IWETHEY v. 0.3.0 | TODO
1,095 registered users | 1 active user | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / the 'phantom zone' ?
Post #247,459
by andread
3/10/06 9:59:33 AM
Reply
New the 'phantom zone' ?
64.236.42.55

when entered in browser gives:

Invalid URL
The requested URL "/", is invalid.
Reference #9.332aec40.1142002427.0

yet users are downloading like mad from this location
through port 80

here's another one

64.12.145.70

how can I get more information about these 'sites'

A
Play I Some Music w/ Papa Andy
Saturday 8 PM - 11 PM ET
All Night Rewind 11 PM - 5 PM
Reggae, African and Caribbean Music
[link|http://wxxe.org|Tune In]
Post #247,461
by boxley
3/10/06 10:26:53 AM
Reply
New downloading or uploading?
Any opinions expressed by me are mine alone, posted from my home computer, on my own time as a free american and do not reflect the opinions of any person or company that I have had professional relations with in the past 50 years. meep
Post #247,462
by boxley
3/10/06 10:29:43 AM
Reply
New it concerns me that internic.com whois doesnt match either
Any opinions expressed by me are mine alone, posted from my home computer, on my own time as a free american and do not reflect the opinions of any person or company that I have had professional relations with in the past 50 years. meep
Post #247,463
by boxley
3/10/06 10:33:25 AM
Reply
New both are owned by AOL www.arin.net/whois
aol users hitting their accounts from work?
thanx,
bill
Any opinions expressed by me are mine alone, posted from my home computer, on my own time as a free american and do not reflect the opinions of any person or company that I have had professional relations with in the past 50 years. meep
Post #247,467
by Steve Lowe
3/10/06 11:25:17 AM
Reply
New Bet it's AIM.
--
Steve
[link|http://www.ubuntulinux.org|Ubuntu]
Post #247,469
by folkert
Picture of folkert
3/10/06 11:36:11 AM
Reply
New Nopers
--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey
Freedom is not FREE.
Yeah, but 10s of Trillions of US Dollars?
SELECT * FROM scog WHERE ethics > 0;

0 rows returned.
Post #247,468
by folkert
Picture of folkert
3/10/06 11:34:19 AM
Reply
New I got a good response out of it.
So, it is an Akamai G Host. 

[greg@king:~]$ telnet 64.236.42.55 80\nTrying 64.236.42.55...\nConnected to 64.236.42.55 (64.236.42.55).\nEscape character is '^]'.\nget\n\nHTTP/1.0 400 Bad Request\nServer: AkamaiGHost\nMime-Version: 1.0\nContent-Type: text/html\nContent-Length: 216\nExpires: Fri, 10 Mar 2006 16:26:52 GMT\nDate: Fri, 10 Mar 2006 16:26:52 GMT\nConnection: close\n\n<HTML><HEAD>\n<TITLE>Bad Request</TITLE>\n</HEAD><BODY>\n<H1>Bad Request</H1>\nYour browser sent a request that this server could not understand.
\nReference&#32;&#35;7&#46;332aec40&#46;1142008012&#46;0\n</BODY>\n</HTML>\nConnection closed by foreign host.\n[greg@king:~]$


same thing for the other one.

except it has a reverse pointer:
[greg@king:~]$ host 64.12.145.70\n70.145.12.64.in-addr.arpa domain name pointer a64-12-145-70.deploy.akamaitechnologies.net.\n[greg@king:~]$

--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey
Freedom is not FREE.
Yeah, but 10s of Trillions of US Dollars?
SELECT * FROM scog WHERE ethics > 0;

0 rows returned.
Post #247,520
by andread
3/10/06 7:57:54 PM
Reply
New Re: I got a good response out of it.
I googled Akamai G host but still have no idea what users are up to

A
Play I Some Music w/ Papa Andy
Saturday 8 PM - 11 PM ET
All Night Rewind 11 PM - 5 PM
Reggae, African and Caribbean Music
[link|http://wxxe.org|Tune In]
Post #247,525
by broomberg
3/10/06 8:16:43 PM
Reply
New Bad security newbie - no cookie
DO NOT BLOCK THAT ADDRESS!

[link|http://z.iwethey.org/forums/render/content/show?contentid=229613|http://z.iwethey.org...?contentid=229613]
     the 'phantom zone' ? - (andread) - (8) - March 10, 2006, 09:59:33 AM EST
         downloading or uploading? -NT - (boxley) - March 10, 2006, 10:26:53 AM EST
         it concerns me that internic.com whois doesnt match either -NT - (boxley) - March 10, 2006, 10:29:43 AM EST
         both are owned by AOL www.arin.net/whois - (boxley) - March 10, 2006, 10:33:25 AM EST
         Bet it's AIM. -NT - (Steve Lowe) - (1) - March 10, 2006, 11:25:17 AM EST
             Nopers -NT - (folkert) - March 10, 2006, 11:36:11 AM EST
         I got a good response out of it. - (folkert) - (2) - March 10, 2006, 11:34:19 AM EST
             Re: I got a good response out of it. - (andread) - (1) - March 10, 2006, 07:57:54 PM EST
                 Bad security newbie - no cookie - (broomberg) - March 10, 2006, 08:16:43 PM EST

Fac ut vivas.
174 ms