Comments for Mount Knowledge http://www.mountknowledge.nl IT Consultancy Tue, 21 Feb 2012 12:07:09 +0000 hourly 1 http://wordpress.org/?v=3.0.5 Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Richard http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-98 Richard Tue, 21 Feb 2012 12:07:09 +0000 http://www.mountknowledge.nl/?p=243#comment-98 It looks like the problem is with <a href="http://scw.bgp.net.br/cgi-bin/rib/analysis?42708" rel="nofollow">PORTLANE AS42708</a> <a href="http://www.robtex.com/route/194.71.107.0-24---the-pirate-bay.html" rel="nofollow">not</a> <a href="http://www.robtex.com/as/as50066.html#graph" rel="nofollow">advertising</a> 194.71.107.0/24 anymore. They should because <a href="http://scw.bgp.net.br/cgi-bin/rib/analysis?50066" rel="nofollow">SRSTUBES AS50066</a> is announcing it to them. Why is Portlane blocking thepiratebay.org address range? Maybe it has to do with this <a href="http://torrentfreak.com/hollywood-lands-triple-strike-on-pirate-bay-openbittorrent-100522/" rel="nofollow">court</a> <a href="http://www.svea.se/Om-Sveriges-Domstolar/Pressrum/Nyhetsarkiv/2010/Svea-hovratt-meddelar-interimistiska-vitesforbud-avseende-medverkan-till-upphovsrattsintrang-pa-Internet-hovrattens-mal-O-7131-09-O-8773-09-och-O-10146-09/" rel="nofollow">case</a>. So, basically, while thepiratebay.org website still seems to be hosted in Sweden, their only local (2nd tier) uplink provider Port Lane is not announcing their IP block. So the only option to get to their site is via the USA route <a href="http://scw.bgp.net.br/cgi-bin/rib/analysis?40475" rel="nofollow">APPLIEDOPS AS40475</a> is offering. It looks like the problem is with PORTLANE AS42708 not advertising 194.71.107.0/24 anymore. They should because SRSTUBES AS50066 is announcing it to them. Why is Portlane blocking thepiratebay.org address range? Maybe it has to do with this court case.

So, basically, while thepiratebay.org website still seems to be hosted in Sweden, their only local (2nd tier) uplink provider Port Lane is not announcing their IP block. So the only option to get to their site is via the USA route APPLIEDOPS AS40475 is offering.

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Thaddy http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-97 Thaddy Mon, 20 Feb 2012 17:42:38 +0000 http://www.mountknowledge.nl/?p=243#comment-97 What's worse: It looks like one of the switches at AMS-IX is very very close (ahum) to the relay over the ocean and ONLY for the piratepay blocks. Now, that would be really unacceptable if they are cooperating with these kind of activities. There's also a timing missmatch, btw. Plz confirm. What’s worse:

It looks like one of the switches at AMS-IX is very very close (ahum) to the relay over the ocean and ONLY for the piratepay blocks. Now, that would be really unacceptable if they are cooperating with these kind of activities. There’s also a timing missmatch, btw. Plz confirm.

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by HarryO http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-96 HarryO Mon, 20 Feb 2012 13:31:58 +0000 http://www.mountknowledge.nl/?p=243#comment-96 Probably just a coincidence that the most popular website hosted by AppliedOps is causes.com: Sean Parker Founder and Chairman Sean Parker, Chairman and Founder of Causes, is an entrepreneur with a record of launching genre-defining companies that reinvent ways to spread information online. In 1999, at the age of 19, Sean co-founded Napster with Shawn Fanning and changed how people think about and share music. In 2001, Sean co-founded Plaxo, pioneering viral engineering technology for updating contact information. Sean served as Plaxo’s president until 2004, around which time he joined with Mark Zuckerberg to launch the online social network Facebook. Sean was the founding president of Facebook from 2004-2005, again turning a technology start-up into an industry giant. Sean is also a Managing Partner of venture capital firm Founders Fund, where he looks for and supports this spirit of innovation in up-and-coming developers. http://www.causes.com/team Probably just a coincidence that the most popular website hosted by AppliedOps is causes.com:

