Something is very wrong with garrysmod.org - Garry's Mod

So everyone is complaining that garrysmod.org is not working, so I decided to take a look into it. [code]ohns-mac-pro:syncwiki john$ ping garrysmod.org PING garrysmod.org (67.19.72.202): 56 data bytes ^C --- garrysmod.org ping statistics --- 45 packets transmitted, 0 packets received, 100% packet loss [/code] Nothing. I do notice something odd, the IP. I recall garry using Amazon EC2 to host the site, so I do a lookup on the IP. [code]johns-mac-pro:syncwiki john$ nslookup 67.19.72.202 Server: 4.2.2.5 Address: 4.2.2.5#53 Non-authoritative answer: 202.72.19.67.in-addr.arpa name = ca.48.1343.static.theplanet.com. [/code] The IP is pointing to a server hosted by The Planet. I could easily conclude that garry moved the site to a dedi, but he uses Softlayer. A trip over to domaintools reveals something big. [url]http://whois.domaintools.com/67.19.72.202[/url] [quote][b]Reverse IP:[/b] 7,892 other sites hosted on this server. [/quote] :ohdear: Garrysmod.org is currently pointing to a shared server. It would seem hostgator, though I'm going to get confirmation from them. In all, this boils down to 2 things. Garry did something really dumb. [b]--OR--[/b] The domain was hijacked. :iiam: [editline]11:32PM[/editline] [b]Update:[/b] not hostgator. [editline]11:50PM[/editline] [b]Update:[/b] Garrysmod.org's nameservers are freedns.afraid.org ns1.afraid.org is 67.19.72.206, this IP is 67.19.72.202 According to WHOIS the network block is 67.19.72.192 - 67.19.72.207

Working for me now, seems they fixed the problem?

The fact that it keeps going down it a little unsettling. And why the move to a dedi hosted by The Planet.

It may seem like they are updating it constantly, they added a new system it seems, it maybe that they're fixing some bugs prehaps?

HOLY CRAP 7892? ok... now thats weird... Who would hack into Gmod.org? ITS ALMOST OVER 9000!!!!!

I don't know what that IP is. I'm thinking someone might be possibly poisoning the DNS? It should have the same IP as garrysmod.com [editline]08:45AM[/editline] garrysmod.org redirects to [url]www.garrysmod.org[/url] by the way - that's why it's reporting that.

Yeah... uhh, The site hasn't gone down for me at all, I'm using Google's DNS servers, so it looks like your DNS servers are being fucked with. [quote]ben@benbrooks:~# ping [url]www.garrysmod.org[/url] PING [url]www.garrysmod.org[/url] (78.109.183.178) 56(84) bytes of data. 64 bytes from 178.facepunch.omnia3.busi.ask4.co.uk (78.109.183.178): icmp_seq=1 ttl=120 time=17.9 ms 64 bytes from 178.facepunch.omnia3.busi.ask4.co.uk (78.109.183.178): icmp_seq=2 ttl=120 time=17.8 ms[/quote] [quote]ben@benbrooks:~# nslookup 78.109.183.178 Server: 208.67.222.222 Address: 208.67.222.222#53 Non-authoritative answer: 178.183.109.78.in-addr.arpa name = 178.facepunch.omnia3.busi.ask4.co.uk. Authoritative answers can be found from:[/quote] Edit: Okay yeah, without the www. then I get the same IP as in the OP.

[quote]lauren@ks2673:~$ nslookup 78.109.183.178 Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: 178.183.109.78.in-addr.arpa name = 178.facepunch.omnia3.busi.ask4.co.uk. Authoritative answers can be found from: 183.109.78.in-addr.arpa nameserver = ns2.ask4internet.com. 183.109.78.in-addr.arpa nameserver = ns1.ask4internet.com. ns1.ask4internet.com internet address = 81.23.48.132 ns2.ask4internet.com internet address = 81.23.52.4[/quote]

[QUOTE=garry;21093552]I don't know what that IP is. I'm thinking someone might be possibly poisoning the DNS? It should have the same IP as garrysmod.com [editline]08:45AM[/editline] garrysmod.org redirects to [url]www.garrysmod.org[/url] by the way - that's why it's reporting that.[/QUOTE] Oh, well that makes sense now. So are you hosting it in your office now it seems?