Scoilnet up again

OK I think I identified the IP responsible for making my server down today.

So because I hate this kind of practice, I make this trace route available for this communty. I know Microsoft folks are reading this blog, so if this can be helpful in their battle against those assholes, yes It will be after all a good day for everybody ;-)

It seems to take origin from Turkey, but it could be a fake ip, I don't know. This IP is coming a lot of time in my logs and yes I am quite confident this is the one (note the pingpong trap at the end of the route).

So I blocked this list of IPs and hope it will be ok for now.

Tracing route to 194.125.233.179 over a maximum of 30 hops

  6    37 ms    34 ms    29 ms  linx.lon.seabone.net [195.66.226.153]
  7    86 ms    80 ms    79 ms  ge6-1-pal5-pala.pal.seabone.net [195.22.218.3]
  8   128 ms   124 ms   124 ms  turk-telekom-3-tr-pal5.pal.seabone.net [195.22.2
18.34]
  9   138 ms   134 ms   132 ms  izmM160-ankM160.ttnet.net.tr [195.175.7.10]
 10   137 ms   132 ms   134 ms  195.175.10.254
 11   149 ms   144 ms   144 ms  195.175.31.22
 12   145 ms   144 ms   147 ms  195.175.31.21
 13   162 ms   154 ms   154 ms  195.175.31.22
 14   157 ms   157 ms   159 ms  195.175.31.21
 15   170 ms   167 ms   167 ms  195.175.31.22
 16   170 ms   197 ms   164 ms  195.175.31.21
 17   181 ms   176 ms   173 ms  195.175.31.22
 18   179 ms   177 ms   177 ms  195.175.31.21
 19   191 ms   189 ms   187 ms  195.175.31.22
 20   190 ms   187 ms   187 ms  195.175.31.21
 21   203 ms   197 ms   197 ms  195.175.31.22
 22   200 ms   197 ms   197 ms  195.175.31.21
 23   213 ms   207 ms   207 ms  195.175.31.22
 24   208 ms   206 ms   206 ms  195.175.31.21
 25   224 ms   218 ms   217 ms  195.175.31.22
 26   216 ms   217 ms   219 ms  195.175.31.21
 27   227 ms   229 ms   229 ms  195.175.31.22
 28   235 ms   229 ms   232 ms  195.175.31.21
 29   242 ms   239 ms   239 ms  195.175.31.22
 30   245 ms   239 ms   240 ms  195.175.31.21

1 Comment

  • I wrote some code to parse a web log file. its not great code, but I can let you try it. unfortunately, i am in washington, dc and that code is in knoxville, tn (500 miles) away. you would have to wait till i get back. there is an iis list that i posted this code on about 12-15 months ago, so if you search the web, you might find it.



    Wally

Comments have been disabled for this content.