Sean Parker Founder and Chairman
Sean Parker, Chairman and Founder of Causes, is an entrepreneur with a record of launching genre-defining companies that reinvent ways to spread information online. In 1999, at the age of 19, Sean co-founded Napster with Shawn Fanning and changed how people think about and share music. In 2001, Sean co-founded Plaxo, pioneering viral engineering technology for updating contact information. Sean served as Plaxo’s president until 2004, around which time he joined with Mark Zuckerberg to launch the online social network Facebook. Sean was the founding president of Facebook from 2004-2005, again turning a technology start-up into an industry giant. Sean is also a Managing Partner of venture capital firm Founders Fund, where he looks for and supports this spirit of innovation in up-and-coming developers.

http://www.causes.com/team

]]> Comment on Shanghai Jiaotong University probing for Chinese IPv6 users? by Koos van den Hout http://www.mountknowledge.nl/2012/01/27/shanghai-jiaotong-university-probing-for-chinese-ipv6-users/comment-page-1/#comment-95 Koos van den Hout Mon, 20 Feb 2012 13:22:15 +0000 http://www.mountknowledge.nl/?p=233#comment-95 I run 2 nameservers with (registered) v6 addresses, ns2.idefix.net and ns3.idefix.net. On ns2 I see exactly the same requests in the logs, on ns3 no mention of cnnic or that IPv6 address. Very interesting. I run 2 nameservers with (registered) v6 addresses, ns2.idefix.net and ns3.idefix.net. On ns2 I see exactly the same requests in the logs, on ns3 no mention of cnnic or that IPv6 address.

Very interesting.

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by dwzz http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-94 dwzz Mon, 20 Feb 2012 13:07:42 +0000 http://www.mountknowledge.nl/?p=243#comment-94 From a corporate, non-xs4all kpn connection: 4 1 ms 1 ms <1 ms static.kpn.net [193.###] 5 8 ms 8 ms 8 ms nl-rt-dc2-ias-arg37.kpn.net [62.12.4.74] 6 10 ms 10 ms 14 ms nl-rt-dc2-zsi-sg01-xe-1-3-0.kpn.net [139.156.113.152] 7 10 ms 9 ms 10 ms nl-asd-dc2-zsi-sg01-ae0.kpn.net [139.156.112.32] 8 20 ms 11 ms 24 ms 139.156.222.65 9 12 ms 12 ms 12 ms ams-ix.ae1.cr1.ams2.nl.nlayer.net [195.69.145.219] 10 11 ms 10 ms 10 ms ae3-60g.cr1.ams2.nl.nlayer.net [69.22.139.238] 11 17 ms 17 ms 17 ms xe-5-3-0.cr1.lhr1.uk.nlayer.net [69.22.142.94] 12 92 ms 90 ms 91 ms xe-11-3-1.cr1.nyc3.us.nlayer.net [69.22.142.132] 13 90 ms 95 ms 98 ms ae2-70g.cr1.ewr1.us.nlayer.net [69.31.95.145] 14 110 ms 110 ms 110 ms xe-5-0-0.cr1.ord1.us.nlayer.net [69.22.142.74] 15 169 ms 210 ms 163 ms xe-0-0-0.cr1.slc1.us.nlayer.net [69.22.142.102] 16 162 ms 162 ms 162 ms xe-2-3-1.cr1.sfo1.us.nlayer.net [69.22.142.97] 17 163 ms 162 ms 162 ms as40475.ge-0-2-1.cr1.sfo1.us.nlayer.net [69.22.153.90] 18 169 ms 164 ms 164 ms ge-0-1-0.ro4.sjc01 [208.83.220.46] 19 164 ms 163 ms 336 ms ge-0-0.cal-cr-0.srstubes.net [74.116.251.2] 20 188 ms 187 ms 187 ms ge-0-4.sth3-core-1.srstubes.net [194.68.0.194] 21 186 ms 185 ms 188 ms ge-1-2.sth4-dr-1.srstubes.net [194.68.0.166] 22 185 ms 185 ms 185 ms ge-0-1.moria-cr-1.piratpartiet.net [194.68.0.146] 23 188 ms 187 ms 188 ms thepiratebay.piratpartiet.se [194.14.56.2] From a corporate, non-xs4all kpn connection:

