An exact/estimate reason why Bitcointalk doesn't load without VPN for me?

thebitcoinquiz.com

sr. member

Activity: 280

Merit: 250

Quote from: Prelude on April 14, 2015, 08:44:56 PM

I've been having the same issue for the past 6 hours or so. Can't load bitcointalk without my VPN being enabled.

Where do you live? And who is your ISP?
Just want to know if this issue is country/provider specific.

Prelude

legendary

Activity: 1596

Merit: 1000

I've been having the same issue for the past 6 hours or so. Can't load bitcointalk without my VPN being enabled.

shorena

copper member

Activity: 1498

Merit: 1562

No I dont escrow anymore.

Quote from: 2112 on April 14, 2015, 05:16:38 AM

Quote from: shorena on April 14, 2015, 02:03:48 AM

Vodafone does funny things as well:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
-LAN-
2 10.218.128.5 (10.218.128.5) 26.468 ms 29.630 ms 29.621 ms
3 10.218.129.60 (10.218.129.60) 34.503 ms 34.500 ms 34.466 ms
4 10.218.129.34 (10.218.129.34) 40.485 ms 40.447 ms 40.410 ms
5 10.218.130.20 (10.218.130.20) 37.577 ms 40.392 ms 40.359 ms
6 10.218.130.26 (10.218.130.26) 43.195 ms 32.402 ms 49.601 ms

It is perfectly fine to use private/local IP addresses on the internal network of the ISP. So those hops 2-6 are perfectly fine as long as they don't leave the ISP's internal network. Funnies & shenanigans start when one sees the private packets routed (or apparently routed) over the public Internet. Try doing a reverse traceroute, meaning from other public address of another ISP to your IP address on Vodafone. If you then see those 6 hops over 10/8 subnet that would qualify as "funny".

Hmm, makes sense I guess. I will need to wait at least two days till have access to that connection though.

2112

legendary

Activity: 2128

Merit: 1074

Quote from: shorena on April 14, 2015, 02:03:48 AM

Vodafone does funny things as well:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
-LAN-
2 10.218.128.5 (10.218.128.5) 26.468 ms 29.630 ms 29.621 ms
3 10.218.129.60 (10.218.129.60) 34.503 ms 34.500 ms 34.466 ms
4 10.218.129.34 (10.218.129.34) 40.485 ms 40.447 ms 40.410 ms
5 10.218.130.20 (10.218.130.20) 37.577 ms 40.392 ms 40.359 ms
6 10.218.130.26 (10.218.130.26) 43.195 ms 32.402 ms 49.601 ms

It is perfectly fine to use private/local IP addresses on the internal network of the ISP. So those hops 2-6 are perfectly fine as long as they don't leave the ISP's internal network. Funnies & shenanigans start when one sees the private packets routed (or apparently routed) over the public Internet. Try doing a reverse traceroute, meaning from other public address of another ISP to your IP address on Vodafone. If you then see those 6 hops over 10/8 subnet that would qualify as "funny".

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: thebitcoinquiz.com on April 14, 2015, 02:59:44 AM

I am also an India and I also have exactly the same problem sometimes.
This problem arises with Airtel and Vodafone, but nothing ever goes wrong with MTNL network.
I am always on 3G and I have a pretty decent connection.
I cannot say why is this happening , but just wanted to report it and the issue corrects itself after 12-30hours and then reappears in a few days.
Also I always browse the forum through mobile.

It appears for me when using !DEA and MTS. It occurs more on mobile than on PC.

redsn0w

legendary

Activity: 1778

Merit: 1043

#Free market

Quote from: shorena on April 14, 2015, 02:03:48 AM

Vodafone does funny things as well:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
-LAN-
2 10.218.128.5 (10.218.128.5) 26.468 ms 29.630 ms 29.621 ms
3 10.218.129.60 (10.218.129.60) 34.503 ms 34.500 ms 34.466 ms
4 10.218.129.34 (10.218.129.34) 40.485 ms 40.447 ms 40.410 ms
5 10.218.130.20 (10.218.130.20) 37.577 ms 40.392 ms 40.359 ms
6 10.218.130.26 (10.218.130.26) 43.195 ms 32.402 ms 49.601 ms
7 92.79.230.45 (92.79.230.45) 49.551 ms 92.79.230.33 (92.79.230.33) 36.361 ms 49.841 ms
8 92.79.213.138 (92.79.213.138) 59.029 ms 188.111.129.26 (188.111.129.26) 62.687 ms 62.678 ms
9 ams-ix.retn.net (80.249.209.216) 56.634 ms 58.918 ms 58.883 ms
10 et510-1.RT.M9.MSK.RU.retn.net (87.245.232.2) 109.526 ms 103.490 ms 109.492 ms
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 ddos-guard.net (186.2.165.2) 109.552 ms 109.555 ms 109.520 ms
17 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 106.432 ms 109.474 ms 106.381 ms

At work I get two hops before I get "host not reachable", its probably the proxy blocking unauthenticated connections.

Yes it is the same thing for me, most probable an ISP 'error' but also a bitcointalk problem (but I'm not sure).

thebitcoinquiz.com

sr. member

Activity: 280

Merit: 250

I am also an India and I also have exactly the same problem sometimes.
This problem arises with Airtel and Vodafone, but nothing ever goes wrong with MTNL network.
I am always on 3G and I have a pretty decent connection.
I cannot say why is this happening , but just wanted to report it and the issue corrects itself after 12-30hours and then reappears in a few days.
Also I always browse the forum through mobile.

shorena

copper member

Activity: 1498

Merit: 1562

No I dont escrow anymore.

Vodafone does funny things as well:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
-LAN-
2 10.218.128.5 (10.218.128.5) 26.468 ms 29.630 ms 29.621 ms
3 10.218.129.60 (10.218.129.60) 34.503 ms 34.500 ms 34.466 ms
4 10.218.129.34 (10.218.129.34) 40.485 ms 40.447 ms 40.410 ms
5 10.218.130.20 (10.218.130.20) 37.577 ms 40.392 ms 40.359 ms
6 10.218.130.26 (10.218.130.26) 43.195 ms 32.402 ms 49.601 ms
7 92.79.230.45 (92.79.230.45) 49.551 ms 92.79.230.33 (92.79.230.33) 36.361 ms 49.841 ms
8 92.79.213.138 (92.79.213.138) 59.029 ms 188.111.129.26 (188.111.129.26) 62.687 ms 62.678 ms
9 ams-ix.retn.net (80.249.209.216) 56.634 ms 58.918 ms 58.883 ms
10 et510-1.RT.M9.MSK.RU.retn.net (87.245.232.2) 109.526 ms 103.490 ms 109.492 ms
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 ddos-guard.net (186.2.165.2) 109.552 ms 109.555 ms 109.520 ms
17 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 106.432 ms 109.474 ms 106.381 ms

At work I get two hops before I get "host not reachable", its probably the proxy blocking unauthenticated connections.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: redsn0w on April 12, 2015, 01:59:47 PM

Can you post a traceroute when you are connected through VPN? I would like to see the difference between your first trace and the second. Thanks.

