mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:06 PM
Original message |
Lamont attack site at the SAME IP address as Joe's "hacked" site is up! |
|
http://www.dailykos.com/storyonly/2006/8/8/153827/3493http://www.joe2006.com maps to IP address, 69.56.129.130 http://www.meetned.com also maps to the exact same IP address, 69.56.129.130 MeetNed.com - Up. Joe2006.com - Down. Conclusion: This was a self-inflicted wound.
|
Fridays Child
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:07 PM
Response to Original message |
1. That sounds reasonable. |
|
How can one be down and not the other?
|
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:17 PM
Response to Reply #1 |
4. It's a cheapo web host reseller. |
|
Edited on Tue Aug-08-06 06:34 PM by mhatrw
All 74 of these sites mp to the EXACT same IP address. Of all these 74 sites that share the EXACT SAME IP address, only #35 (Holy Joe's site), #43 (the IPS's own website, which is redirecting to the nonexistent www.suspended.page) & #55 (www.robertodiaz.com) are down. ALL OF THE OTHER 71 WEBSITES SHARING THIS IP ADDRESS ARE WORKING JUST FINE!
1. www.7styleguides.com 2. www.aislefivestudios.com 3. www.aronhoguelaw.com 4. www.azulpoolandspaservices.com 5. www.bmrca.org 6. www.bottleblankie.com 7. www.brokerbrothers.com 8. www.burgindesigns.com 9. www.cesargproductions.com 10. www.chmdesign.com 11. www.colorcritical.com 12. www.crossroads-exhibitions.com 13. www.davidortmann.com 14. www.dawndudas.com 15. www.dcafineart.com 16. www.dcgsolutions.com 17. www.design12.biz 18. www.dopsychotherapy.com 19. www.encompus.com 20. www.firstresponsegroup.com 21. www.fitnesszonept.com 22. www.focusid.com 23. www.fsdesign.biz 24. www.fsdsgn.com 25. www.fulltankprod.com 26. www.fulltankstudios.com 27. www.goutam.com 28. www.halfmooninn.net 29. www.hazardcenter.com 30. www.husseini.com 31. www.imageupmanager.com 32. www.includehub.com 33. www.jillkelly.biz 34. www.kvphotography.com 35. www.joe2006.com 36. www.landairseadesign.com 37. www.launchproof.com 38. www.leonardflagg.com 39. www.marshallfornevada.com 40. www.mdcgroup.net 41. www.meetned.com 42. www.monorailjim.com 43. www.myhostcamp.com 44. www.naranjojorge.com 45. www.nemetzfamily.com 46. www.newlogicusa.com 47. www.nvdemsinsider.com 48. www.nvtoday.com 49. www.paradoxengineering.com 50. www.patkochakji.com 51. www.peggypierce.net 52. www.protectnevadasfuture.com 53. www.rksdesign.com 54. www.rksguitars.com 55. www.robertodiaz.com 56. www.rooster-creative.com 57. www.roryreid.net 58. www.rosemarywomack.com 59. www.sandiegofiftysixers.com 60. www.santoslounge.com 61. www.shannongeis.com 62. www.shub.org 63. www.stadwiser.com 64. www.stonehometeam.com 65. www.stonesellssandiego.com 66. www.tablacal.com 67. www.tablainc.com 68. www.takingtheheat.com 69. www.threethirty.com 70. www.tobysandland.com 71. www.web619.com 72. www.wellbrand.com 73. www.witwindowsanddoors.com 74. www.carmelvalleylibrary.org
|
Renew Deal
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:08 PM
Response to Original message |
2. It shouldn't take this long to fix a site. |
mcscajun
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:26 PM
Response to Reply #2 |
5. They're getting the New Site ready... |
|
...the one for Joe to run as an Indie.
|
snappyturtle
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:13 PM
Response to Original message |
3. Martyrdom for Joe? Sympathy from late in the day voters? |
|
Naw---Lieberman's accusations are just DUMB!