4 1 ms 1 ms <1 ms static.kpn.net [193.###]
5 8 ms 8 ms 8 ms nl-rt-dc2-ias-arg37.kpn.net [62.12.4.74]
6 10 ms 10 ms 14 ms nl-rt-dc2-zsi-sg01-xe-1-3-0.kpn.net [139.156.113.152]
7 10 ms 9 ms 10 ms nl-asd-dc2-zsi-sg01-ae0.kpn.net [139.156.112.32]
8 20 ms 11 ms 24 ms 139.156.222.65
9 12 ms 12 ms 12 ms ams-ix.ae1.cr1.ams2.nl.nlayer.net [195.69.145.219]
10 11 ms 10 ms 10 ms ae3-60g.cr1.ams2.nl.nlayer.net [69.22.139.238]
11 17 ms 17 ms 17 ms xe-5-3-0.cr1.lhr1.uk.nlayer.net [69.22.142.94]
12 92 ms 90 ms 91 ms xe-11-3-1.cr1.nyc3.us.nlayer.net [69.22.142.132]
13 90 ms 95 ms 98 ms ae2-70g.cr1.ewr1.us.nlayer.net [69.31.95.145]
14 110 ms 110 ms 110 ms xe-5-0-0.cr1.ord1.us.nlayer.net [69.22.142.74]
15 169 ms 210 ms 163 ms xe-0-0-0.cr1.slc1.us.nlayer.net [69.22.142.102]
16 162 ms 162 ms 162 ms xe-2-3-1.cr1.sfo1.us.nlayer.net [69.22.142.97]
17 163 ms 162 ms 162 ms as40475.ge-0-2-1.cr1.sfo1.us.nlayer.net [69.22.153.90]
18 169 ms 164 ms 164 ms ge-0-1-0.ro4.sjc01 [208.83.220.46]
19 164 ms 163 ms 336 ms ge-0-0.cal-cr-0.srstubes.net [74.116.251.2]
20 188 ms 187 ms 187 ms ge-0-4.sth3-core-1.srstubes.net [194.68.0.194]
21 186 ms 185 ms 188 ms ge-1-2.sth4-dr-1.srstubes.net [194.68.0.166]
22 185 ms 185 ms 185 ms ge-0-1.moria-cr-1.piratpartiet.net [194.68.0.146]
23 188 ms 187 ms 188 ms thepiratebay.piratpartiet.se [194.14.56.2]

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Matthijs R. Koot http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-93 Matthijs R. Koot Mon, 20 Feb 2012 12:51:10 +0000 http://www.mountknowledge.nl/?p=243#comment-93 Zelfs als het verkeer volgens GeoIP in -ZWEDEN- zit (109.105.98.33) gaat het eerst via de US. Vanaf 145.100.98.4 (UvA-Master-SNE-NET): traceroute to www.thepiratebay.se (194.71.107.15), 30 hops max, 40 byte packets (redacted) (redacted) 3 AE3.1664.JNR01.Asd002A.surf.net (145.145.19.190) 0.375 ms 0.367 ms 0.351 ms 4 AE1.500.JNR02.Asd001A.surf.net (145.145.80.73) 0.499 ms 0.513 ms 0.570 ms 5 nl-sar.nordu.net (109.105.98.33) 0.440 ms 0.449 ms 0.432 ms 6 us-man.nordu.net (109.105.97.45) 83.463 ms 83.214 ms us-man.nordu.net (109.105.97.69) 82.463 ms 7 * * * 8 ae1-70g.cr1.ewr1.us.nlayer.net (69.31.95.173) 75.948 ms 75.945 ms 95.937 ms 9 xe-5-0-0.cr1.ord1.us.nlayer.net (69.22.142.74) 131.697 ms 131.281 ms 130.193 ms 10 xe-0-0-0.cr1.slc1.us.nlayer.net (69.22.142.102) 130.982 ms 130.240 ms 130.857 ms 11 xe-2-3-1.cr1.sfo1.us.nlayer.net (69.22.142.97) 154.846 ms 152.883 ms 154.782 ms 12 as40475.ge-0-2-1.cr1.sfo1.us.nlayer.net (69.22.153.90) 154.982 ms 147.887 ms 147.898 ms 13 ge-0-1-0.ro4.sjc01 (208.83.220.46) 156.235 ms 156.326 ms 163.399 ms 14 ge-0-0.cal-cr-0.srstubes.net (74.116.251.2) 163.205 ms 155.998 ms 156.031 ms 15 ge-0-4.sth3-core-1.srstubes.net (194.68.0.194) 170.403 ms 170.655 ms 170.356 ms Zelfs als het verkeer volgens GeoIP in -ZWEDEN- zit (109.105.98.33) gaat het eerst via de US. Vanaf 145.100.98.4 (UvA-Master-SNE-NET):