Using VPN:

Code:

traceroute to bitcointalk.org (186.2.165.183) , 5 relative hops max, 52 byte packets
1 local ip 412.425 ms 834.185 ms 838.190 ms
2 local ip (172.17.42.1) 383.848 ms 798.146 ms *
3 68.169.44.1.static.vps.net (68.169.44.1) 728.076 ms 864.167 ms 1042.281 ms
4 206.130.126.70 (206.130.126.70) 1473.370 ms 1934.755 ms 1944.318 ms
5 206.130.126.9 (206.130.126.9) 439.704 ms 1064.384 ms 1074.915 ms
6 208.184.34.185 (208.184.34.185) 395.304 ms 847.956 ms 856.974 ms
7 64.125.20.237 (64.125.20.237) 389.252 ms 419.346 ms 449.393 ms
8 64.125.26.5 (64.125.26.5) 431.576 ms 434.454 ms 447.036 ms
9 ae7.edge2.losangles.level3.net (4.68.70.33) 465.098 ms 467.642 ms 478.683 ms
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 ddos-guard.net (186.2.165.2) 614.071 ms 617.848 ms 620.993 ms
16 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 533.539 ms 539.293 ms 546.350 ms

Ping result when connected to VPN:

Code:

PING bitcointalk.org (186.2.165.183): 56 data bytes

64 bytes from 186.2.165.183: icmp_seq=0 ttl=46 time=609.490 ms

64 bytes from 186.2.165.183: icmp_seq=1 ttl=46 time=554.117 ms

64 bytes from 186.2.165.183: icmp_seq=2 ttl=46 time=538.181 ms

64 bytes from 186.2.165.183: icmp_seq=3 ttl=46 time=739.915 ms

64 bytes from 186.2.165.183: icmp_seq=4 ttl=46 time=617.587 ms

64 bytes from 186.2.165.183: icmp_seq=5 ttl=46 time=593.669 ms

64 bytes from 186.2.165.183: icmp_seq=6 ttl=46 time=619.932 ms

64 bytes from 186.2.165.183: icmp_seq=7 ttl=46 time=623.516 ms

64 bytes from 186.2.165.183: icmp_seq=8 ttl=46 time=567.537 ms

64 bytes from 186.2.165.183: icmp_seq=9 ttl=46 time=587.794 ms

64 bytes from 186.2.165.183: icmp_seq=10 ttl=46 time=578.486 ms

64 bytes from 186.2.165.183: icmp_seq=11 ttl=46 time=606.406 ms

64 bytes from 186.2.165.183: icmp_seq=12 ttl=46 time=532.542 ms

64 bytes from 186.2.165.183: icmp_seq=13 ttl=46 time=594.031 ms

64 bytes from 186.2.165.183: icmp_seq=14 ttl=46 time=1965.721 ms

64 bytes from 186.2.165.183: icmp_seq=15 ttl=46 time=1107.101 ms

64 bytes from 186.2.165.183: icmp_seq=16 ttl=46 time=589.401 ms

64 bytes from 186.2.165.183: icmp_seq=17 ttl=46 time=898.194 ms

64 bytes from 186.2.165.183: icmp_seq=18 ttl=46 time=555.065 ms

64 bytes from 186.2.165.183: icmp_seq=19 ttl=46 time=529.822 ms

64 bytes from 186.2.165.183: icmp_seq=20 ttl=46 time=544.758 ms

64 bytes from 186.2.165.183: icmp_seq=21 ttl=46 time=482.326 ms

64 bytes from 186.2.165.183: icmp_seq=22 ttl=46 time=596.370 ms

64 bytes from 186.2.165.183: icmp_seq=23 ttl=46 time=626.216 ms

64 bytes from 186.2.165.183: icmp_seq=24 ttl=46 time=619.887 ms

64 bytes from 186.2.165.183: icmp_seq=25 ttl=46 time=998.474 ms

64 bytes from 186.2.165.183: icmp_seq=26 ttl=46 time=875.255 ms

64 bytes from 186.2.165.183: icmp_seq=27 ttl=46 time=1395.922 ms

--- 186.2.165.183 ping statistics ---
29 packets transmitted, 28 received, 3.45% packet loss
round-trip min / avg / max = 482.326 / 694.749 / 1965.721 ms

Edit: Made minor changes..

shorena

copper member

Activity: 1498

Merit: 1562

No I dont escrow anymore.

Quote from: redsn0w on April 12, 2015, 05:00:07 PM

-snip-
Can I ask you what is your internet speed? If you want also post a speedtest (using speedtest.net) thanks.

Advertised as 32/2 IIRC, speedtest results in 31.79/1.99/11ms

Quote from: 2112 on April 12, 2015, 05:11:41 PM

-snip-

Quote from: shorena on April 12, 2015, 04:27:07 PM

Post your trace will you? Mine shows two class A IPs as well, just before "reaching" the DDoS protection, my ping times are significantly better though. See redsn0ws post above, they also have similar IPs 10.10.48.5 and 10.10.68.11

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
3 83-169-183-73-isp.superkabel.de (83.169.183.73) 16.311 ms 24.876 ms 26.022 ms
4 ip5886c9ad.dynamic.kabel-deutschland.de (88.134.201.173) 26.888 ms 27.741 ms 28.585 ms

These IPs do not show when I use an VPN (university line).

What is the point? I don't have routing problems. I always have at least 2 ISP available when at home, and all of them properly filter http://en.wikipedia.org/wiki/Martian_packet . Is "Superkabel" a reseller of "Kabel-Deutschland"?

Just for comparisson I have no problems to reach the board either. My network breaks down completely sometimes though.

Kabel Deutschland writes the bills, but I would not be surprised if the regional network is handled by a subcontractor. Its essentially the worst ISP germany has to offer, well besides our last one "Hansenet" which was bought and sold by more companies that I care to remember each creating more problems.

Quote from: 2112 on April 12, 2015, 05:11:41 PM

That setup looks like a typical reseller agreement where the reseller has no technical knowledge to maintain their network, only to do the billing. Perhaps you should ask you ISP why they don't filter martians? Your uni seems to have competent network engineers.

I am not surprised by that assesment, but Im afraid I dont have the two days it would take to get someone that even understands the questions (including those from your Edit2) on the line. We have plans to switch to a different ISP, but that will take time due to the contract.

Quote from: 2112 on April 12, 2015, 05:11:41 PM

Edit: The only thing of that may be of interest is that from my Eastern European ISP I see a hop to the Western Europe via

Code:

bundle-ether9.ffttr4.FrankfurtAmMain.opentransit.net (193.251.255.201)

before reaching ddos-guard.net which seems to be located in Russia.

Edit2: Since more people posted the traceroutes with 10/8 subnet, I think it may be worthwhile to ask their ISP if they distinguish between bogons and martians (http://en.wikipedia.org/wiki/Bogon_filtering & http://en.wikipedia.org/wiki/Martian_packet) and why don't they use RPF (http://en.wikipedia.org/wiki/Reverse_path_forwarding). theymos should probably also ask ddos-guard.net what is going on. I have no way of testing that because all the ISPs I have access to properly filter martians and my access to the internal ISP traffic engineering tools is very limited.

Quote from: Muhammed Zakir on April 13, 2015, 12:07:38 AM

-snip-
Shorena is telling that he and redsn0w is getting non-routable IPs like me. I will look the wiki articles you gave. Thank you!

Can you post your traceroute? That will be helpful.

Apparently they checked their route and found nothing curious, besides a hop into western europe. I can do some routes via other ISPs over the next days and see if I find anything, but it probably boils down to: we have shitty ISPs.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: 2112 on April 12, 2015, 05:11:41 PM

Quote from: Muhammed Zakir on April 12, 2015, 04:17:28 PM

I am fairly positive that all four are wrong. I always try to be careful when I install something.^[1]

I am not afraid, I don't know what to do. This problem is happening to chronicsky too and he is an Indian. It's not only for me. I thought I would get workaround or reason if I post here.

It is hard for me to take your statements on their face value. I'm an experienced engineer, but the teenage computer-gaming-kids I know all are well aware of their ping times. So when somebody posts a multi-second ping times like if this is nothing special all I can think of is http://www.urbandictionary.com/define.php?term=space+cadet . It is very hard for me to really put myself into your frame of mind, when the teenage kids near me (about 6th grade) all know their ping times and discuss them in the breaks of their soccer matches.

Thanks for the title! Huh

"one who is so easily lost in reverie that he or she loses all awareness of the surrounding physical world."

You maybe an expert in this but I ain't. So I need help unlike you.

