Lamont attack site at the SAME IP address as Joe's "hacked" site is up!

[mhatrw]

http://www.dailykos.com/storyonly/2006/8/8/153827/3493

http://www.joe2006.com maps to IP address, 69.56.129.130
http://www.meetned.com also maps to the exact same IP address, 69.56.129.130

MeetNed.com - Up.
Joe2006.com - Down.

Conclusion: This was a self-inflicted wound.

[Fridays Child]

1. That sounds reasonable.

How can one be down and not the other?

[mhatrw]

4. It's a cheapo web host reseller.

All 74 of these sites mp to the EXACT same IP address. Of all these 74 sites that share the EXACT SAME IP address, only #35 (Holy Joe's site), #43 (the IPS's own website, which is redirecting to the nonexistent www.suspended.page) & #55 (www.robertodiaz.com) are down. ALL OF THE OTHER 71 WEBSITES SHARING THIS IP ADDRESS ARE WORKING JUST FINE!

1. www.7styleguides.com
2. www.aislefivestudios.com
3. www.aronhoguelaw.com
4. www.azulpoolandspaservices.com
5. www.bmrca.org
6. www.bottleblankie.com
7. www.brokerbrothers.com
8. www.burgindesigns.com
9. www.cesargproductions.com
10. www.chmdesign.com
11. www.colorcritical.com
12. www.crossroads-exhibitions.com
13. www.davidortmann.com
14. www.dawndudas.com
15. www.dcafineart.com
16. www.dcgsolutions.com
17. www.design12.biz
18. www.dopsychotherapy.com
19. www.encompus.com
20. www.firstresponsegroup.com
21. www.fitnesszonept.com
22. www.focusid.com
23. www.fsdesign.biz
24. www.fsdsgn.com
25. www.fulltankprod.com
26. www.fulltankstudios.com
27. www.goutam.com
28. www.halfmooninn.net
29. www.hazardcenter.com
30. www.husseini.com
31. www.imageupmanager.com
32. www.includehub.com
33. www.jillkelly.biz
34. www.kvphotography.com
35. www.joe2006.com
36. www.landairseadesign.com
37. www.launchproof.com
38. www.leonardflagg.com
39. www.marshallfornevada.com
40. www.mdcgroup.net
41. www.meetned.com
42. www.monorailjim.com
43. www.myhostcamp.com
44. www.naranjojorge.com
45. www.nemetzfamily.com
46. www.newlogicusa.com
47. www.nvdemsinsider.com
48. www.nvtoday.com
49. www.paradoxengineering.com
50. www.patkochakji.com
51. www.peggypierce.net
52. www.protectnevadasfuture.com
53. www.rksdesign.com
54. www.rksguitars.com
55. www.robertodiaz.com
56. www.rooster-creative.com
57. www.roryreid.net
58. www.rosemarywomack.com
59. www.sandiegofiftysixers.com
60. www.santoslounge.com
61. www.shannongeis.com
62. www.shub.org
63. www.stadwiser.com
64. www.stonehometeam.com
65. www.stonesellssandiego.com
66. www.tablacal.com
67. www.tablainc.com
68. www.takingtheheat.com
69. www.threethirty.com
70. www.tobysandland.com
71. www.web619.com
72. www.wellbrand.com
73. www.witwindowsanddoors.com
74. www.carmelvalleylibrary.org

[Renew Deal]

2. It shouldn't take this long to fix a site.

They are milking it.

[mcscajun]

5. They're getting the New Site ready...

...the one for Joe to run as an Indie.

[snappyturtle]

3. Martyrdom for Joe? Sympathy from late in the day voters?

Naw---Lieberman's accusations are just DUMB!

[mhatrw]

6. No. It's so Joe can say he must run as an indy to combat Lamont's

"dirty tricks."

[mhatrw]

7. Let me amend my conclusion.

Conclusion: This probably was and most certainly is now] and has been for quite some time a self-inflicted wound.

[mhatrw]

8. Kick. (nt)

[LoZoccolo]

9. It only means it's not a denial-of-service attack.

I don't think they're saying it is.

[mhatrw]

10. Wrong.

What other kind of attack could keep the site down this long when 71 of 74 other sites sharing this EXACT SAME IP address are still working perfectly?

[LoZoccolo]

11. Well...

...if they took advantage in a vulerability in how they wrote their web applications (such as the cited SQL/code injection exploit), if they had managed to erase all the HTML, there are probably more.

[slampoet]

12. If all the HTML was earased, just reload from backups. 2-3 hours tops

[LoZoccolo]

13. If they had backups, and if any application code...

...did not leave the site vulnerable to begin with.

[mhatrw]

15. Who does NOT have back ups for their production site?

Come on.

[Bretttido]

17. It's been pretty well established that there was no "hacking" going on

It was a simple result of joe2006 using more bandwidth than they were alowed (clogging up the other 73 shared sites), so the account was suspended. Done Deal. This is an accounting situation between joe and the web hoster.

[deaniac21]

14. conclusion.....69.56.129.130 is a router address

c:\>tracert 69.56.129.130

Tracing route to 82.81.3845.static.theplanet.com <69.56.129.130>
over a maximum of 30 hops:

17 * 199 ms 191 ms 168.215.241.150
18 197 ms 211 ms 210 ms vl31.dsr02.dllstx3.theplanet.com <70.85.127.30>

19 169 ms 165 ms 218 ms vl22.dsr02.dllstx2.theplanet.com <70.85.127.76>

20 224 ms 167 ms 168 ms vl2.car04.dllstx2.theplanet.com <12.96.160.46>
21 180 ms 198 ms 228 ms 82.81.3845.static.theplanet.com <69.56.129.130>


Trace complete.

[Commie Pinko Dirtbag]

16. tracert doesn't say if an IP is a router.

By the way, you actually meant NAT, not router.

Wanna debate networking with me? I'm all ears!

[LSK]

18. Network Address Translation is performed by firewalls and routers

and linux boxes like the one in my living room.

:)

[LSK]

19. it is a box that is running Pure-FTPd

In addition, it is running ESMTP Exim 4.52 on port 25.

So it is most likely a web server.