|
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 06:57 PM
Response to Reply #3 |
6. No. It's so Joe can say he must run as an indy to combat Lamont's |
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 07:13 PM
Response to Original message |
7. Let me amend my conclusion. |
|
Conclusion: This probably was and most certainly is now] and has been for quite some time a self-inflicted wound.
|
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 08:52 PM
Response to Original message |
LoZoccolo
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 08:57 PM
Response to Original message |
9. It only means it's not a denial-of-service attack. |
|
I don't think they're saying it is.
|
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Tue Aug-08-06 11:45 PM
Response to Reply #9 |
|
What other kind of attack could keep the site down this long when 71 of 74 other sites sharing this EXACT SAME IP address are still working perfectly?
|
LoZoccolo
(1000+ posts)
Send PM |
Profile |
Ignore
|
Wed Aug-09-06 07:51 AM
Response to Reply #10 |
|
...if they took advantage in a vulerability in how they wrote their web applications (such as the cited SQL/code injection exploit), if they had managed to erase all the HTML, there are probably more.
|
slampoet
(1000+ posts)
Send PM |
Profile |
Ignore
|
Wed Aug-09-06 10:07 AM
Response to Reply #11 |
12. If all the HTML was earased, just reload from backups. 2-3 hours tops |
LoZoccolo
(1000+ posts)
Send PM |
Profile |
Ignore
|
Wed Aug-09-06 10:58 AM
Response to Reply #12 |
13. If they had backups, and if any application code... |
|
...did not leave the site vulnerable to begin with.
|
mhatrw
(1000+ posts)
Send PM |
Profile |
Ignore
|
Wed Aug-09-06 12:55 PM
Response to Reply #13 |
15. Who does NOT have back ups for their production site? |
Bretttido
(754 posts)
Send PM |
Profile |
Ignore
|
Thu Aug-17-06 12:10 PM
Response to Reply #13 |
17. It's been pretty well established that there was no "hacking" going on |
|
It was a simple result of joe2006 using more bandwidth than they were alowed (clogging up the other 73 shared sites), so the account was suspended. Done Deal. This is an accounting situation between joe and the web hoster.
|
deaniac21
(1000+ posts)
Send PM |
Profile |
Ignore
|
Wed Aug-09-06 11:31 AM
Response to Original message |
14. conclusion.....69.56.129.130 is a router address |
|
Edited on Wed Aug-09-06 11:35 AM by deaniac21
c:\>tracert 69.56.129.130
Tracing route to 82.81.3845.static.theplanet.com <69.56.129.130> over a maximum of 30 hops:
17 * 199 ms 191 ms 168.215.241.150 18 197 ms 211 ms 210 ms vl31.dsr02.dllstx3.theplanet.com <70.85.127.30>
19 169 ms 165 ms 218 ms vl22.dsr02.dllstx2.theplanet.com <70.85.127.76>
20 224 ms 167 ms 168 ms vl2.car04.dllstx2.theplanet.com <12.96.160.46> 21 180 ms 198 ms 228 ms 82.81.3845.static.theplanet.com <69.56.129.130>
Trace complete.
|
Commie Pinko Dirtbag
(1000+ posts)
Send PM |
Profile |
Ignore
|
Thu Aug-17-06 12:05 PM
Response to Reply #14 |
16. tracert doesn't say if an IP is a router. |
|
By the way, you actually meant NAT, not router.
Wanna debate networking with me? I'm all ears!
|
LSK
(1000+ posts)
Send PM |
Profile |
Ignore
|
Thu Aug-17-06 12:15 PM
Response to Reply #16 |
18. Network Address Translation is performed by firewalls and routers |
|
and linux boxes like the one in my living room.
:)
|
LSK
(1000+ posts)
Send PM |
Profile |
Ignore
|
Thu Aug-17-06 12:18 PM
Response to Reply #14 |
19. it is a box that is running Pure-FTPd |
|
In addition, it is running ESMTP Exim 4.52 on port 25.
So it is most likely a web server.
|
DU
AdBot (1000+ posts) |
Sat May 04th 2024, 09:40 AM
Response to Original message |