Quote from: 2112 on April 12, 2015, 05:11:41 PM

Quote from: shorena on April 12, 2015, 04:27:07 PM

Post your trace will you? Mine shows two class A IPs as well, just before "reaching" the DDoS protection, my ping times are significantly better though. See redsn0ws post above, they also have similar IPs 10.10.48.5 and 10.10.68.11

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
3 83-169-183-73-isp.superkabel.de (83.169.183.73) 16.311 ms 24.876 ms 26.022 ms
4 ip5886c9ad.dynamic.kabel-deutschland.de (88.134.201.173) 26.888 ms 27.741 ms 28.585 ms

These IPs do not show when I use an VPN (university line).

What is the point? I don't have routing problems. I always have at least 2 ISP available when at home, and all of them properly filter http://en.wikipedia.org/wiki/Martian_packet . Is "Superkabel" a reseller of "Kabel-Deutschland"? That setup looks like a typical reseller agreement where the reseller has no technical knowledge to maintain their network, only to do the billing. Perhaps you should ask you ISP why they don't filter martians? Your uni seems to have competent network engineers.

Edit: The only thing of that may be of interest is that from my Eastern European ISP I see a hop to the Western Europe via

Code:

bundle-ether9.ffttr4.FrankfurtAmMain.opentransit.net (193.251.255.201)

before reaching ddos-guard.net which seems to be located in Russia.

Edit2: Since more people posted the traceroutes with 10/8 subnet, I think it may be worthwhile to ask their ISP if they distinguish between bogons and martians (http://en.wikipedia.org/wiki/Bogon_filtering & http://en.wikipedia.org/wiki/Martian_packet) and why don't they use RPF (http://en.wikipedia.org/wiki/Reverse_path_forwarding). theymos should probably also ask ddos-guard.net what is going on. I have no way of testing that because all the ISPs I have access to properly filter martians and my access to the internal ISP traffic engineering tools is very limited.

Shorena is telling that he and redsn0w is getting non-routable IPs like me. I will look the wiki articles you gave. Thank you!

Can you post your traceroute? That will be helpful.

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 04:17:28 PM

I am fairly positive that all four are wrong. I always try to be careful when I install something.^[1]

I am not afraid, I don't know what to do. This problem is happening to chronicsky too and he is an Indian. It's not only for me. I thought I would get workaround or reason if I post here.

It is hard for me to take your statements on their face value. I'm an experienced engineer, but the teenage computer-gaming-kids I know all are well aware of their ping times. So when somebody posts a multi-second ping times like if this is nothing special all I can think of is http://www.urbandictionary.com/define.php?term=space+cadet . It is very hard for me to really put myself into your frame of mind, when the teenage kids near me (about 6th grade) all know their ping times and discuss them in the breaks of their soccer matches.

Quote from: shorena on April 12, 2015, 04:27:07 PM

Post your trace will you? Mine shows two class A IPs as well, just before "reaching" the DDoS protection, my ping times are significantly better though. See redsn0ws post above, they also have similar IPs 10.10.48.5 and 10.10.68.11

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
3 83-169-183-73-isp.superkabel.de (83.169.183.73) 16.311 ms 24.876 ms 26.022 ms
4 ip5886c9ad.dynamic.kabel-deutschland.de (88.134.201.173) 26.888 ms 27.741 ms 28.585 ms

These IPs do not show when I use an VPN (university line).

What is the point? I don't have routing problems. I always have at least 2 ISP available when at home, and all of them properly filter http://en.wikipedia.org/wiki/Martian_packet . Is "Superkabel" a reseller of "Kabel-Deutschland"? That setup looks like a typical reseller agreement where the reseller has no technical knowledge to maintain their network, only to do the billing. Perhaps you should ask you ISP why they don't filter martians? Your uni seems to have competent network engineers.

Edit: The only thing of that may be of interest is that from my Eastern European ISP I see a hop to the Western Europe via

Code:

bundle-ether9.ffttr4.FrankfurtAmMain.opentransit.net (193.251.255.201)

before reaching ddos-guard.net which seems to be located in Russia.

Edit2: Since more people posted the traceroutes with 10/8 subnet, I think it may be worthwhile to ask their ISP if they distinguish between bogons and martians (http://en.wikipedia.org/wiki/Bogon_filtering & http://en.wikipedia.org/wiki/Martian_packet) and why don't they use RPF (http://en.wikipedia.org/wiki/Reverse_path_forwarding). theymos should probably also ask ddos-guard.net what is going on. I have no way of testing that because all the ISPs I have access to properly filter martians and my access to the internal ISP traffic engineering tools is very limited.

redsn0w

legendary

Activity: 1778

Merit: 1043

#Free market

Quote from: shorena on April 12, 2015, 04:27:07 PM

Quote from: 2112 on April 12, 2015, 04:05:08 PM

Quote from: Muhammed Zakir on April 12, 2015, 03:29:14 PM

I think I understand what you are trying to proove. I posted exact lines(except I removed first 3) I got after running the command "traceroute bitcointalk.org". I didn't want to make changes as it may lead to more complications. So...?

I apologize in advance for being blunt. I don't otherwise will achieve any sort of positive communication.

M.Z. doesn't know what he's doing. He's afraid to admit it. He had either:

1) managed to get his computer&gateway working by installing some malware or shitware that screws up routing
2) buys his Internet access from some black market supplier, equivalent to earlier Indian dishwallahs who frequently were resellers of cracked-encryption satellite TV receivers
3) steals his Internet access from someplace with significant restrictions
4) is completely honest and forthright, but pays for Internet access to somebody who does 1)-3).

The situation you are with is typically called "painted yourself into a corner". You are now afraid to make any changes, like a floor painter who didn't think ahead and didn't plan a way to leave the room he had to paint.

Post your trace will you? Mine shows two class A IPs as well, just before "reaching" the DDoS protection, my ping times are significantly better though. See redsn0ws post above, they also have similar IPs 10.10.48.5 and 10.10.68.11

Mine:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
1 -LAN- 0.626 ms 0.910 ms 1.502 ms
2 -LAN- 9.889 ms 14.255 ms 15.076 ms
3 83-169-183-73-isp.superkabel.de (83.169.183.73) 16.311 ms 24.876 ms 26.022 ms
4 ip5886c9ad.dynamic.kabel-deutschland.de (88.134.201.173) 26.888 ms 27.741 ms 28.585 ms
5 ip5886ca7d.dynamic.kabel-deutschland.de (88.134.202.125) 39.328 ms 40.356 ms 41.375 ms
6 ams-ix.retn.net (80.249.209.216) 36.820 ms 28.668 ms 33.691 ms
7 et510-1.RT.M9.MSK.RU.retn.net (87.245.232.2) 76.542 ms 75.793 ms 77.064 ms
8 * * *
9 * * *
10 * * *
11 10.10.49.1 (10.10.49.1) 83.844 ms 82.522 ms 81.718 ms
12 10.0.4.81 (10.0.4.81) 72.582 ms 79.525 ms 77.921 ms
13 ddos-guard.net (186.2.165.2) 74.413 ms 76.058 ms 80.216 ms
14 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 81.797 ms 75.247 ms 70.918 ms

These IPs do not show when I use an VPN (university line).

Can I ask you what is your internet speed? If you want also post a speedtest (using speedtest.net) thanks.

shorena

copper member

Activity: 1498

Merit: 1562

No I dont escrow anymore.

Quote from: 2112 on April 12, 2015, 04:05:08 PM

Quote from: Muhammed Zakir on April 12, 2015, 03:29:14 PM

I think I understand what you are trying to proove. I posted exact lines(except I removed first 3) I got after running the command "traceroute bitcointalk.org". I didn't want to make changes as it may lead to more complications. So...?

I apologize in advance for being blunt. I don't otherwise will achieve any sort of positive communication.

