[133855] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Spamhaus under DDOS from AnonOps (Wikileaks.info)

daemon@ATHENA.MIT.EDU (Marshall Eubanks)
Sat Dec 18 18:15:17 2010

From: Marshall Eubanks <tme@americafree.tv>
In-Reply-To: <4D0D20EC.1050706@brightok.net>
Date: Sat, 18 Dec 2010 18:15:07 -0500
To: Jack Bates <jbates@brightok.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Dec 18, 2010, at 4:00 PM, Jack Bates wrote:

> On 12/18/2010 6:58 AM, Steve Linford wrote:
>> For trying to warn about the crime gangs located at the =
wikileaks.info mirror IP, Spamhaus is now under ddos by AnonOps. The =
criminals there do not like our free speech at all.
>>=20
>=20
> It appears that wikileaks.org is operational again and redirecting to =
mirros.wikileaks.info, which draws concern of who now controls =
wikileaks.org. .info definitely isn't the same layout as all the =
mirrors.
>=20
>=20

I get nothing from wikileaks.org, although the DNS is active :

dig wikileaks.org

;; ANSWER SECTION:
wikileaks.org.		4774	IN	A	64.64.12.170

;; AUTHORITY SECTION:
wikileaks.org.		61470	IN	NS	ns100.dynadot.com.
wikileaks.org.		61470	IN	NS	ns101.dynadot.com.

64.64.12.170 is
NetRange:       64.64.0.0 - 64.64.31.255
CIDR:           64.64.0.0/19
OriginAS:       AS25847
NetName:        SERVINT

and, at least here, a traceroute disappears into servint
<snip>
 8  64.125.195.222.t00883-02.above.net (64.125.195.222)  15.905 ms  =
12.172 ms  12.072 ms
 9  sc-smv1766.servint.net (216.22.61.86)  15.879 ms  11.974 ms  13.761 =
ms
10  * * *

According to this

=
http://nanozen.info/2010/12/spamhaus-under-ddos-from-anonops-wikileaks-inf=
o/

wikileaks.info is being hosted by bad guys :

"The site data, disks, connections and visitor traffic, are all under =
the control of the Heihachi cybercrime gang. There are more than 40 =
criminal-run sites operating on the same IP address as wikileaks.info, =
including carder-elite.biz, h4ck3rz.biz, elite-crew.net, and bank =
phishes paypal-securitycenter.com and postbank-kontodirekt.com."

However, at least for me here in Virginia, wikileaks.org is not aliasing =
to anywhere, but instead simply times out.

Regards
Marshall


> Jack
>=20
>=20



home help back first fref pref prev next nref lref last post