Connection refused to some domains

[shuffly2]

Hi team,

 

starting from today I am not able to reach some domains from my PHP and JAVA code from my domain in Heliohost.

 

In particular, I am not able to reach https://api.fanburst.com and http://api.soundcloud.com/ (which I call to extract some data) from my code. I always get a "Connection refused" error.

 

Did you change something from your side? 

 

User: shuffly

Domain: shuffly-backend.heliohost.org

 

Thanks for the support

[wolstech]

Nothing intentionally changed on our end that I'm aware of, but Tommy is experiencing an ongoing DOS attack at the moment. It's quite possible their IPs are currently blocked in our firewall due to excessive traffic from them.

 

I'll check when I'm at a PC...Mobile is difficult to do it with.

[Krydos]

176.9.47.150 was blocked for having 92 simultaneous connections, and 52.85.210.15 is not blocked. I unblocked the first one.

[shuffly2]

The problem seems to be not solved, I am experiencing "Connection refused" error to the same hosts.

Is it any action required from the code side?

[Guest icn]

Disregard my message if your code doesn't use php

 

Do you have the http module enabled?

[wolstech]

Our firewall does a pretty good job at suppressing smaller DoS attacks, but a side effect is that software that opens tons of connections to a single IP can end up blocked as a false positive.

 

Since nothing has changed on our end or his end, odds are that it's either: our firewall blocked the connections to APIs he was using, or the service he was using has blocked our server for abuse. (Both have been known to happen in the past).

[Krydos]

Apparently api.soundcloud.com can resolve to four different A records.

 

52.84.234.178 was blocked for having 79 simultaneous connections open.

52.84.234.194 was blocked for having 78 simultaneous connections open.

52.84.234.33 was blocked for having 115 simultaneous connections open.

52.84.234.100 was blocked for having 88 simultaneous connections open.