M.Z. doesn't know what he's doing. He's afraid to admit it. He had either:

1) managed to get his computer&gateway working by installing some malware or shitware that screws up routing
2) buys his Internet access from some black market supplier, equivalent to earlier Indian dishwallahs who frequently were resellers of cracked-encryption satellite TV receivers
3) steals his Internet access from someplace with significant restrictions
4) is completely honest and forthright, but pays for Internet access to somebody who does 1)-3).

The situation you are with is typically called "painted yourself into a corner". You are now afraid to make any changes, like a floor painter who didn't think ahead and didn't plan a way to leave the room he had to paint.

Post your trace will you? Mine shows two class A IPs as well, just before "reaching" the DDoS protection, my ping times are significantly better though. See redsn0ws post above, they also have similar IPs 10.10.48.5 and 10.10.68.11

Mine:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
1 -LAN- 0.626 ms 0.910 ms 1.502 ms
2 -LAN- 9.889 ms 14.255 ms 15.076 ms
3 83-169-183-73-isp.superkabel.de (83.169.183.73) 16.311 ms 24.876 ms 26.022 ms
4 ip5886c9ad.dynamic.kabel-deutschland.de (88.134.201.173) 26.888 ms 27.741 ms 28.585 ms
5 ip5886ca7d.dynamic.kabel-deutschland.de (88.134.202.125) 39.328 ms 40.356 ms 41.375 ms
6 ams-ix.retn.net (80.249.209.216) 36.820 ms 28.668 ms 33.691 ms
7 et510-1.RT.M9.MSK.RU.retn.net (87.245.232.2) 76.542 ms 75.793 ms 77.064 ms
8 * * *
9 * * *
10 * * *
11 10.10.49.1 (10.10.49.1) 83.844 ms 82.522 ms 81.718 ms
12 10.0.4.81 (10.0.4.81) 72.582 ms 79.525 ms 77.921 ms
13 ddos-guard.net (186.2.165.2) 74.413 ms 76.058 ms 80.216 ms
14 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 81.797 ms 75.247 ms 70.918 ms

These IPs do not show when I use an VPN (university line).

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: 2112 on April 12, 2015, 04:05:08 PM

I apologize in advance for being blunt. I don't otherwise will achieve any sort of positive communication.

No problem! I like to hear all opinions.

Quote from: 2112 on April 12, 2015, 04:05:08 PM

M.Z. doesn't know what he's doing.

This maybe true.

Quote from: 2112 on April 12, 2015, 04:05:08 PM

He's afraid to admit it.

Why should I be? I am browsing and partcipating in this forum.

Quote from: 2112 on April 12, 2015, 04:05:08 PM

He had either:

1) managed to get his computer&gateway working by installing some malware or shitware that screws up routing
2) buys his Internet access from some black market supplier, equivalent to earlier Indian dishwallahs who frequently were resellers of cracked-encryption satellite TV receivers
3) steals his Internet access from someplace with significant restrictions
4) is completely honest and forthright, but pays for Internet access to somebody who does 1)-3).

I am fairly positive that all four are wrong. I always try to be careful when I install something.^[1]

Quote from: 2112 on April 12, 2015, 04:05:08 PM

The situation you are with is typically called "painted yourself into a corner". You are now afraid to make any changes, like a floor painter who didn't think ahead and didn't plan a way to leave the room he had to paint.

I am not afraid, I don't know what to do. This problem is happening to chronicsky too and he is an Indian. It's not only for me. I thought I would get workaround or reason if I post here.

Nevertheless, thank you for your reply!

Edit: [1] was answer to your first question. Mentioning so it won't be misleading.

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 03:29:14 PM

I think I understand what you are trying to proove. I posted exact lines(except I removed first 3) I got after running the command "traceroute bitcointalk.org". I didn't want to make changes as it may lead to more complications. So...?

I apologize in advance for being blunt. I don't otherwise will achieve any sort of positive communication.

M.Z. doesn't know what he's doing. He's afraid to admit it. He had either:

1) managed to get his computer&gateway working by installing some malware or shitware that screws up routing
2) buys his Internet access from some black market supplier, equivalent to earlier Indian dishwallahs who frequently were resellers of cracked-encryption satellite TV receivers
3) steals his Internet access from someplace with significant restrictions
4) is completely honest and forthright, but pays for Internet access to somebody who does 1)-3).

The situation you are with is typically called "painted yourself into a corner". You are now afraid to make any changes, like a floor painter who didn't think ahead and didn't plan a way to leave the room he had to paint.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: 2112 on April 12, 2015, 03:06:51 PM

I don't know what is the minimum information required to rip-off somebody. Probably the most common rip-offs are done with a help offer via Teamviewer: http://en.wikipedia.org/wiki/TeamViewer#Fraudulent_uses but I'm not really up to speed in that racket.

Thanks for the link!

Quote from: 2112 on April 12, 2015, 03:06:51 PM

Personally, I don't think you understand the basics.

Code:

13 10.10.48.5 (10.10.48.5) 2463.142 ms 2974.825 ms 5016.395 ms

In the previously posted traceroute you have a non-globally-routable IP address (10/8 subnet) at position 13. I don't know if there's an simpler and more obvious way to detect routing shenanigans than that.

I think I understand what you are trying to proove. I posted exact lines(except I removed first 3) I got after running the command "traceroute bitcointalk.org". I didn't want to make changes as it may lead to more complications. So...?

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 02:34:58 PM

Okay. Thanks for telling! But is it easy to plant malware with "minimum" information? What is considered as "minimum" information?

I don't know what is the minimum information required to rip-off somebody. Probably the most common rip-offs are done with a help offer via Teamviewer: http://en.wikipedia.org/wiki/TeamViewer#Fraudulent_uses but I'm not really up to speed in that racket.

Quote from: Muhammed Zakir on April 12, 2015, 02:34:58 PM

As I have mentioned earlier, my knowledge in this is very limited. I looked more about locally and globally-routable IP. I think I understood basics/theories.

Personally, I don't think you understand the basics.

Code:

13 10.10.48.5 (10.10.48.5) 2463.142 ms 2974.825 ms 5016.395 ms

In the previously posted traceroute you have a non-globally-routable IP address (10/8 subnet) at position 13. I don't know if there's an simpler and more obvious way to detect routing shenanigans than that.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: redsn0w on April 12, 2015, 01:59:47 PM

Can you post a traceroute when you are connected through VPN? I would like to see the difference between your first trace and the second. Thanks.

Will do tomorrow.

Quote from: 2112 on April 12, 2015, 02:18:01 PM

Quote from: Muhammed Zakir on April 12, 2015, 01:55:36 PM

Sorry for lack of details. What all details are necessary? As I have mentioned earlier, I have tried with another ISP.

The details are necessary for anyone to really help you. The only people who will not ask for details are the scammers who will need the minimum information required to plant a trojan/exploit on your computer, especially if you seem to have just one machine loaded with coins.

Okay. Thanks for telling! But is it easy to plant malware with "minimum" information? What is considered as "minimum" information?

Quote from: 2112 on April 12, 2015, 02:18:01 PM

The first detail I always ask: do you know what you doing? Like the basics of networking: local vs. globally-routable IP?

As I have mentioned earlier, my knowledge in this is very limited. I looked more about locally and globally-routable IP. I think I understood basics/theories.

Quote from: 2112 on April 12, 2015, 02:18:01 PM

My experience shows that it is the best to assume that somebody having weird problems simply has very minimal understanding of networking and pretends to be knowledgeable for reasons related to the social status.

I understand what you are telling. I have done it myself one or two times.

Quote from: 2112 on April 12, 2015, 02:18:01 PM

On another forum I've watched someone posting about "trying different ISPs," with no success. Finally somebody posted who knows the particular city. It turned out that the "different ISPs" were just a different resellers for the same ISP, just selling in different languages and with different marketing/payment plans.