traceroute to http://www.thepiratebay.se (194.71.107.15), 30 hops max, 40 byte packets
(redacted)
(redacted)
3 AE3.1664.JNR01.Asd002A.surf.net (145.145.19.190) 0.375 ms 0.367 ms 0.351 ms
4 AE1.500.JNR02.Asd001A.surf.net (145.145.80.73) 0.499 ms 0.513 ms 0.570 ms
5 nl-sar.nordu.net (109.105.98.33) 0.440 ms 0.449 ms 0.432 ms
6 us-man.nordu.net (109.105.97.45) 83.463 ms 83.214 ms us-man.nordu.net (109.105.97.69) 82.463 ms
7 * * *
8 ae1-70g.cr1.ewr1.us.nlayer.net (69.31.95.173) 75.948 ms 75.945 ms 95.937 ms
9 xe-5-0-0.cr1.ord1.us.nlayer.net (69.22.142.74) 131.697 ms 131.281 ms 130.193 ms
10 xe-0-0-0.cr1.slc1.us.nlayer.net (69.22.142.102) 130.982 ms 130.240 ms 130.857 ms
11 xe-2-3-1.cr1.sfo1.us.nlayer.net (69.22.142.97) 154.846 ms 152.883 ms 154.782 ms
12 as40475.ge-0-2-1.cr1.sfo1.us.nlayer.net (69.22.153.90) 154.982 ms 147.887 ms 147.898 ms
13 ge-0-1-0.ro4.sjc01 (208.83.220.46) 156.235 ms 156.326 ms 163.399 ms
14 ge-0-0.cal-cr-0.srstubes.net (74.116.251.2) 163.205 ms 155.998 ms 156.031 ms
15 ge-0-4.sth3-core-1.srstubes.net (194.68.0.194) 170.403 ms 170.655 ms 170.356 ms

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Richard http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-92 Richard Mon, 20 Feb 2012 12:35:06 +0000 http://www.mountknowledge.nl/?p=243#comment-92 @Mark: yes, thepiratebay.org is blocked by DNS so it resolves to a local address now. You can traceroute to 194.71.107.14 (unused address owned by thepiratebay) to see the actual trace. @Mark: yes, thepiratebay.org is blocked by DNS so it resolves to a local address now. You can traceroute to 194.71.107.14 (unused address owned by thepiratebay) to see the actual trace.

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Mark http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-91 Mark Mon, 20 Feb 2012 12:25:51 +0000 http://www.mountknowledge.nl/?p=243#comment-91 Trace from a XS4ALL DSL customer. traceroute to 194.71.107.15 (194.71.107.15), 30 hops max, 40 byte packets 1 10.0.0.138 2.352 ms 14.941 ms 14.923 ms 2 194.109.5.227 29.589 ms 29.571 ms 29.558 ms 3 * * * Trace from a XS4ALL DSL customer.

traceroute to 194.71.107.15 (194.71.107.15), 30 hops max, 40 byte packets
1 10.0.0.138 2.352 ms 14.941 ms 14.923 ms
2 194.109.5.227 29.589 ms 29.571 ms 29.558 ms
3 * * *

