T3X4S Posted March 14, 2016 Share Posted March 14, 2016 I use PIA VPN. Yesterday afternoon I was on the site, click on a link and it timed out. Tried getting back into the forums and was repeatedly timing out. I thought neowin was getting DDoD - so I waited. This morning - same thing. I disconnected from my VPN - voila! right thru Any pointers ? I connect through the Texas site - haven't tried the others I know that sited protected by CloudFlare block my VPN IP addy.... Thanks Link to comment Share on other sites More sharing options...
T3X4S Posted March 14, 2016 Author Share Posted March 14, 2016 OK - it seems to just be the Texas connection that is blocked. Link to comment Share on other sites More sharing options...
Unobscured Vision Posted March 14, 2016 Share Posted March 14, 2016 I run into that as well sometimes on a few other sites I frequent. Always Cloudflare, too. Strange. Link to comment Share on other sites More sharing options...
T3X4S Posted March 14, 2016 Author Share Posted March 14, 2016 @Unobscured Vision Do you use PIA ? Link to comment Share on other sites More sharing options...
HawkMan Posted March 14, 2016 Share Posted March 14, 2016 spammer uses public VPN to spam site, site blocks spammer, other peoeple using public VPN also gets blocked from that. T3X4S 1 Share Link to comment Share on other sites More sharing options...
T3X4S Posted March 14, 2016 Author Share Posted March 14, 2016 ahhh OK - well darnit - looks like this is going to be an ongoing issue. Right now Im connected to the Texas site w/ a 162.216.xxx.xxx address - and no problems so far... Link to comment Share on other sites More sharing options...
Unobscured Vision Posted March 14, 2016 Share Posted March 14, 2016 16 minutes ago, T3X4S said: @Unobscured Vision Do you use PIA ? PFW and my own config. Nothing special. Chrome, couple of extensions (Bitdefender Trafficlight, ABP with some whitelisting, TabsToTheFront!, GmailChecker) and that's it. Double Hardware Firewalled (Modem/Router + Switch). Nothing funky or apropo. I don't use or download Torrents, or practice any kind of file sharing, etc (not saying you do, of course). Good internet behaviors. I have noticed that Cloudflare tends to be more active when there's a lot of DDOS/Flooding going on worldwide. I haven't looked at the DDOS maps in a couple of weeks, but tonight could just be one of those nights that bamboo country is testing teapots. T3X4S 1 Share Link to comment Share on other sites More sharing options...
Unobscured Vision Posted March 14, 2016 Share Posted March 14, 2016 (edited) Here ya go -- tale of the tape. Watch this for a couple of minutes and see. Internal flood/DDoS botnet tonight, from the looks of things. You can even see the control pings every two-three minutes. Pretty heavy traffic tonight; way more than it should be for a Sunday/Monday at 5:11am EST. Watch where those primary control pings originate from, then the secondary (relay) pings go 30 seconds later. St. Louis, Seattle and Los Angeles backbones are all getting hammered tonight, so that could be why you're having trouble. http://map.norsecorp.com/#/ Link to comment Share on other sites More sharing options...
Unobscured Vision Posted March 14, 2016 Share Posted March 14, 2016 http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&list=0&time=16873&view=map (Google's service, essentially) is showing this same event as a combined TCP Conn/Volumetric; so likely it's a DDoS/Internal with command/control External. This one gives you way more sampling than Norse does, but Norse is realtime/less sampling. Both sites are valuable tools for Security Pros. There are more, of course; but they're Commercial. Link to comment Share on other sites More sharing options...
Eric Veteran Posted March 14, 2016 Veteran Share Posted March 14, 2016 PM me with the IP in question if you know it (or a link to one of your posts from before it started happening) and I'll check it out on this end. Unobscured Vision 1 Share Link to comment Share on other sites More sharing options...
wendy oltman Posted August 23, 2016 Share Posted August 23, 2016 Seems to me like the problem of bandwidth allocation and that is why your connection times out on its own automatically. Has this problem been persistent or does it occur rarely? Because if it occurs on regular basis than it might be because of bandwidth issue. Link to comment Share on other sites More sharing options...
Recommended Posts