Nope. I used different ISP not modified same ISP. Anyway, thanks!

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 01:55:36 PM

Sorry for lack of details. What all details are necessary? As I have mentioned earlier, I have tried with another ISP.

The details are necessary for anyone to really help you. The only people who will not ask for details are the scammers who will need the minimum information required to plant a trojan/exploit on your computer, especially if you seem to have just one machine loaded with coins.

The first detail I always ask: do you know what you doing? Like the basics of networking: local vs. globally-routable IP? My experience shows that it is the best to assume that somebody having weird problems simply has very minimal understanding of networking and pretends to be knowledgeable for reasons related to the social status.

On another forum I've watched someone posting about "trying different ISPs," with no success. Finally somebody posted who knows the particular city. It turned out that the "different ISPs" were just a different resellers for the same ISP, just selling in different languages and with different marketing/payment plans.

redsn0w

legendary

Activity: 1778

Merit: 1043

#Free market

Quote from: Muhammed Zakir on April 12, 2015, 01:55:36 PM

...
So is it because of some problem in India? It will be helpful if any Indians other than who posted here can tell whether they are experiencing any problems. Thank you!

Can you post a traceroute when you are connected through VPN? I would like to see the difference between your first trace and the second. Thanks.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: 2112 on April 12, 2015, 12:59:26 PM

How can anyone help you without you posting the very detailed information about your setup? You'll probably also need at least temporary access to another computer and/or another ISP.

Sorry for lack of details. What all details are necessary? As I have mentioned earlier, I have tried with another ISP.

Quote from: chronicsky on April 12, 2015, 01:31:17 PM

Though it's not much frequent but i have experienced it many times over some months. And yeah it's specific to this forum only, when i tracert'ed it , it went Timed out for some seconds and then back on , though my Internet connection is working fine ATM . But it never turned out to be much issue , after max of 1-5 refresh's it's back on track . But sometimes i have to clear cache to get it running Undecided

So is it because of some problem in India? It will be helpful if any Indians other than who posted here can tell whether they are experiencing any problems. Thank you!

chronicsky

legendary

Activity: 2828

Merit: 1222

Just looking for peace

Though it's not much frequent but i have experienced it many times over some months. And yeah it's specific to this forum only, when i tracert'ed it , it went Timed out for some seconds and then back on , though my Internet connection is working fine ATM . But it never turned out to be much issue , after max of 1-5 refresh's it's back on track . But sometimes i have to clear cache to get it running Undecided

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 12:26:14 PM

Thank you for telling! I am using Linux Lubuntu. Is there a way to fix this if this is misconfiguration?

How can anyone help you without you posting the very detailed information about your setup? You'll probably also need at least temporary access to another computer and/or another ISP.

shorena

copper member

Activity: 1498

Merit: 1562

No I dont escrow anymore.

Quote from: Muhammed Zakir on April 12, 2015, 12:26:14 PM

Quote from: 2112 on April 12, 2015, 11:46:56 AM

This trace reads like misconfigured equipment. I see about 6 seconds in the 4th hop then the final is reached in around 1 second. My best guess is this is a misconfigured firewall doing reverse DNS on every packet and letting them through only after RDNS failure. Notice that the packets without explicit reverse DNS address take several seconds whereas the packets with a set reverse address only take 1 or 2 seconds. This used to be a known bug with Microsoft Proxy/ISA/Forefront Server.

There's no physical reason for this type of ISP latency on Earth, it would only make sense for some space communication.

Thank you for telling! I am using Linux Lubuntu. Is there a way to fix this if this is misconfiguration?

If its on the 4th hop or later its a problem of/with your ISP.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: 2112 on April 12, 2015, 11:46:56 AM

This trace reads like misconfigured equipment. I see about 6 seconds in the 4th hop then the final is reached in around 1 second. My best guess is this is a misconfigured firewall doing reverse DNS on every packet and letting them through only after RDNS failure. Notice that the packets without explicit reverse DNS address take several seconds whereas the packets with a set reverse address only take 1 or 2 seconds. This used to be a known bug with Microsoft Proxy/ISA/Forefront Server.

There's no physical reason for this type of ISP latency on Earth, it would only make sense for some space communication.

Thank you for telling! I am using Linux Lubuntu. Is there a way to fix this if this is misconfiguration?

2112

legendary

Activity: 2128

Merit: 1074

Quote from: Muhammed Zakir on April 12, 2015, 10:38:31 AM

Without VPN:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
=snip=
4 223.196.1.77 (223.196.1.77) 5218.928 ms 6140.400 ms 7061.777 ms
5 223.196.7.161 (223.196.7.161) 7983.013 ms 8803.091 ms 8803.280 ms
6 223.196.6.253 (223.196.6.253) 8803.259 ms 8793.376 ms 8793.183 ms
7 62.208.252.225 (62.208.252.225) 8792.849 ms 7681.464 ms 6964.936 ms
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 10.10.48.5 (10.10.48.5) 2463.142 ms 2974.825 ms 5016.395 ms
14 ddos-guard.net (186.2.165.2) 1431.839 ms 1841.873 ms 1842.262 ms
15 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 1842.012 ms 931.474 ms 1852.168 ms

This trace reads like misconfigured equipment. I see about 6 seconds in the 4th hop then the final is reached in around 1 second. My best guess is this is a misconfigured firewall doing reverse DNS on every packet and letting them through only after RDNS failure. Notice that the packets without explicit reverse DNS address take several seconds whereas the packets with a set reverse address only take 1 or 2 seconds. This used to be a known bug with Microsoft Proxy/ISA/Forefront Server.

There's no physical reason for this type of ISP latency on Earth, it would only make sense for some space communication.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 12, 2015, 11:02:37 AM

Very hard to know if you don't know why you are getting such poor times.

Okay. Most of the times, it only happens when I connect to this forum. That's why, I was curious to know the reason.

Quote from: CIYAM on April 12, 2015, 11:02:37 AM

I live in China (sorry - guess you didn't realise that) so I am all too familiar with extremely restricted and slow internet.

No problem. Restricted and slow internet are seen widely in villages in India and I assume it is same in villages in other parts of the world^[1] but mine isn't slow always, I get up to 300 kbps^[2], however, restrictions are high.

[1] However, there are villages without enough electricity and technologies where we can not see internet and even if there is, we can only see in certain places.
[2] It is possible 300 kbps is fast for me as I haven't experienced/used a faster connection.

I will keep this thread open.

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Quote from: Muhammed Zakir on April 12, 2015, 10:58:45 AM

I understand but why do it last for hours? Even though if I get some timeouts, it shouldn't last for hours, right?

Very hard to know if you don't know why you are getting such poor times.

Quote from: Muhammed Zakir on April 12, 2015, 10:58:45 AM

What do you mean by "you'd feel right at home in China"? Does it mean something else than what it looks? I live in India, btw.

I live in China (sorry - guess you didn't realise that) so I am all too familiar with extremely restricted and slow internet.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 12, 2015, 10:43:04 AM

Those times are very slow (you'd feel right at home in China) so I am not surprised if you are getting timeouts.

I understand but why do it last for hours? Even though if I get some timeouts, it shouldn't last for hours, right?

What do you mean by "you'd feel right at home in China"? Does it mean something else than what it looks? I live in India, btw.

