Problems accessing DH

Muscle · Oct 23, 2005, 09:52 PM

Hi guys,

I normally have no trouble accessing Driverheaven but for a few days now I've been getting Page Not Found all the time. However, I've just changed my internet settings to use my ISP webcache and the site loads up albeit slowly. A tracert to the site gives this :-

Tracing route to driverheaven.net [67.15.42.37]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms ***********
2 19 ms 21 ms 20 ms loopback1.ar3.he1.systems.pipex.net [62.241.161.
230]
3 20 ms 19 ms 19 ms ge-0-0-0.cr2.he1.systems.pipex.net [62.241.161.1
77]
4 19 ms 19 ms 19 ms ge-2-0-2.cr1.he1.systems.pipex.net [62.241.161.1
73]
5 19 ms 20 ms 19 ms 999.ge6-2.mpr1.lhr1.uk.above.net [217.79.160.12]
6 19 ms 20 ms 44 ms so-5-3-0.cr1.lhr3.uk.above.net [208.184.231.178]
7 93 ms 92 ms 92 ms so-7-0-0.cr1.dca2.us.above.net [64.125.31.186]
8 102 ms 103 ms 104 ms so-5-0-0.mpr2.atl6.us.above.net [64.125.28.50]
9 102 ms 104 ms 103 ms so-0-0-0.mpr1.atl6.us.above.net [64.125.27.49]
10 115 ms 114 ms 115 ms so-3-3-0.mpr2.iah1.us.above.net [64.125.29.66]
11 115 ms 116 ms 115 ms t289.216-200-251-162.iah1.us.above.net [216.200.
251.162]
12 116 ms 116 ms 116 ms gphou-66-98-241-28.ev1.net [66.98.241.28]
13 116 ms 115 ms 115 ms gphou-66-98-241-126.ev1.net [66.98.241.126]
14 * * * Request timed out.
15 * * * Request timed out.

I've read another thread in this forum about IPs being blocked to protect against flooding and recently I've been tweaking my internet connection and part of that involved increasing the maximum number of connections for the 1.0 and 1.1 HTTP protocols to 10. Could this be what is causing my inability to access the site properly or could it be something else ?

Regards,
Lee

mkk · Oct 23, 2005, 10:16 PM

I guess it's possible that raising the simultaneous number of connections could increase the chance of this happening, but the problem would still be related to the site firewall by either software problem or config. It happens now and then.

Muscle · Oct 25, 2005, 05:23 AM

It's working fine again now, thanks.

Regards,
Lee

***Zardon*** · Oct 26, 2005, 07:53 AM

Quite a few DDOS attacks lately, and one today, the server automatically blocks IP ranges now at the firewall end.

Judas · Oct 29, 2005, 11:13 AM

Last night, oh abouts 2amish? my ip apparently got totally banned (not sure it's possible but it's a bit of an important ip) 70.64.2.5 is there a way to unblock that one?

***Zardon*** · Oct 29, 2005, 12:27 PM

this week the site has been under DDOS attacks, 25 in total, its a testament to the hardware firewall the site remained up. However quite a few IPS have been banned due to this and I need to work out the serious attacks from the less serious ones. The IP you mentioned has been blocked due to a MYSQL flood attack, so quite sure what you were doing ive no idea.....

Falstaff · Oct 29, 2005, 01:18 PM

I noticed some slow downs recently, but I had a particuler page bookmarked and it seemed to load faster in Opera. But something is up. My girlfriend said she gets port scans about every minute or two allegedly from China according to the Norton Software. I myself have to be careful as well, lots of bad folks out there with nothing better to do. I wonder if this is part of a Jihad?

Judas · Oct 29, 2005, 04:59 PM

Quote:

Originally Posted by Zardon

this week the site has been under DDOS attacks, 25 in total, its a testament to the hardware firewall the site remained up. However quite a few IPS have been banned due to this and I need to work out the serious attacks from the less serious ones. The IP you mentioned has been blocked due to a MYSQL flood attack, so quite sure what you were doing ive no idea.....

i don't get it.... all i did was log in... check out 2 threads.. posted once... then proceeded to browse the forums normally on a clean fresh system with no IE tinkering.

and according to my router, there was absalutely nothing strange to report via the router logs... if anything serious would have happened, i'd have received a e-mail from it

is the ip unblocked? or no?

***Zardon*** · Oct 29, 2005, 05:27 PM

Quote:

Originally Posted by Judas

if anything serious would have happened, i'd have received a e-mail from it

is the ip unblocked? or no?

no the IP isnt unblocked, and DH server said something did happen otherwise your IP wouldnt have been blocked in the first place, especially considering the IP you are currently using hasnt been blocked and its the same subnet would lead me to believe something did actually happen - if it was an extremely serious issue your whole subnet would have been blocked so that email from your router wouldnt really matter

. ill look into it tomorrow, right now I need to ensure the site is protected and updated as a few people seem to be intent on taking the place down.

Falstaff · Oct 29, 2005, 06:07 PM

Quote:

Originally Posted by Zardon

no the IP isnt unblocked, and DH server said something did happen otherwise your IP wouldnt have been blocked in the first place, especially considering the IP you are currently using hasnt been blocked and its the same subnet would lead me to believe something did actually happen - if it was an extremely serious issue your whole subnet would have been blocked so that email from your router wouldnt really matter

. ill look into it tomorrow, right now I need to ensure the site is protected and updated as a few people seem to be intent on taking the place down.

There are some real whack jobs out there Allan...

nitrousoxide52 · Oct 29, 2005, 06:35 PM

They're still out to get you for what happened to that 6800

***Zardon*** · Oct 30, 2005, 03:17 AM

Oh I doubt that, especially considering every nvidia card we have reviewed since then has recieved a gold award - I cant believe nvidia users would be that petty and dumb

. Most of the attacks appear to be random DDOS attacks, email relay attacks and masses of packets sent to mysql. I have spoken with a few other site owners recently and they are in the same situation.

snake · Oct 30, 2005, 04:02 AM

Quote:

Originally Posted by Zardon

this week the site has been under DDOS attacks, 25 in total, its a testament to the hardware firewall the site remained up. However quite a few IPS have been banned due to this and I need to work out the serious attacks from the less serious ones. The IP you mentioned has been blocked due to a MYSQL flood attack, so quite sure what you were doing ive no idea.....

I remember the same problem happened to my girlfriend. I even send a PM to u Zardon and i can assure that she's not some kind of hacker for sure. Her IP was simply banned too and i just tried to access the site, nothing more. So maybe this DDOS attack caught random connected IPs and then tried multiple connections faking this IPs ?? Anyway it was about 2 years ago and thx never happened again

***Zardon*** · Oct 30, 2005, 04:24 AM

Quote:

Originally Posted by snake

I remember the same problem happened to my girlfriend. I even send a PM to u Zardon and i can assure that she's not some kind of hacker for sure. Her IP was simply banned too and i just tried to access the site, nothing more. So maybe this DDOS attack caught random connected IPs and then tried multiple connections faking this IPs ?? Anyway it was about 2 years ago and thx never happened again

if it was 2 years ago we were on a different server and didnt even have a firewall.