Page 2 of 4

Re: Site appears to be having trouble loading

Posted: Sat Feb 15, 2014 1:57 am
by SYSTEM
Andrew Lee wrote: I googled around and found that it is a DDOS attack:

http://e-mats.org/2010/01/tcp-drop-open-request-from/
Ouch. :( I wonder what the attackers have against TPFC.

Re: Site appears to be having trouble loading

Posted: Thu Feb 20, 2014 11:47 am
by Wolfghost
Troubles again today!!

Re: Site appears to be having trouble loading

Posted: Thu Feb 20, 2014 8:09 pm
by Andrew Lee
Seems OK at my end. Nothing usual in syslog.

Anyone else?

Re: Site appears to be having trouble loading

Posted: Thu Feb 20, 2014 8:27 pm
by Emka
Me too, very briefly in the late afternoon CET.

Re: Site appears to be having trouble loading

Posted: Thu Feb 20, 2014 11:15 pm
by tproli
I also noticed yesterday about 20:00 CET (?)

Re: Site appears to be having trouble loading

Posted: Fri Feb 21, 2014 12:54 am
by Craunch
Completely offline a la DNS could not resolve portablefreeware.com for a while yesterday morning in UK. I wasn't paying much attention to the time, so I can't be more precise.

http://www.downforeveryoneorjustme.com/# also reported the site as down.

Re: Site appears to be having trouble loading

Posted: Fri Feb 21, 2014 1:16 am
by __philippe
Wondering too about some temporary mix-up in the whole chain of DNS servers ?

Applied tried-and-true local dns clearing method yesterday, allowed renewed trouble-free access to PFC.

(under win XP/SP3)

Code: Select all

 ipconfig /flushdns
net stop  dnscache
net start dnscache
__philippe

Re: Site appears to be having trouble loading

Posted: Fri Feb 21, 2014 2:43 am
by Craunch
Another possibility is that someone could have been trying a DNS poisoning attack.

Re: Site appears to be having trouble loading

Posted: Fri Feb 21, 2014 1:15 pm
by Andrew Lee
Found out why:

http://techcrunch.com/2014/02/20/namecheap-ddos/

Why all these DDOS attacks where even tiny TPFC is not spared? Attackers have too much time/resources on their hands?

Re: Site appears to be having trouble loading

Posted: Sat Feb 22, 2014 3:38 am
by __philippe
Andrew,

The ISP/DNS_nameserver target of the DDos attack reported in the above article is Namecheap (AS22612).

However, I was under the (mistaken?) impression PFC's own server (IP 38.109.218.139) is hosted by a different ISP,
namely "Loose Foot Computing Ltd" (AS40092) ?

__philippe

Re: Site appears to be having trouble loading

Posted: Sat Feb 22, 2014 2:10 pm
by Andrew Lee
The VPS is Loose Foot, but the DNS is hosted by Namecheap.

Re: Site appears to be having trouble loading

Posted: Sat Feb 22, 2014 5:45 pm
by __philippe
Aha, of course...thanks!

BTW, there is a nice write up about the "ISP/VPN/VPS" relationship here:
http://security.stackexchange.com/quest ... th-vpn-vps

(...and gratefully, PFC loading feels smooth again, of late.)

__philippe

Re: Site appears to be having trouble loading

Posted: Sun Mar 16, 2014 12:53 pm
by webfork
Andrew Lee wrote:Why all these DDOS attacks where even tiny TPFC is not spared? Attackers have too much time/resources on their hands?
I saw that these attacks happened to Freeware Genius as well a while back. My best guess is it's one of those "because it's there" or "because I can" motiveless things. Like it doesn't matter what you aim at, just so long as when you pull the trigger something falls over.

Re: Site appears to be having trouble loading

Posted: Tue Apr 22, 2014 12:25 am
by Midas
FYI, the day before yesterday (2014-04-20) I repeatedly got an error 503 from nginx while trying to access the site...

Re: Site appears to be having trouble loading

Posted: Tue Apr 22, 2014 2:07 am
by Andrew Lee
Thanks! Will continue to monitor...