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Those times are very slow (you'd feel right at home in China) so I am not surprised if you are getting timeouts.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Without VPN:

Code:

traceroute to bitcointalk.org (186.2.165.183), 30 hops max, 60 byte packets
=snip=
4 223.196.1.77 (223.196.1.77) 5218.928 ms 6140.400 ms 7061.777 ms
5 223.196.7.161 (223.196.7.161) 7983.013 ms 8803.091 ms 8803.280 ms
6 223.196.6.253 (223.196.6.253) 8803.259 ms 8793.376 ms 8793.183 ms
7 62.208.252.225 (62.208.252.225) 8792.849 ms 7681.464 ms 6964.936 ms
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 10.10.48.5 (10.10.48.5) 2463.142 ms 2974.825 ms 5016.395 ms
14 ddos-guard.net (186.2.165.2) 1431.839 ms 1841.873 ms 1842.262 ms
15 node-186-2-165-183.reverse.x4b.me (186.2.165.183) 1842.012 ms 931.474 ms 1852.168 ms

redsn0w

legendary

Activity: 1778

Merit: 1043

#Free market

Quote from: Muhammed Zakir on April 12, 2015, 12:06:19 AM

Now, I can connect without VPN. I still don't understand what was the reason, however, some of them told possibilities. Anyway, thank you!

Can you post (I'm curious) your traceroute (hide your personal ip)? This is my :

Code:

Traccia instradamento verso bitcointalk.org [186.2.165.183]
su un massimo di 30 punti di passaggio:

1 10 ms 2 ms 2 ms www.huaweimobilewifi.com [192.168.8.1]
2 * * * Richiesta scaduta.
3 152 ms 112 ms 67 ms 151.6.52.194
4 100 ms 60 ms 52 ms 151.6.52.212
5 56 ms 50 ms 55 ms 151.6.5.96
6 102 ms 134 ms 99 ms 151.6.6.209
7 110 ms 105 ms 69 ms 151.6.92.151
8 102 ms 92 ms 110 ms ANantes-657-1-244-217.w2-0.abo.wanadoo.fr [2.0.179.217]
9 100 ms 53 ms 57 ms ANantes-657-1-244-218.w2-0.abo.wanadoo.fr [2.0.179.218]
10 99 ms 104 ms 98 ms 172.31.0.5
11 98 ms 90 ms 106 ms 151.5.139.69
12 118 ms 58 ms 70 ms 151.6.92.194
13 58 ms 58 ms 68 ms 151.6.92.154
14 61 ms 58 ms 58 ms 151.6.7.214
15 115 ms 108 ms 64 ms 151.6.0.70
16 * * * Richiesta scaduta.
17 * * * Richiesta scaduta.
18 118 ms 81 ms 85 ms 10.10.68.11
19 * * * Richiesta scaduta.
20 131 ms 118 ms 133 ms 10.10.48.5
21 171 ms 126 ms 139 ms ddos-guard.net [186.2.165.2]
22 88 ms 83 ms 136 ms node-186-2-165-183.reverse.x4b.me [186.2.165.183]

Traccia completata.

@theymos, what is https://186.2.165.2:8006/#v1:0:18:4:::::: (ddos-guard.net) is it a new ddos service "installed" here in the forum (after the ultimate ddos attack)? I don't remember to have seen it in the past month (or maybe I didn't noticed it).

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Now, I can connect without VPN. I still don't understand what was the reason, however, some of them told possibilities. Anyway, thank you!

theymos

administrator

Activity: 5222

Merit: 13032

When bitcointalk.org isn't working, run traceroute bitcointalk.org (Linux) or tracert bitcointalk.org (Windows) using the not-working connection. Post the result here. If you don't want your IP address to be public, completely remove any lines containing your IP address.

GregH37

legendary

Activity: 1302

Merit: 1037

Quote from: irfan_pak10 on April 11, 2015, 01:43:43 PM

Im Also Getting The Same Messages After some Intervals. I cleaned my Cockies and Every thing I dont Know What Is this

Yeah Im also Getting the Same Problem what Should I Do ?

Quote from: Welsh on April 11, 2015, 08:18:16 AM

What error is it reporting? Does it just timeout? Seems like this is a problem on your end. So checking your computer for the things below might be a good idea. There was a recent IP address change, so it might be the protection that theymos is using. They might be blocking your particular ISP or country.

There's a few things to check:

- Clear cookies & cache.
- Are you using HTTP Everywhere? Sometimes, this can mess up and case issues with certain sites, I don't think this is the case for this though.
- Check "hosts" file and alter if needed.
- Flushing the DNS
- Check if your ISP is blocking it

I did This But Getting the same Problem

irfan_pak10

legendary

Activity: 3234

Merit: 1654

Enterapp Pre-Sale Live - bit.ly/3UrMCWI

Im Also Getting The Same Messages After some Intervals. I cleaned my Cockies and Every thing I dont Know What Is this

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Quote from: Muhammed Zakir on April 11, 2015, 01:26:26 PM

The speed is same. Doesn't look a bit faster or slower.

You have checked with pings to be sure about that (as even up to 100 milliseconds might not be noticed if you are just judging by eye)?

Also - I'm not 100% certain but I think that VPNs that use UDP actually tend to run faster than those using TCP (but less reliably of course) so if your VPN doesn't seem slower than going direct then it is perhaps more likely that it is using UDP.

If that is the case it might simply be that your VPNs software "emulation" of TCP via UDP works more reliably than *actual TCP* (so the issue would in that case just be due to the 3G poor quality connection losing packets).

The other possibility is that your country is screwing with your internet (like the Great Chinese Firewall does) which would be the simplest explanation for VPN working more reliably than a direct connection. If that is what your problem is then you really have little choice except to use the VPN or a tunnel.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 11, 2015, 12:08:13 PM

I guess it could indicate an issue with the 3G device's connectivity (maybe it is just losing a lot of packets due to poor signal).

This probably is.

Quote from: CIYAM on April 11, 2015, 12:08:13 PM

Your VPN software might be using UDP rather than TCP which perhaps could explain why it appears to work better via the VPN (but quite a bit slower I would think if this was the case).

The speed is same. Doesn't look a bit faster or slower.

Thank you all for taking the time to reply! I really appreciate it.

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Quote from: Muhammed Zakir on April 11, 2015, 11:56:12 AM

Quote from: CIYAM on April 11, 2015, 11:11:51 AM

Hmm... both were 3G or one 3G and one ADSL (or other)?

Yes but different ISPs. Could that be the problem?

I guess it could indicate an issue with the 3G device's connectivity (maybe it is just losing a lot of packets due to poor signal).

Your VPN software might be using UDP rather than TCP which perhaps could explain why it appears to work better via the VPN (but quite a bit slower I would think if this was the case).

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 11, 2015, 11:11:51 AM

Quote from: Muhammed Zakir on April 11, 2015, 10:52:18 AM

Nope. I tried with different ISP which was much faster than this and I get same problem.

Hmm... both were 3G or one 3G and one ADSL (or other)?

Yes but different ISPs. Could that be the problem?

Quote from: Quickseller on April 11, 2015, 11:24:18 AM

Quote from: xandry on April 11, 2015, 09:32:17 AM

I think it would be nice if you show us or you compared just some network diagnostic results. I mean ping, traceroute by ip and by name with VPN connection and without VPN connection. Wink

It is normal procedure in such cases.

edited: fixed errors

You should post a traceroute both with your VPN and your ISP. This will most likely yield much more useful information and will give much more conclusive results as to if it is the anti-DDoS service or an issue with your VPN

It is an expected result to have timeout errors when attempting to ping the forum's IP address when you are unable to access it

Okay! I will post traceroute tomorrow. ATM I can not do it.

