Go Back   vb.org Archive > vBulletin 4 Discussion > vB4 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 02-07-2019, 02:08 PM
Scalemotorcars's Avatar
Scalemotorcars Scalemotorcars is offline
 
Join Date: Mar 2006
Location: NC
Posts: 619
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Locked out of my server and nobody knows why.

Ok, so I'll try and condense this. A few days ago I got locked out of my hosting and nobody can figure out why. My site still works fine its just MY IP that can't access any part of the server. I have other programs running on the server and I can't access those either. I also can't access Cpanel, and I can't FTP into the hosting. (this eliminates an htaccess block, besides I haven't messed with those files in years.)

If I VPN I can get to my site and its CP but it's a huge pain the *** This is what's been checked.

As mentioned above I can get my site & CP using an online VPN (I don't use a VPN normally) I didn't accidentally ban my IP and I even completely turned off IP banning, cleared the cache and no luck still locked out.

I've tried three browsers, all cleared cache, and no luck.

I rebooted my PC three times because why not. No luck...

I made sure all adblocking was disabled and again cleared cache and nothing.

I have a DNS trap and turned it off and nothing. I even removed it from my network and still nothing.

I've fully reset my modem/router and spent 2 hours on the phone with my internet providers top tech resetting everything and still no luck.

I've hardwired around the router bypassing any wifi and nothing.

I disabled plugins and nothing. (by the way, all the plugins have been running on the site for years).

I tried to Ping the server from my CMD and failed every time.

The only thing that changed on the site in months is a few CSS tweaks to clean up some of the divs.

Now the main event recently is my site was hit with a DOS attack about a week ago but I blocked all the IP's causing the attack. Again I made sure 100% none of them were from me or my server/hosting. Besides, I used the site for about a week before I couldn't access it so that's not it. And again I completely disabled the IP blocking and I was still locked out.

I also get hit by Registration Spam bots every few minutes almost every day. I was going to make some changed to register.pho but as mentioned I can't get to any of the files or Cp to do it effectively and I didn't make any changes to it before being locked out.

Did I mention that my hosting has gone over all there DNS blocking and reset all passwords to their servers and they can't find the issue either. They are still working on it but Its been 2 days with no updates.

So, in short, My IP and my servers IP refuse to talk to each other. If I go to Starbucks it works fine. If I use my Cellphones data plan it works fine. Its just my physical IP thats locked out.

Does anyone have any idea what else I could check?
Reply With Quote
  #2  
Old 02-07-2019, 02:39 PM
Kane@airrifle's Avatar
Kane@airrifle Kane@airrifle is offline
 
Join Date: Jun 2011
Location: ZA
Posts: 181
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Being locked out of CPanel would indicate a CPhulk or CSF block on your IP.

If you have SSH access you can check the CSF status of the affected IP with
Code:
#  csf -g 127.0.0.1
Replace 127.0.0.1 with the affected IP
Reply With Quote
  #3  
Old 02-07-2019, 03:13 PM
Scalemotorcars's Avatar
Scalemotorcars Scalemotorcars is offline
 
Join Date: Mar 2006
Location: NC
Posts: 619
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I know they checked the CSF for a block on the IP and didn't see anything. They also mentioned checking a higher level block and it didn't show anything either. Not sure what a CPHulk it Ill pass that along to the hosting.

As for SSH, I have no clue how to set that up. I didn't think you could SSH into a server remotely.

--------------- Added [DATE]1549562612[/DATE] at [TIME]1549562612[/TIME] ---------------

I tried to SSH into the server with Putty and it timed out like everything else.
Reply With Quote
  #4  
Old 02-07-2019, 04:34 PM
final kaoss final kaoss is offline
 
Join Date: Apr 2006
Posts: 1,314
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

If you're certain that it's CPHulk, then have a look at this. (You'll have to ask your host to follow those steps or DiY with a vpn)
https://help.crucial.com.au/hc/en-gb...rom-my-server-
Reply With Quote
  #5  
Old 02-07-2019, 06:08 PM
Alan_SP's Avatar
Alan_SP Alan_SP is offline
 
Join Date: Nov 2009
Posts: 1,122
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

To me, it's looking like your IP's blocked on server level.

It can be done in multiple ways, so I can't say how exactly is in your case, but I'd would look on server level, not forum level.

The usual suspect is firewall (on server level, i.e. IPtables).
Reply With Quote
  #6  
Old 02-07-2019, 06:11 PM
Scalemotorcars's Avatar
Scalemotorcars Scalemotorcars is offline
 
Join Date: Mar 2006
Location: NC
Posts: 619
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well, that didn't work. I can't VPN into Cpanel it has some kind of block on it also. All I get is a white page.

I tried several times to SHH and nothing. I tried with Putty and Filezilla. Nothing on either. they just time out.

For now, I'll send the info on CPHulk to the host. Not sure why it would block me since I never failed any of the login attempts. Everything was working fine then all of a sudden blocked.

Any other ideas?

--------------- Added [DATE]1549570413[/DATE] at [TIME]1549570413[/TIME] ---------------

Quote:
Originally Posted by Alan_SP View Post
To me, it's looking like your IP's blocked on server level.

It can be done in multiple ways, so I can't say how exactly is in your case, but I'd would look on server level, not forum level.

The usual suspect is firewall (on server level, i.e. IPtables).
That's what I was thinking also. I've already had the tech at my hosting check the server level IP blocking and he couldn't find anything. He also checked a higher level admin blocking and couldn't find it there either.
Reply With Quote
  #7  
Old 02-07-2019, 07:24 PM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The only FW on a cpanel box by default is cphulk, so if yo udidnt have him whitelist your IP there, then you should, along with CSF if you installed it.

Id have him disable cphulk, csf & the OS's defautl FW just incase it some how got activated as well, as you didnt list what OS it has on it.
Reply With Quote
  #8  
Old 02-09-2019, 12:19 AM
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Location: Michigan
Posts: 2,310
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I had a similar incident. Turns out my ip was blacklisted due to not having a static ip.

Do a tracert, if you are blacklisted, your hops will fail just before your host.
Reply With Quote
  #9  
Old 02-09-2019, 12:24 PM
Scalemotorcars's Avatar
Scalemotorcars Scalemotorcars is offline
 
Join Date: Mar 2006
Location: NC
Posts: 619
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by blind-eddie View Post
I had a similar incident. Turns out my ip was blacklisted due to not having a static ip.

Do a tracert, if you are blacklisted, your hops will fail just before your host.
I did a tracert and that narrowed it down. It looks like one of the nodes before my server has blacklisted my IP. No clue if it has anything to do with it being static or not. Still waiting on the host to whitelist.
Reply With Quote
Благодарность от:
blind-eddie
  #10  
Old 02-11-2019, 07:22 PM
Scalemotorcars's Avatar
Scalemotorcars Scalemotorcars is offline
 
Join Date: Mar 2006
Location: NC
Posts: 619
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

My hosting finally whitelisted my IP for the server blocking it. Turned out it was a node before my server that blacklisted me. Thanks again to everyone for their suggestions.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 07:02 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04929 seconds
  • Memory Usage 2,263KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_code
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (10)post_thanks_box
  • (1)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete