Seems like their upstream cut them off. Their first NS and their website are in the same subnet, neither are reachable. This website has the public list of known IPs to block due to excessive login attempts and whatnot. We use it to build a db in our cpanel boxes (cphulkd) blacklist. http://www.openbl.org/lists/base.txt traceroute to 80.237.253.233 (80.237.253.233), 30 hops max, 60 byte packets 1 <removed> 2 <removed> 3 xe-5-3-0.core4.dllstx01.corexchange.com (208.78.216.162) 26.774 ms 26.750 ms 26.721 ms 4 tengigabitethernet2-2.asr1.dal2.gblx.net (208.48.236.129) 9.544 ms 9.516 ms 9.482 ms 5 xe-1-2-0.cr-antares.ams1.hosteurope.de (206.165.75.2) 132.227 ms 131.102 ms 131.074 ms 6 xe-11-3-0.cr-pollux.cgn3.hosteurope.de (80.237.129.117) 129.283 ms 120.593 ms 119.461 ms 7 xe-0-0-0.dr-master.r2.cgn3.hosteurope.de (176.28.4.42) 122.862 ms 122.763 ms 122.782 ms 8 * * * 9 * * *