Quickseller

copper member

Activity: 2996

Merit: 2374

Quote from: xandry on April 11, 2015, 09:32:17 AM

I think it would be nice if you show us or you compared just some network diagnostic results. I mean ping, traceroute by ip and by name with VPN connection and without VPN connection. Wink

It is normal procedure in such cases.

edited: fixed errors

You should post a traceroute both with your VPN and your ISP. This will most likely yield much more useful information and will give much more conclusive results as to if it is the anti-DDoS service or an issue with your VPN

It is an expected result to have timeout errors when attempting to ping the forum's IP address when you are unable to access it

edit:

I don't think the anti-DDoS service likes people to tracert the forum:
No VPN

Code:

Traceroute has started…

traceroute to bitcointalk.org (186.2.165.183), 64 hops max, 72 byte packets
-snip-
 4  12.83.102.141 (12.83.102.141)  35.372 ms  50.019 ms  32.040 ms
 5  12.122.154.162 (12.122.154.162)  42.939 ms  37.711 ms  36.510 ms
 6  cr2.attga.ip.att.net (12.122.30.82)  39.248 ms  62.900 ms  35.360 ms
 7  12.122.117.121 (12.122.117.121)  35.387 ms  41.532 ms  39.527 ms
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  ddos-guard.net (186.2.165.2)  127.142 ms  124.530 ms  131.947 ms
15  node-186-2-165-183.reverse.x4b.me (186.2.165.183)  128.055 ms  135.663 ms  133.614 ms

Code:

Traceroute has started…

traceroute to 186.2.165.183 (186.2.165.183), 64 hops max, 72 byte packets
 -snip-
 4  12.83.102.141 (12.83.102.141)  34.494 ms  57.647 ms  40.879 ms
 5  12.122.154.162 (12.122.154.162)  35.817 ms  37.463 ms  53.991 ms
 6  cr2.attga.ip.att.net (12.122.30.82)  35.148 ms  39.349 ms  35.061 ms
 7  12.122.117.121 (12.122.117.121)  33.530 ms *  36.226 ms
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  ddos-guard.net (186.2.165.2)  180.387 ms  133.011 ms  150.389 ms
15  node-186-2-165-183.reverse.x4b.me (186.2.165.183)  124.622 ms  144.493 ms  180.666 ms

Behind PIA - east cost gateway:

Code:

Traceroute has started…

traceroute to bitcointalk.org (186.2.165.183), 64 hops max, 72 byte packets
 1  * 10.168.1.1 (10.168.1.1)  54.869 ms  47.485 ms
 2  108.61.68.129 (108.61.68.129)  60.919 ms  48.574 ms  51.532 ms
 3  108.61.244.121 (108.61.244.121)  71.301 ms  56.625 ms  56.273 ms
 4  ae-33.r05.nycmny01.us.bb.gin.ntt.net (128.241.2.201)  55.582 ms *  55.975 ms
 5  ae-3.r06.nycmny01.us.bb.gin.ntt.net (129.250.4.205)  138.774 ms  65.133 ms  73.385 ms
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  ddos-guard.net (186.2.165.2)  133.579 ms  127.574 ms  142.507 ms
13  node-186-2-165-183.reverse.x4b.me (186.2.165.183)  134.889 ms  154.506 ms  129.043 ms

Behind Australia Melbourne gateway:

Code:

Traceroute has started…

traceroute to bitcointalk.org (186.2.165.183), 64 hops max, 72 byte packets
 1  10.186.1.1 (10.186.1.1)  390.808 ms *  388.547 ms
 2  168.1.75.3-static.reverse.softlayer.com (168.1.75.3)  398.475 ms  390.183 ms  416.742 ms
 3  ae12.dar02.mel01.networklayer.com (168.1.118.136)  392.790 ms  405.587 ms  405.534 ms
 4  ae9.bbr02.nd01.mel02.networklayer.com (50.97.19.78)  393.577 ms  403.574 ms *
 5  * ae0.bbr02.eq01.syd02.networklayer.com (50.97.19.64)  467.495 ms  408.484 ms
 6  * ae7.bbr01.eq01.syd02.networklayer.com (50.97.19.60)  406.300 ms  410.425 ms
 7  ae1.bbr02.eq01.tok01.networklayer.com (50.97.19.67)  530.237 ms * *
 8  ae0.bbr01.pn01.hkg01.networklayer.com (50.97.18.167)  572.426 ms  765.608 ms  618.066 ms
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  ddos-guard.net (186.2.165.2)  740.038 ms  919.166 ms  827.251 ms
16  node-186-2-165-183.reverse.x4b.me (186.2.165.183)  761.813 ms  752.532 ms  745.658 ms

From UK London gateway:

Code:

Traceroute has started…

traceroute to bitcointalk.org (186.2.165.183), 64 hops max, 72 byte packets
 1  192.168.1.254 (192.168.1.254)  11.116 ms  30.467 ms  1.908 ms
 2  99-114-148-3.lightspeed.chrlnc.sbcglobal.net (99.114.148.3)  33.108 ms  51.563 ms  30.862 ms
 3  * 99.133.205.76 (99.133.205.76)  24.339 ms *
 4  12.83.102.141 (12.83.102.141)  33.268 ms  27.656 ms  26.188 ms
 5  12.122.154.162 (12.122.154.162)  36.318 ms  32.487 ms  67.926 ms
 6  cr2.attga.ip.att.net (12.122.30.82)  63.113 ms  36.141 ms  34.724 ms
 7  12.122.117.121 (12.122.117.121)  47.777 ms  42.252 ms  35.117 ms
 8  * * *
 9  * ae-2-6.ear1.amsterdam1.level3.net (4.69.153.190)  144.831 ms *
10  * * *
11  *traceroute: sendto: No route to host
traceroute: wrote bitcointalk.org 72 chars, ret=-1
 *traceroute: sendto: No route to host
traceroute: wrote bitcointalk.org 72 chars, ret=-1
 *
traceroute: sendto: No route to host
12 traceroute: wrote bitcointalk.org 72 chars, ret=-1
 *traceroute: sendto: No route to host

Second try from UK London gateway

Code:

Traceroute has started…

traceroute to bitcointalk.org (186.2.165.183), 64 hops max, 72 byte packets
 1  10.164.1.1 (10.164.1.1)  144.508 ms *  145.007 ms
 2  2e1c3502.lon.100tb.com (46.28.53.2)  143.389 ms  139.378 ms  153.804 ms
 3  * 83.170.70.225 (83.170.70.225)  147.705 ms  156.591 ms
 4  linx-224.retn.net (195.66.224.193)  143.552 ms  147.772 ms  139.202 ms
 5  et510-1.rt.m9.msk.ru.retn.net (87.245.232.2)  195.842 ms  189.148 ms  188.549 ms
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * ddos-guard.net (186.2.165.2)  209.088 ms
12  * node-186-2-165-183.reverse.x4b.me (186.2.165.183)  211.918 ms *

From UK London gateway to ghash.io (recent victim of strong DDoS attack)

Code:

Traceroute has started…

traceroute: Warning: ghash.io has multiple addresses; using 198.41.187.247
traceroute to ghash.io (198.41.187.247), 64 hops max, 72 byte packets
 1  * 10.164.1.1 (10.164.1.1)  311.789 ms  377.274 ms
 2  2e1c3503.lon.100tb.com (46.28.53.3)  133.720 ms  320.980 ms *
 3  83.170.70.237 (83.170.70.237)  147.431 ms  155.485 ms  154.361 ms
 4  linx-juniper.as13335.net (195.66.225.179)  149.369 ms  178.439 ms  199.921 ms
 5  198.41.187.247 (198.41.187.247)  151.358 ms  163.211 ms  155.210 ms

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Quote from: Muhammed Zakir on April 11, 2015, 10:52:18 AM

Nope. I tried with different ISP which was much faster than this and I get same problem.

Hmm... both were 3G or one 3G and one ADSL (or other)?

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 11, 2015, 10:28:07 AM

Quote from: Muhammed Zakir on April 11, 2015, 10:22:09 AM

He is ~1+ km away from my home. Does this still apply?

Maybe (if he is using the same ISP) - if you have more than one internet provider (by using say a 3G internet USB device) then you could try via the different ISP (without the VPN).

If it works perfectly via 3G but not via your normal ISP then it is far more likely to be due to IP blocking.

Nope. I tried with different ISP which was much faster than this and I get same problem.

At the time of posting I used 3G and I had to access this forum via VPN.

