Monday, July 31, 2006

Statistics

We know:
  • 20.032.470 Hosts
  • 5.357.250 Domains
  • 7.812.218 IPs
  • 224.337 Nameservers
  • 39.914 Mailservers
(We just started with sorting in Mail- and Nameservers - we are sorting in MX- and NS-Records for around 200.000 Domains per Day, so MX- and NS- figures will continue to increase for about 20 to 30 days.)

Wednesday, July 26, 2006

5 Million Domains

We cracked the 5-Million-Mark on our domain-database. Serversniff know knows more than 5 million unique domain-names, which should represent around 5 percent of all globally registered domainnames.

We will keep inserting new hosts and domains daily, and the more you look up the more we will know. The update-speed might decrease slightly for we are on the run to update our data with NS- and MX-records. We might finish this in a few months and serversniff will offer many new functions then.

A domainsearch is implemented, a hostnamesearch looking up hosts in our 35-million-hostnames-db will be in place soon - both functions are available via our API only at the moment. Access to our API-services is free, but requires a formless registration - send an EMail to thomas.springer@serversniff.net to get a free personal account.

tom

Thursday, July 06, 2006

Unstable Server

Serversniff doesn't like virtuozzo. You might imagine that we call a lot of backend-programms to let serversniff do it's job. When there are too many background-processes and not enough (shared) RAM, the apache-process is silently dying and can't be restarted, it can't even be killed.

Virtuozzo is nice, but is nothing compared to stuff like VMWare. Providers like virtuozzo, for it make every virtual machine on a host run on only one system-installation, while each vmware-engine has its own os and eats therefore much more ram and hd-space.

We decided that we don't like virtuozzo - so serversniff will (again) move to another server with the old one simply acting as some kind of proxy. while we move we will do some quality assurance and internal updates, it might take a few weeks until everything is moved completely.

tom

Tuesday, June 20, 2006

hacked

nice.

serversniff has a bunch of security-holes, and we are watching closely what people are doing here - and really, someone noticed that it was quite easy to get a glimpse of the mysql-log-database.

the evil hacker might have been a scriptkid, for he obviously got acces to the mysql-db, used an unkown (at least to major search-engines) mysql-exploit-script trying to create files on the system. the mysql-db died on the way to his goal.

the attacker created (and then deleted or emptied) several tables in the db mysql:

"SNOWHILL"
"db" - nice - contains all passwords from table "user" in cleartext!
"dat" - used to execute commands on the host
"fm" - contains php-code to upload files and execute commands
local - slightly different from "dat"
sploitdb - slightly different from "dat"
wip3r - slightly different from "dat"

It seems, that the guy used at least 4 slightly different exploits targeting to the same problem.

Better luck next time.

tom

Saturday, May 20, 2006

sorting it all in

we're still importing hosts, this time from zonetransfers from toplevel-domains.
in parallel we're sorting in domains - expect more functions to come.
we crosschecked our data with whois.sc - while we still lack many .com-domains, it seems that we have many hostnames that they don't have.

Tuesday, May 09, 2006

fixing bugs

I'm pleased to announce that a simple forum-posting at dnsstuff.com made me finally fix a few bugs in the subdomain-lookup that were resultin from the migration of serversniff to the f*cking virtuozzo-server.

The migration of our Hostname-DB nearly comes to an end - we are around 18 million known hostnames now with around 1 million hosts left in the queue. After this we have a few million hostnames from zonefiles waiting to get in. In parallel we started to build a domain-database, but this will take some time - we are around a million known domains by now, adding around 70.000 new domains each day. Expect more functions to come when we extracted broader data from our database.

And hey, we are still looking for Postgresql/Perl-Geek willing to speed up things here.

tom

Monday, May 08, 2006

News

I did a few Bugfixes, mostly relating to the fact, that the crazy virtuozzo-system of our shared-server acts silly and resolves nonexisting hostnames as localhost or with it's own ip-number. i had to adjust many errorhandlers to this.

A User noticed some "can't write to log"-errors on the IP-Stack-check. These are noncritical, in fact we don't really need the log anymore for the check does it's job quite well. We'll fix em by removing the detailed-logging that was initally used for debugging-purposes. Please be aware that the IP-Check is sitting on a separate host that is rather slow, for the above mentioned virtuozzo-stuff won't interact with hping2, the programm this check is based upon.

We expanded our API to many with many new serverchecks. We are offering 16 different, configurable checks now - a list is available at http://www.serversniff.de/wiki_en/index.php/API. Send us an E-Mail to get free access to the API. We want to know who's using our resources, but we're still offering all this for free.

We also expanded Serversniffs capabilities and are offering scripts to show HTML-Sourcecode of webpages, HTML-Comments inside webpages, Hyperlinks inside of weppages, Cookies set when visiting a Site and a websites robots.txt.

Have fun and stay secure,

tom

Monday, April 17, 2006

springtime

springtime, and everythings new: we moved hostonip to the new database. we are still sorting in servernames, but it should even now be bigger than the old one. the old db was static, the new one is dynamic: when you look up a hostname, we start some backgroundqueries automagically trying to gather more info.

when looking up hosts, you should really consider to repeat your query a minute later: you might be surprised about the findings, like we were, when we did a lookup for www.vatican.va

we fixed last bugs (looking up ips produced an error) and hope that it will stay as fast as it is now when it's grown bigger.

have fun,

tom

Thursday, April 13, 2006

Where are you coming from today?

We implemented a little User-Info that's displayed on most pages and fixed a few minor bugs. Thanks to p0f and hostip.info.

Wednesday, April 12, 2006

Brothers im Net

hoi,
clez.net and serversniff.net are starting to team up some services.
clemens from clez.net proposed an API for services like traceroute or ping. If everything works out you'll be able to fire up traceroutes from different locations on both of our sites, maybe from even more sites round the world at some stage.
maybe you want to participate? - we are open for anyone who is willing to share services like traceroute or ping - all you need is a host where you are able to install an run software like hping, tcptraceroute etc.
drop us a note if you're interested: thomas.springer@gmail.com