Site down
Feb 5 2015, 8:41 pm
By: NudeRaider  

Feb 5 2015, 8:41 pm NudeRaider Post #1

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Hi folks, got a technical question to the following scenario:

The site http://www.bro[redacted]net.net/ (bronet) seems to have been taken down on first glance, because when I enter it in my browser I'm redirected to libertyreserve.com which is a site that's been taken down by FBI some time ago and has a banner stating the site has been taken down.

Now when I use a proxy to connect to bronet I can use the site, though every link I clicked is apparently not run through the proxy again because it also redirects to libertyreserve.com. But if I input the page link into the proxy directly it works. It functions normally otherwise. However there's a large message in the header stating the following:
Message (no it's not just badly translated, the German is already this bad. :P


I've also confirmed that some people in Germany can connect just fine. Those use a different provider, so that is likely the most important lead.

Now I'm wondering what exactly might be happening. Apparently they got new servers, and possibly a new domain provider, reachable under a new IP adress. Now all that needs to be done is update the DNS, right?

When the DNS hasn't been updated yet, why does it link to a totally different page?
When the DNS has already been updated why does it work only partially?

The answer is probably linked to how the DNS-system works. What if only my forwarder, the DNS of my provider, has still the old IP/name resolution cached, and not updated the DNS? How long does a full DNS update through all levels of DNS take? I'd guess minutes at most because I never had that kind of problem before. But this site is unreachable for hours now. And that still doesn't explain the redirect to libertyreserve.com, which is a different top level domain.
I'd also be surprised if that were a deliberate redirect on my providers part (forged DNS) because as far as I'm aware they'd only (be forced to) do such things if that site was dealing in felony, and not some forum discussing warez. And even then, not to some shady US site, but probably just send an error unreachable.

so... any ideas?

Other info that might or might not be relevant:
A traceroute to bronet shows at the end a few hops through an anti-DDos system run by a company named ovh.

- cutting power to the router for a minute and thus getting a new IP
- ipconfig /flushdns
- and deleting browsercache
all have had no effect




Feb 5 2015, 9:00 pm jjf28 Post #2

Cartography Artisan

Option 1: Manually configure DNS to a server that has the updated address (may need to clear your own DNS cache after doing so)
Option 2: Wait :( I recall a site of mine going down due to DDoS, the IP was changed quickly but it was inaccessible for at least a week while it propagated

Edit: I vaguely remember there was a way to manually map an IP to a DNS server for your network/computer with some non-trival method

Post has been edited 1 time(s), last time on Feb 5 2015, 9:05 pm by jjf28.



TheNitesWhoSay - Clan Aura - github

Reached the top of StarCraft theory crafting 2:12 AM CST, August 2nd, 2014.

Feb 5 2015, 9:16 pm NudeRaider Post #3

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Quote from jjf28
Option 1: Manually configure DNS to a server that has the updated address (may need to clear your own DNS cache after doing so)
Option 2: Wait :( I recall a site of mine going down due to DDoS, the IP was changed quickly but it was inaccessible for at least a week while it propagated

Edit: I vaguely remember there was a way to manually map an IP to a DNS server for your network/computer with some non-trival method
I can map IPs to domain names in the hosts file in %systemroot%\system32\drivers\etc

But I don't have the new IP address. How can I tell the IP of a site im connected to via proxy, when I can't trust DNS?

1) Is a good idea though. I'll try google.
EDIT: Didn't help. When I directly enter the IP that google DNS returns it shows a default page of the webhoster - probably the one where it used to be.

Any other ideas?

Post has been edited 1 time(s), last time on Feb 5 2015, 9:22 pm by NudeRaider.




Feb 5 2015, 9:20 pm rockz Post #4

ᴄʜᴇᴇsᴇ ɪᴛ!

Use dns 8.8.8.8 and 8.8.4.4 or openDNS.

You can also use isup.me and an online ping tool to help identify the correct IP.



"Parliamentary inquiry, Mr. Chairman - do we have to call the Gentleman a gentleman if he's not one?"

Feb 5 2015, 9:27 pm NudeRaider Post #5

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Quote from rockz
You can also use isup.me and
Wouldn't that give false positives due to the redirect and empty hoster pages?

Quote from rockz
an online ping tool to help identify the correct IP.
Interesting. This returns a different IP for bronet, but this IP also leads me to an empty hoster page of the same provider.




Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[06:11 pm]
Ultraviolet -- :wob:
[2023-2-04. : 11:43 am]
Zycorax -- :wob:
[2023-2-03. : 6:54 pm]
Zoan -- :wob:
[2023-2-03. : 3:35 am]
Ultraviolet -- :wob:
[2023-2-02. : 3:26 am]
Ultraviolet -- :wob:
[2023-2-01. : 2:29 am]
Ultraviolet -- how about yourself?
[2023-2-01. : 2:29 am]
Ultraviolet -- pretty good elite ejaculator
[2023-1-31. : 10:07 pm]
ejac1337 -- How's it going guys?
[2023-1-31. : 2:59 pm]
No-Name-Needed-II -- @Ultraviolet Thanks! It wasn't easy defeating the TMOANC lol..
[2023-1-30. : 8:45 pm]
Ultraviolet -- No-Name-Needed-II
No-Name-Needed-II shouted: Nobody showed interest in Authoring a story for my KotK Shores of Hell terrain so I uploaded it to terrain genre, You'll never look at Asheworld Tileset the same way again :) http://www.staredit.net/sc1db/file/6236/
Checked it out last night, definitely looks interesting. Can tell a lot of effort went into it
Please log in to shout.


Members Online: Roy, Dem0n