Quote from: theymos on April 11, 2015, 10:44:10 AM

Quote from: CIYAM on April 11, 2015, 10:28:07 AM

If it works perfectly via 3G but not via your normal ISP then it is far more likely to be due to IP blocking.

It might also indicate that his normal ISP is having temporary problems connecting to the forum's ISP.

I guess these problems started long after we switched to the anti-DDoS service, and I haven't received any other complaints about this, so I feel like it's somewhat unlikely to be the anti-DDoS service.

As I have mentioned above, problem still occurs with different ISP.

Quote from: theymos on April 11, 2015, 10:44:10 AM

Quote from: CIYAM on April 11, 2015, 10:11:31 AM

@theymos - I've noticed when pinging since the IP change there is an "non-specific reverse DNS" entry:

Fixed, thanks. (The change will need time to propagate.)

Thank you!

theymos

administrator

Activity: 5222

Merit: 13032

Quote from: CIYAM on April 11, 2015, 10:28:07 AM

If it works perfectly via 3G but not via your normal ISP then it is far more likely to be due to IP blocking.

It might also indicate that his normal ISP is having temporary problems connecting to the forum's ISP.

I guess these problems started long after we switched to the anti-DDoS service, and I haven't received any other complaints about this, so I feel like it's somewhat unlikely to be the anti-DDoS service.

Quote from: CIYAM on April 11, 2015, 10:11:31 AM

@theymos - I've noticed when pinging since the IP change there is an "non-specific reverse DNS" entry:

Fixed, thanks. (The change will need time to propagate.)

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

Quote from: Muhammed Zakir on April 11, 2015, 10:22:09 AM

He is ~1+ km away from my home. Does this still apply?

Maybe (if he is using the same ISP) - if you have more than one internet provider (by using say a 3G internet USB device) then you could try via the different ISP (without the VPN).

If it works perfectly via 3G but not via your normal ISP then it is far more likely to be due to IP blocking.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: CIYAM on April 11, 2015, 10:07:22 AM

The pings indicate it simply is unable to access the server which perhaps is due to timeouts if your internet connection is slow (although I guess DDoS protection might block pings).

Also note that although you might not be doing anything suspicious if another user with a very close IP address is then DDoS blocking could affect you also.

Okay! Thank you for telling. But why it is only happening when I access this forum?

Oh! I didn't know that. IP address can only be close if he is near me or manually change to an IP address close to me, right? I have met many people and AFAIK only one or two person is near to me who at least know what Bitcoin is. He has registered here but I guess he isn't posting here. He is ~1+ km away from my home. Does this still apply?

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

@theymos - I've noticed when pinging since the IP change there is a "non-specific reverse DNS" entry:

Code:

PING bitcointalk.org (186.2.165.183) 56(84) bytes of data.
64 bytes from node-186-2-165-183.reverse.x4b.me (186.2.165.183): icmp_seq=1 ttl=54 time=10.2 ms
64 bytes from node-186-2-165-183.reverse.x4b.me (186.2.165.183): icmp_seq=2 ttl=54 time=9.72 ms
64 bytes from node-186-2-165-183.reverse.x4b.me (186.2.165.183): icmp_seq=3 ttl=54 time=10.0 ms
64 bytes from node-186-2-165-183.reverse.x4b.me (186.2.165.183): icmp_seq=4 ttl=54 time=10.2 ms

This might cause the forum to have troubles emailing users (unrelated to the OP but just thought I'd mention this).

CIYAM

legendary

Activity: 1890

Merit: 1089

Ian Knowles - CIYAM Lead Developer

The pings indicate it simply is unable to access the server which perhaps is due to timeouts if your internet connection is slow (although I guess DDoS protection might block pings).

Also note that although you might not be doing anything suspicious if another user with a very close IP address is up to no good then DDoS blocking could affect you also.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: theymos on April 11, 2015, 09:27:36 AM

Maybe you're doing something that the anti-DDoS service is blocking. I haven't had any other reports of this, so you're probably doing something quite unusual. It might be something else, too.

Thank you for replying! I am really a noob to these things. So my questions may utterly wrong or stupid. Sorry if it is.

I am only browsing forum using a very slow internet. So here are the questions:

If I use slow internet connections, will the request be send frequently than it should be?
If above is true, how much time does anti-DDoS service blocks me?
If above is false, is there any other reason for anti-DDoS service to block me?

Quote from: xandry on April 11, 2015, 09:32:17 AM

I think it would be nice if you show us or you compared just some network diagnostic results. I mean ping, traceroute by ip and by name with VPN connection and without VPN connection. Wink

It is normal procedure in such cases.

edited: fixed errors

Thank you for replying! I got the error when I used mobile and I get this when I use PC too. ATM I am using PC and I can't replicate this issue. When it happens again, I will try to post these details here. My VPN is either connecting via Canada or US. I don't remember which country it showed when I use.

Edit: I suddenly couldn't post this and I couldn't open anything. So I pinged and here is the result:

Code:

Pinging bitcointalk.org [186.2.165.183] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 186.2.165.183:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

After some seconds, I pinged again:

Code:

Pinging bitcointalk.org [186.2.165.183] with 32 bytes of data:
Reply from 186.2.165.183: bytes=32 time=442ms TTL=49
Reply from 186.2.165.183: bytes=32 time=644ms TTL=49
Reply from 186.2.165.183: bytes=32 time=563ms TTL=49
Reply from 186.2.165.183: bytes=32 time=743ms TTL=49

Ping statistics for 186.2.165.183:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 442ms, Maximum = 743ms, Average = 598ms

xandry

staff

Activity: 3472

Merit: 4111

Crypto Swap Exchange

I think it would be nice if you show us or you compared just some network diagnostic results. I mean ping, traceroute by ip and by name with VPN connection and without VPN connection. Wink

It is normal procedure in such cases.

edited: fixed errors

theymos

administrator

Activity: 5222

Merit: 13032

Maybe you're doing something that the anti-DDoS service is blocking. I haven't had any other reports of this, so you're probably doing something quite unusual. It might be something else, too.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: Welsh on April 11, 2015, 08:18:16 AM

What error is it reporting? Does it just timeout? Seems like this is a problem on your end. So checking your computer for the things below might be a good idea. There was a recent IP address change, so it might be the protection that theymos is using. They might be blocking your particular ISP or country.

There's a few things to check:

- Clear cookies & cache.
- Are you using HTTP Everywhere? Sometimes, this can mess up and case issues with certain sites, I don't think this is the case for this though.
- Check "hosts" file and alter if needed.
- Flushing the DNS
- Check if your ISP is blocking it

Thank you for replying! Browser is saying I am not connected to internet. Yeah, I noticed the thread about IP address change. I will post the result after doing this. However, I may not flush DNS. Is it necessary?

P.S. I don't think ISP is blocking. This happens only sometime. If it happen, I won't be able to access the forum for next some minutes or even few hours unless I use VPN.

Welsh

staff

Activity: 3332

Merit: 4117

What error is it reporting? Does it just timeout? Seems like this is a problem on your end. So checking your computer for the things below might be a good idea. There was a recent IP address change, so it might be the protection that theymos is using. They might be blocking your particular ISP or country.

There's a few things to check:

- Clear cookies & cache.
- Are you using HTTP Everywhere? Sometimes, this can mess up and case issues with certain sites, I don't think this is the case for this though.
- Check "hosts" file and alter if needed.
- Flushing the DNS
- Check if your ISP is blocking it

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Hello,

I was browsing forum and everything was normal but a few minutes ago, forum wasn't loading. I tried many times reloading, it didn't come. When I looked isitdownrightnow, it stated Bitcointalk is up. So I used VPN and then I tried, forum loaded. This weird issue occur some times to me. Does anybody know a reason or a workaround for this issue? Thank you!

Topic: An exact/estimate reason why Bitcointalk doesn't load without VPN for me? (Read 2643 times)