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Richard http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-90 Richard Mon, 20 Feb 2012 11:06:31 +0000 http://www.mountknowledge.nl/?p=243#comment-90 Good question. Even from coloclue.net (Dutch hoster) the traffic goes via the USA (hop 10-13): <pre> 2 globalswitch-1-ge-0-0-2-0.router.nl.coloclue.net (94.142.247.245) 3.877 ms 3.205 ms 3.807 ms 3 87.255.32.129 2.064 ms 2.276 ms 2.108 ms 4 adm-b4-link.telia.net (213.248.73.109) 1.862 ms 60.031 ms 2.013 ms 5 adm-bb1-link.telia.net (213.155.133.208) 1.613 ms 2.110 ms 1.642 ms 6 ldn-bb1-link.telia.net (80.91.245.222) 9.721 ms 9.413 ms 11.849 ms 7 ash-bb1-link.telia.net (213.248.65.98) 97.217 ms 85.507 ms 85.512 ms 8 sjo-bb1-link.telia.net (80.91.248.204) 159.474 ms 197.796 ms 160.671 ms 9 layer42-ic-120233-sjo-bb1.c.telia.net (80.239.193.126) 190.076 ms 160.783 ms 165.793 ms 10 xe9-5.core1.scl.layer42.net (69.36.239.157) 161.750 ms 162.410 ms 161.124 ms 11 ro2.scl01.appliedops.net (67.218.96.58) 154.672 ms 154.947 ms 154.978 ms 12 ge-0-1-0.ro4.sjc01 (208.83.220.44) 153.490 ms 153.555 ms 153.753 ms 13 ge-0-0.cal-cr-0.srstubes.net (74.116.251.2) 154.459 ms 154.673 ms 154.798 ms 14 ge-1.sthix.srstubes.net (192.121.80.164) 182.530 ms 182.007 ms 181.697 ms 15 ge-1-2.sth4-dr-1.srstubes.net (194.68.0.166) 184.797 ms 182.082 ms 182.335 ms 16 sthix-ge-0-2.moria-cr-1.piratpartiet.net (192.121.80.181) 181.568 ms 181.869 ms 181.681 ms 17 thepiratebay.piratpartiet.se (194.14.56.2) 184.113 ms 181.789 ms 182.120 ms 18 * * *</pre> From xs4all these are the AS numbers involved: xs4all <a href="http://www.robtex.com/as/as3265.html" rel="nofollow">AS3265</a> kpn <a href="http://www.robtex.com/as/as286.html" rel="nofollow">AS286</a> nlayer <a href="http://www.robtex.com/as/as4436.html" rel="nofollow">AS4436</a> apliedops <a href="http://www.robtex.com/as/as40475.html" rel="nofollow">AS40475</a> srstubes <a href="http://www.robtex.com/as/as50066.html" rel="nofollow">AS50066</a> piratepartiet <a href="http://www.robtex.com/as/as51040.html" rel="nofollow">AS51040</a> It seems that Applied Operations, LLC AS40475 is <a href="http://www.robtex.com/route/194.71.107.0-24---the-pirate-bay.html" rel="nofollow">advertising 194.71.107.0/24</a> while that makes no sense at all. A traceroute from xs4all to 194.68.0.166 or 194.14.56.2 (1 hop before thepiratebay.org) goes straight to Sweden: <pre>$ tcptraceroute 194.14.56.2 Tracing the path to 194.14.56.2 on TCP port 80 (www), 30 hops max 1 124.ae0.xr3.3d12.xs4all.net (194.109.21.13) 15.879 ms 0.236 ms 0.227 ms 2 nl-asd-dc2-ice-ir01.kpn.net (139.156.201.90) 0.699 ms 10.824 ms 11.981 ms 3 139.156.222.69 4.950 ms 4.978 ms 12.026 ms 4 tengigabitethernet4-3.ar7.AMS2.gblx.net (207.138.112.129) 85.907 ms 85.836 ms 85.912 ms 5 te-4-4-gblx.sto1.se.portlane.net (209.130.172.178) 23.072 ms 23.058 ms 23.035 ms 6 po-10.sto3.se.portlane.net (80.67.4.129) 23.102 ms 23.107 ms 23.067 ms 7 ge-1.sthix.srstubes.net (192.121.80.164) 23.136 ms 23.042 ms 23.015 ms 8 ge-1-2.sth4-dr-1.srstubes.net (194.68.0.166) 23.855 ms 31.776 ms 29.056 ms 9 sthix-ge-0-2.moria-cr-1.piratpartiet.net (192.121.80.181) 23.341 ms 23.389 ms 23.408 ms 10 thepiratebay.piratpartiet.se (194.14.56.2) [closed] 23.220 ms 23.388 ms 23.402 ms </pre> Other people have <a href="http://pastebin.com/6mMrm7JF" rel="nofollow">noticed</a> <a href="http://www.thegamerspulse.com/wordpress/the-pirate-bay-routing-issues-causes-%E2%80%98panic%E2%80%99-among-comcast-users/" rel="nofollow">as well</a>. It seems like someone in the USA is very interested to see all the traffic to thepiratebay.org. Who could that be? Good question. Even from coloclue.net (Dutch hoster) the traffic goes via the USA (hop 10-13):

