Solved

Website error

Posted on 2014-02-03
9
191 Views
Last Modified: 2014-04-05
Very occasionally and randomly (last happened yesterday, then the time prior ~3 weeks earlier, and then it was a couple of days before that)

Whilst trying to access the company's website (which is hosted offsite), we will be unable to access the site with just the word "Error" in the top left corner of the page.
-Can telnet to the site's IP address no problem
-Can ping the sites DNS name ok
However this is isolated only to this site, if we connect to the website from a mobile device connected to 3G or connect from another computer offsite the website can be accessed no problem.
This will only remain for about 5 minutes before everything starts working normally again.

This office has a student lab with about 20PCs (which on the last incident none were being used and most were not even turned on) and my concern is that there could be some sort of attempted security breach on the network.

I don't know if this is way off track, but I was wondering what could be the next step to isolate this down further?
0
Comment
Question by:progressit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
9 Comments
 
LVL 7

Expert Comment

by:Milind Koyande
ID: 39829266
Hello Progressit,

Is it possible to provide Website name or Screenshot of the website (with error). Also please let us know the webserver details (if you have).
0
 

Author Comment

by:progressit
ID: 39831243
Website is http://www.ltt.com.au

And all I know about the webserver is that it's cPanel
0
 
LVL 7

Expert Comment

by:Milind Koyande
ID: 39831614
Right now I am unable to see any Error on top left corner of the page but When you see the error next time you can take screenshot and share here.

Also if your website hosted on a dedicated or VPS server (you own it) then you can check the error log using command:
tail -f /usr/local/apache/logs/error_log

Open in new window

Or you can contact your webhosting provider and ask them to check the logs.
0
Webinar June 1st - Attacking Ransomware  

The global cyberattack that corrupted hundreds of thousands of computer systems on May 12th had a face, name, & price tag that we’ve seen all too often in recent years: Ransomware. With the stakes – and costs – of a ransomware attack higher than ever, is your business prepared ?

 
LVL 27

Expert Comment

by:skullnobrains
ID: 39835280
looks like a local proxy at your location is malfunctionning.

please confirm the following :
- are you able to browse other sites from that same location properly while you have the error on this one
- are you able to access that same site at the same time though a 3G or other network
- do you have the same problem with other machines at the same location and at the same time ? or at different random times ?
- can you try a different browser ? do you have the exact same error ? does it display identically ? which browsers did you use ?

http errors can be made accidentally persistent if you have a proxy. likewise dns queries (including errors) are cached at different level including by the browser itself, the os, most likely a dns proxy at your location, possibly an ISP proxy...

other than the above, first thing would be to determine what sends the weird "error" message

my current guess would be cpanel sometimes displays this weird error page instead of your site, and your local proxy caches the answer for 5 minutes. from non-proxied sites, you'd likely just refresh the page and hardly notice the error.
0
 

Author Comment

by:progressit
ID: 39849005
-We CAN browse other sites from that same location whilst the error is occuring
-Yes we CAN access the site at the same time through 3G or other network
-All machines at the same location cannot access the site at the same time whilst the error is occuring
-Different browsers make no difference, still cannot access site for ~5mins, not sure if the 'Error' message occurs on all browsers or just IE, will have to wait for next occurrence to check

We don't use any proxy servers, however we do use DNS forwarders to our ISP instead of root hints.

Our router performs IPS and A/V scanning, however I've previously turned these off and the issue still occurred.
0
 
LVL 27

Expert Comment

by:skullnobrains
ID: 39932478
sorry i did not see your answer before (too much mail in my box)

you still may have a transparent proxy set by your isp but it is unlikely

- check that the DNS gives the proper IP
- i'd assume the "error" stuff means the connection was rejected (if it occurs quickly and not after a timeout)

can you either provide a trace or run a complete telnet test ?
connect to the ip or name
send "GET / HTTP/1.1"
send "HOST name.of.site"
send ""

i'm interested in
- any icmp packet that terminates the connection (something like network-unreachable, for example. if so run 2 traceroutes when it works and when it does not )
- an actual "error" http page transmitted which would indicate a proxy or possibly a server misconfiguration. the exact source would be welcome
0
 

Accepted Solution

by:
progressit earned 0 total points
ID: 39968407
This hasn't happened again for so long so unable to keep troubleshooting. Hopefully will stay good :\
0
 

Author Closing Comment

by:progressit
ID: 39979828
Previous issue hasn't reoccurred and is all working.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Equivalent of WSUS for Solaris, AIX and Cisco devices 11 138
What's API gateway/firewall & how it's used 10 81
IIS Authentication Error 401 16 75
exchange, IIS, Load balancer 11 55
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
What You Need to Know when Searching for a Webhost Provider
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question