From: markp on

"Jan Panteltje" <pNaonStpealmtje(a)yahoo.com> wrote in message
news:hgbm7i$n53$1(a)news.albasani.net...
> On a sunny day (Wed, 16 Dec 2009 21:08:18 -0000) it happened "markp"
> <map.nospam(a)f2s.com> wrote in <7ot0fkF3rhg99U1(a)mid.individual.net>:
>
>>
>>"markp" <map.nospam(a)f2s.com> wrote in message
>>news:7os5q4F3qsetoU1(a)mid.individual.net...
>>> I've just designed in a radio module RFM12B-433-S1 from hoperf
>>> (www.hoperf.com). Now I cannot access the hoperf website. In fact
>>> DNS doesn't resolve the name (either with my DNS servers or
>>> online nslookup).
>>>
>>> Should I be worried? This is a Chinese company and these modules seem to
>>> be
>>> very popular. They might be changing servers I guess and Christmas is
>>> probably a good time to do it, would this normally result in no DNS
>>> lookup
>>> at all while they do it?
>>>
>>> Mark.
>>>
>>
>>Phew, it's back. Funnily none of the online nslookup services could find
>>it
>>either using their own servers, but at least my DNS servers can again.
>>Maybe
>>an outage at their hosting company (?).
>>
>>Mark.
>
> The same happens with my site when I switch the server off, as the name
> server,
> the authoritive one, that tells everybody where my site is (its IP
> address),
> also runs on this same server.
> That is the way DNS can work, not everybody needs an ISP to run a 'named'.
> A bit strange that hoperf.com (without the www) was resolved though.
> Could also be their named was victim of some attack.
> BTW 'named' is a program.

Interesting. Remember hoperf.com was resolved to 121.199.253.175, and
entering that into a browser got some wierd homepage? Well it is still
resolved to that address, but if you type http://hoperf.com now into your
browser now you get the proper site, which is the same as
http://www.hoperf.com . However, www.hoperf.com resolves to 122.225.96.220.
I assume this site has two IPs, one with the www and one without.

Mark.


From: Jan Panteltje on
On a sunny day (Wed, 16 Dec 2009 23:01:05 -0000) it happened "markp"
<map.nospam(a)f2s.com> wrote in <7ot733F3rjqt3U1(a)mid.individual.net>:

>
>"Jan Panteltje" <pNaonStpealmtje(a)yahoo.com> wrote in message
>news:hgbm7i$n53$1(a)news.albasani.net...
>> On a sunny day (Wed, 16 Dec 2009 21:08:18 -0000) it happened "markp"
>> <map.nospam(a)f2s.com> wrote in <7ot0fkF3rhg99U1(a)mid.individual.net>:
>>
>>>
>>>"markp" <map.nospam(a)f2s.com> wrote in message
>>>news:7os5q4F3qsetoU1(a)mid.individual.net...
>>>> I've just designed in a radio module RFM12B-433-S1 from hoperf
>>>> (www.hoperf.com). Now I cannot access the hoperf website. In fact
>>>> DNS doesn't resolve the name (either with my DNS servers or
>>>> online nslookup).
>>>>
>>>> Should I be worried? This is a Chinese company and these modules seem to
>>>> be
>>>> very popular. They might be changing servers I guess and Christmas is
>>>> probably a good time to do it, would this normally result in no DNS
>>>> lookup
>>>> at all while they do it?
>>>>
>>>> Mark.
>>>>
>>>
>>>Phew, it's back. Funnily none of the online nslookup services could find
>>>it
>>>either using their own servers, but at least my DNS servers can again.
>>>Maybe
>>>an outage at their hosting company (?).
>>>
>>>Mark.
>>
>> The same happens with my site when I switch the server off, as the name
>> server,
>> the authoritive one, that tells everybody where my site is (its IP
>> address),
>> also runs on this same server.
>> That is the way DNS can work, not everybody needs an ISP to run a 'named'.
>> A bit strange that hoperf.com (without the www) was resolved though.
>> Could also be their named was victim of some attack.
>> BTW 'named' is a program.
>
>Interesting. Remember hoperf.com was resolved to 121.199.253.175, and
>entering that into a browser got some wierd homepage? Well it is still
>resolved to that address, but if you type http://hoperf.com now into your
>browser now you get the proper site, which is the same as
>http://www.hoperf.com .

Yes, different machine.
IIRC on a MS windows machine it sais something like 'here goes your homepage'
if you had the personal web server running but did not make any pages.
Just a placeholder perhsps.
Same if you install Apache.
Yes i tis Apache, at e;ast on the machine they use now:

grml: ~ # telnet 121.199.253.175 80
Trying 121.199.253.175...
Connected to 121.199.253.175.
Escape character is '^]'

(Typed anything, wrong request)
http:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>http: to /index.php not supported.<br />
</p>
<hr />
<address>Apache/2.0.46 (Red Hat) Server at url4.hichina.com Port 80</address>
</body></html>
Connection closed by foreign host.


All of China runs Linux :-)
From: Jan Panteltje on
On a sunny day (Wed, 16 Dec 2009 23:01:05 -0000) it happened "markp"
<map.nospam(a)f2s.com> wrote in <7ot733F3rjqt3U1(a)mid.individual.net>:

grml: ~ # telnet 121.199.253.175 80
Trying 121.199.253.175...
Connected to 121.199.253.175.
Escape character is '^]'

(Typed anything, wrong request)
http:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>http: to /index.php not supported.<br />
</p>
<hr />
<address>Apache/2.0.46 (Red Hat) Server at url4.hichina.com Port 80</address>
</body></html>
Connection closed by foreign host.


All of China runs Linux :-)

You can see teeh server is url4.hichina.com,
so hichina.com could be the ISP.

So do a
whois hichina.com
and you know all about it.

(I just did, but think I should not publish it here, Verisign has lost of legal text in the reply...).