Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Author Topic: Sites being mysteriously blocked  (Read 3612 times)

vic0239

  • Reg Member
  • ***
  • Posts: 519
Sites being mysteriously blocked
« on: November 30, 2018, 04:48:34 PM »

I have a really weird problem with my Internet access. A few weeks ago I was completing an online purchase and when I clicked on the usual "Continue Shopping" type button to return to the site home page I received a timeout. Since then I have been unable to access that site either by name or IP, it is unreachable. Then today I was working on John's SiteWorx when the same thing happened, but this is much more serious as I can't now access my email or anything else on that IP either! However, both sites are accessible through my VPN connection and on my mobile (3g), so it must be being blocked elsewhere. I have rebooted everything with no success and am now stumped and hoping for some enlightenment from the forum. This is affecting all devices. No changes have been made to my setup, it just happened out of the blue mid-session.
Thanks ... Andy.
Logged
Lothian Broadband 900/900 + AAISP VDSL, Vigor2865Vac, MikroTik rb260gsp, ZyXel NWA50AX WiFi AP.

d2d4j

  • Kitizen
  • ****
  • Posts: 1103
Re: Sites being mysteriously blocked
« Reply #1 on: November 30, 2018, 05:05:41 PM »

Hi Vic

I think you may have triggered our IDS/IPS which will drop your connection

If you can bear with me and I will check just after 6pm tonight if alright.

Many thanks

John
Logged

vic0239

  • Reg Member
  • ***
  • Posts: 519
Re: Sites being mysteriously blocked
« Reply #2 on: November 30, 2018, 05:08:41 PM »

Thanks John.
Could that have been triggered by getting my ftp password wrong once or twice?
Andy.
Logged
Lothian Broadband 900/900 + AAISP VDSL, Vigor2865Vac, MikroTik rb260gsp, ZyXel NWA50AX WiFi AP.

d2d4j

  • Kitizen
  • ****
  • Posts: 1103
Re: Sites being mysteriously blocked
« Reply #3 on: November 30, 2018, 07:33:59 PM »

Hi Vic

Sorry for late reply. If it is IDS/IPS blocking you, you should be able to access about 6pm tonight.

We do not give explicit details out sorry, but it would take more then 2  failed attempts on any 1 or more services email ftp etc... buy it is accumulative in a 24 hour period

What usually happens to self block is set up say email account, password wrong but they leave it, so it keeps trying and building up failed attempts. Same with ftp, where it can keep trying and same with dslstats, if saved using wrong password. If dslstats, please be aware curl keeps the connection, so it is possible to very quickly block you if wrong.

My advice is always if unsure, reset password.

Most of our clients like the idea of been blocked quickly as it protects their sites quicker against attackers

I hope that’s alright but if it helps, and you have a static ip, if you let pm the IP address I will add it to whitelist so you would not be blocked on that IP address

Many thanks

John
Logged

vic0239

  • Reg Member
  • ***
  • Posts: 519
Re: Sites being mysteriously blocked
« Reply #4 on: November 30, 2018, 09:16:02 PM »

Thanks John, all working ok now. I was “mucking about” with ftp after reading one of the other threads on the stats web interface, but wasn’t aware of the implications of getting things wrong. I’ll take more care in future. I’ll PM my IP in any case.

Many thanks for your help.

I wonder if something similar has happen with the other site (rhetorical)? Unlikely when just placing an order, surely.
Logged
Lothian Broadband 900/900 + AAISP VDSL, Vigor2865Vac, MikroTik rb260gsp, ZyXel NWA50AX WiFi AP.

burakkucat

  • Respected
  • Senior Kitizen
  • *
  • Posts: 38300
  • Over the Rainbow Bridge
    • The ELRepo Project
Re: Sites being mysteriously blocked
« Reply #5 on: November 30, 2018, 09:19:04 PM »

I wonder if something similar has happen with the other site (rhetorical)? Unlikely when just placing an order, surely.

Agreed, it's very unlikely.
Logged
:cat:  100% Linux and, previously, Unix. Co-founder of the ELRepo Project.

Please consider making a donation to support the running of this site.

d2d4j

  • Kitizen
  • ****
  • Posts: 1103
Re: Sites being mysteriously blocked
« Reply #6 on: November 30, 2018, 09:55:50 PM »

Hi Vic

Many thanks and now added to whitelist.

If your using dslstats, you can use sftp on port 24 and please remember the hosting folder is HTML. Anything outside of this root folder will not be accessible to the outside world. Above the root folder is normally to store scripts which the hosting accessed as needed but remains private. Eg billing software etc

As bcat states, it’s extremely unlikely to be IDS/IPS. Interestingly if you were using IE/edge, you could try the inprivate browser section and it may connect

Many thanks

John
Logged

vic0239

  • Reg Member
  • ***
  • Posts: 519
Re: Sites being mysteriously blocked
« Reply #7 on: December 01, 2018, 11:59:19 AM »

Thanks John.

Tried using Edge (in a VM), but no go, INET_E_RESOURCE_NOT_FOUND returned. It's not a site I visit often so no big deal.

Logged
Lothian Broadband 900/900 + AAISP VDSL, Vigor2865Vac, MikroTik rb260gsp, ZyXel NWA50AX WiFi AP.