AT&T blocks 4chan's /b/

Within about an hour anons had located the AT&T CEO including his home address, a photo of his house and his wife's name.

lil_tuffy said:
Apparently, AT&T subscribers amount to 15.5% of internet traffic.

Pip said:

Honestly did those fuckups in Dallas not see any of the Scientology protests Anonymous made?

Stiles said:

No, they didn't. The corporate stiffs in management are generally not up on the exotic flora and fauna of the net underbelly that does not involve porn or youtube clips of people doing dumb things.

How many corporate VPs do you think are familiar with Boxxy?

These guys are in for a rude awakening.

Pip said:
Some people are actually talking old skool: petitions and boycotts.

DevilsReject said:
hahahahaaaa....

LISTEN-UP said, on 27/07/2009 at 03:32
888,979

That’s how many bogus connection attempts have hit my corporate network in the last 18 hours. Source? The exact IP address that resolves to img.4chan.org. THAT is why AT&T blocked them. They are spewing LOADS of trash in a random manner and affecting network performance. It’s been going on since about middle of last week, as best I can tell.

Do a bit of actual leg work before you claim it’s political. It’s purely technical, you flock of sheep. If 4chan shuts off the offender, I’m quite certain the block will be removed. If they are by FAR the top line of my firewall hit list (like ten-fold that of the next), and it’s non-sensical connection attempts, clearly 4chan is doing something very unproductive, even for them. Or, is it simply bait to see which would be the first big name to block them so they can throw a TCP tantrum?


ryan940 said, on 27/07/2009 at 03:37
I was actually just thinking that it’s possible this was in response to the recent DDOS attacks directed at 4chan. First off, it’s highly unlikely that 4chan themselves have been able to do anything productive as hit your site 888, 979 times…they can’t even attack Scientology with that many numbers, and that was likely their most productive accomplishment. What this does tell us is that someone is using either their users or just redirecting others in a botnet to bounce attacks through 4chan. If this is the case then in theory m00t should be able to plug up the img.4chan.org holes. However, ATT simply blocking a site for this is rediculous, someone can bounce an attack through almost any server they feel like. Are you saying if wikipedia was used in the same manner it should just be shut off to a large portion of the US?


Blah said, on 27/07/2009 at 06:02
4Chan and Wiki can fix it if they want to be provided by AT&T. Evan Moot has admitted 4Chan needs improvements. This could be all for the best if we end up with a better quality internet in the end. AT&T can choose to sell chalupas and not tacos if they want.

One of the stupidest people alive, Richard Nixon once said, “The Bohemian Grove is the F491357 Goddamn thing I’ve ever seen in my life.” Even he could tell pretentious secret societies were jeuvenile, and he was a F#@king moron.

I fear 4Chan will become another Bohemian Grove. But there is hope. Only Moot can save them now.

LX said, on 27/07/2009 at 03:41
Produce logs to back up your claims.


LISTEN_UP said, on 27/07/2009 at 04:32
Below is from one particular network device, has been sanitized (both IP and port… they sometimes script ports so they know the squawking target is when they post online) and I’m not going to bother with posting elsewhere and linking. I know what’s up. If you wish to buy politics and censorship, that’s up to you, but ask yourself this… why would AT&T care in the least about 4chan? And if they did, why would they JUST block the image server and not the entire thing? Whether it’s 4chan directly or someone bouncing off their server, it’s coming from them, and it’s with enough volume to cause a problem. I’m a very small fish and it’s very noticeable at the router.

Severity|Date|Time|SyslogID|SourceIP|SourcePort|DestIP|DestPort|Desc

6|Jul 26 2009|22:04:54|106015|207.126.64.182|80|192.168.0.99|33333|Deny TCP (no connection) from 207.126.64.182/80 to 192.168.0.99/33333 flags SYN ACK on interface outside

6|Jul 26 2009|22:04:54|106015|207.126.64.182|80|192.168.0.99|33333|Deny TCP (no connection) from 207.126.64.182/80 to 192.168.0.99/33333 flags SYN ACK on interface outside

6|Jul 26 2009|22:04:54|106015|207.126.64.182|80|192.168.0.99|33333|Deny TCP (no connection) from 207.126.64.182/80 to 192.168.0.99/33333 flags SYN ACK on interface outside

Networking101 said, on 27/07/2009 at 04:17
You do realise you can spoof the sending IP address when making a DDoS attack, correct?


LISTEN_UP said, on 27/07/2009 at 04:40
Of course. But it’s also very possible that the DDoS resulted in a major security issue at 4chan and now they are generating the traffic instead of receiving it. Common sense says that if AT&T were going to take a major step like that, it would be for a technical reason. They aren’t the smartest bunch from a corporate standpoint, but I would hazard a guess that they have enough geeks that would know they are tempting fate by blocking 4chan and would take that step only if necessary, as opposed to on a whim that will cause precisely what it has — accusations of censorship and violation of net neutrality. ISPs block stuff day in and day out, but they also remove blocks as appropriate. I’ve verified with our ISP that they are seeing this traffic in significant volumes. At this point, it’s annoying, more than anything else. I can’t speak for AT&T’s evaluation of the scale, however.

LISTEN_UP said, on 27/07/2009 at 04:48
Interesting that img.4chan.org just resolved to a different IP address than it has in the several times I’ve resolved it recently. I bet AT&T filters the entire IP block here soon.

Networking101 said, on 27/07/2009 at 06:17
Kinda interesting that. Looks like there’s something going on, sending requests to the http server on img, and masquerading as hosts on your network.

Quite likely the spammers that have been quite literally blasting that place with garbage posts. Not that i’m saying the users of 4chan are completely innocent here. It’s like a holy war. Only on the internet.

LISTEN_UP said, on 27/07/2009 at 06:47
Just posted an update toward the bottom of the thread. Indeed, 4chan is getting DDoS’ed, but they are also partly to blame for not doing anything to stop or throttle the responses. AT&T is very likely trying to help stop this, that’s the irony here. Yet everyone continues to pitch a bloody fit about civil rights, censorship and oppression. Nothing more than geeks being geeks and trying to mop up the spilled packets on their network.

If it were truly an act of evil by AT&T, it would be a 100% block across their enterprise. It’s not and we’ve known for over 10 days that 4chan has attack issues in play. Logic has escaped the masses once again… it’s more fun to accuse and whine.