>
To:        Vahan Yerkanian <vahan@arminco.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: BSDstats Project v2.0 ...
Message-ID:  <20060809130845.P7522@ganymede.hub.org>
In-Reply-To: <44D9A648.3070109@arminco.com>
References:  <20060807003815.C7522@ganymede.hub.org> <20060808102819.GB64879@augusta.de> <20060808153921.V7522@ganymede.hub.org> <44D8EC98.8020801@utdallas.edu> <20060808201359.S7522@ganymede.hub.org> <44D91F02.90107@mawer.org> <20060808212719.L7522@ganymede.hub.org> <30502313-7B58-4FEC-8A2C-43ED071AC26F@u.washington.edu> <20060809055035.J7522@ganymede.hub.org> <44D9A648.3070109@arminco.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 9 Aug 2006, Vahan Yerkanian wrote:

> Marc G. Fournier wrote:
>> If that's the case, those numbers should come back again in Sept ... but, 
>> the hostnames for the "odd ones" were all:
>>
>>     "http://www.domain.am"
>> 
>> with the quotes included, which seemed a really odd value for 'hostname' to 
>> have produced :)
>
> Looks like a directadmin host. Moreover, resolves to an IP which is not in 
> Armenia. Thought you were using some kind of IP to Country db like GeoIP to 
> find geographic locations of the hosts. Otherwise, domains under f.e. .com 
> gonna be shown as USA?

I'm using GeoIP for this, based on the IP that is IP of the connection ... 
this is one flaw, IMHO, to using md5, its going to be a bit harder to spot 
stuff like this ... but, not impossible either ...

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060809130845.P7522>