2006-11-18 Woozle tech log

from HTYP, the free directory anyone can edit if they can prove to me that they're not a spambot
Revision as of 14:43, 18 November 2006 by Woozle (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Suspicious redirect

I noticed that when I tried to load this URL:

http://www.theage.com.au/news/world/spy-says-alqaeda-tricked-us-into-war/2006/11/17/1163266782059.html

I got redirected to http://0.0.0.0, regardless of the exact path or whether there was a www. in the domain.

So I did some tests, and found that it was only on one computer. Then I did a wget on each computer, to compare the results:

woozle@rizzo:~$ wget http://theage.com.au 

--09:30:01--  http://theage.com.au/
          => `index.html'
Resolving theage.com.au... 203.26.51.42
Connecting to theage.com.au|203.26.51.42|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://www.theage.com.au/ [following]
--09:30:01--  http://www.theage.com.au/
          => `index.html'
Resolving www.theage.com.au... 203.26.51.42
Reusing existing connection to theage.com.au:80.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]

... 

09:30:03 (100.89 KB/s) - `index.html' saved [134981]

woozle@gonzo:~$ wget http://theage.com.au 

--09:34:02--  http://theage.com.au/
          => `index.html'
Resolving theage.com.au... 203.26.51.42
Connecting to theage.com.au|203.26.51.42|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://www.theage.com.au/ [following]
--09:34:02--  http://www.theage.com.au/
          => `index.html'
Resolving www.theage.com.au... 216.234.246.150
Connecting to www.theage.com.au|216.234.246.150|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://0.0.0.0/ [following]
--09:34:02--  http://0.0.0.0/
          => `index.html'
Connecting to 0.0.0.0:80... failed: Connection refused.

Who the freep is 216.234.246.150, and why am I getting redirected to them?? It's apparently someone who gets their hosting through ThePlanet:

woozle@gonzo:~$ whois 216.234.246.150 

OrgName:    ThePlanet.com Internet Services, Inc.
OrgID:      TPCM
Address:    1333 North Stemmons Freeway
Address:    Suite 110
City:       Dallas
StateProv:  TX
PostalCode: 75207
Country:    US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange:   216.234.224.0 - 216.234.255.255
CIDR:       216.234.224.0/19
NetName:    THEPLANET-BLK-1
NetHandle:  NET-216-234-224-0-1
Parent:     NET-216-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    1999-08-31
Updated:    2000-10-10
Retrieved from "https://htyp.org/mw/index.php?title=2006-11-18_Woozle_tech_log&oldid=5898"