 2  globalswitch-1-ge-0-0-2-0.router.nl.coloclue.net (94.142.247.245)  3.877 ms  3.205 ms  3.807 ms
 3  87.255.32.129  2.064 ms  2.276 ms  2.108 ms
 4  adm-b4-link.telia.net (213.248.73.109)  1.862 ms  60.031 ms  2.013 ms
 5  adm-bb1-link.telia.net (213.155.133.208)  1.613 ms  2.110 ms  1.642 ms
 6  ldn-bb1-link.telia.net (80.91.245.222)  9.721 ms  9.413 ms  11.849 ms
 7  ash-bb1-link.telia.net (213.248.65.98)  97.217 ms  85.507 ms  85.512 ms
 8  sjo-bb1-link.telia.net (80.91.248.204)  159.474 ms  197.796 ms  160.671 ms
 9  layer42-ic-120233-sjo-bb1.c.telia.net (80.239.193.126)  190.076 ms  160.783 ms  165.793 ms
10  xe9-5.core1.scl.layer42.net (69.36.239.157)  161.750 ms  162.410 ms  161.124 ms
11  ro2.scl01.appliedops.net (67.218.96.58)  154.672 ms  154.947 ms  154.978 ms
12  ge-0-1-0.ro4.sjc01 (208.83.220.44)  153.490 ms  153.555 ms  153.753 ms
13  ge-0-0.cal-cr-0.srstubes.net (74.116.251.2)  154.459 ms  154.673 ms  154.798 ms
14  ge-1.sthix.srstubes.net (192.121.80.164)  182.530 ms  182.007 ms  181.697 ms
15  ge-1-2.sth4-dr-1.srstubes.net (194.68.0.166)  184.797 ms  182.082 ms  182.335 ms
16  sthix-ge-0-2.moria-cr-1.piratpartiet.net (192.121.80.181)  181.568 ms  181.869 ms  181.681 ms
17  thepiratebay.piratpartiet.se (194.14.56.2)  184.113 ms  181.789 ms  182.120 ms
18  * * *

From xs4all these are the AS numbers involved:

xs4all AS3265
kpn AS286
nlayer AS4436
apliedops AS40475
srstubes AS50066
piratepartiet AS51040

It seems that Applied Operations, LLC AS40475 is advertising 194.71.107.0/24 while that makes no sense at all. A traceroute from xs4all to 194.68.0.166 or 194.14.56.2 (1 hop before thepiratebay.org) goes straight to Sweden:

$ tcptraceroute 194.14.56.2
Tracing the path to 194.14.56.2 on TCP port 80 (www), 30 hops max
 1  124.ae0.xr3.3d12.xs4all.net (194.109.21.13)  15.879 ms  0.236 ms  0.227 ms
 2  nl-asd-dc2-ice-ir01.kpn.net (139.156.201.90)  0.699 ms  10.824 ms  11.981 ms
 3  139.156.222.69  4.950 ms  4.978 ms  12.026 ms
 4  tengigabitethernet4-3.ar7.AMS2.gblx.net (207.138.112.129)  85.907 ms  85.836 ms  85.912 ms
 5  te-4-4-gblx.sto1.se.portlane.net (209.130.172.178)  23.072 ms  23.058 ms  23.035 ms
 6  po-10.sto3.se.portlane.net (80.67.4.129)  23.102 ms  23.107 ms  23.067 ms
 7  ge-1.sthix.srstubes.net (192.121.80.164)  23.136 ms  23.042 ms  23.015 ms
 8  ge-1-2.sth4-dr-1.srstubes.net (194.68.0.166)  23.855 ms  31.776 ms  29.056 ms
 9  sthix-ge-0-2.moria-cr-1.piratpartiet.net (192.121.80.181)  23.341 ms  23.389 ms  23.408 ms
10  thepiratebay.piratpartiet.se (194.14.56.2) [closed]  23.220 ms  23.388 ms  23.402 ms

Other people have noticed as well.
It seems like someone in the USA is very interested to see all the traffic to thepiratebay.org. Who could that be?

]]> Comment on Ziggo and xs4all block of ThePirateBay.org technical details by Whois http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/comment-page-1/#comment-89 Whois Mon, 20 Feb 2012 10:19:04 +0000 http://www.mountknowledge.nl/?p=243#comment-89 Je al eens afgevraagd waarom een verbinding tussen Nederland en Zweden over niet minder dan 6 hops in de USA loopt? Doe eens een traceroute naar een "gewone" site in Zweden en je ziet meteen het verschil. Je al eens afgevraagd waarom een verbinding tussen Nederland en Zweden over niet minder dan 6 hops in de USA loopt?

Doe eens een traceroute naar een “gewone” site in Zweden en je ziet meteen het verschil.

]]>