[sdiy] Microchip website unavailable

Sun Dec 8 08:48:50 CET 2013

Hi Ove,

On Sun, Dec 8, 2013 at 1:38 AM, Ove Ridé <nitro2k01 at gmail.com> wrote:
> On 7 December 2013 23:51, ASSI <Stromeko at nexgo.de> wrote:
>> On Saturday 07 December 2013, 23:34:15, cheater00 . wrote:
>>> Their server is likely just in a computing centre that's getting
>>> DDOS'ed. Nothing unusual about it. They should get some offsite
>>> mirrors and a round-robin DNS.
>>
>> Guess what, they already do that since years (through Akamai), just like any
>> other corporation of their size.  Since it would be close to impossible to
>> DDOS Akamai, the more likely culprit is the private source server(s) or
>> their connection the content delivery network.
>
> [citation needed]
>
> microchip.com resolves to a single IP address without round robin.
> This IP address is registered as owned by Microchip, ie they likely
> host their own servers. From Google's cache, it seems like all static
> resources are hosted on the same domain. I see no indication that they
> are using Akamai or a similar CDN service. Maybe they should be doing
> that, but they currently don't. If you think they do, please provide
> some evidence.
>
> --
> /Ove

You are checking the IP for http://microchip.com. That server works
well, and it redirects to http://www.microchip.com:

$ curl -i microchip.com
HTTP/1.1 302 Redirect
Content-Length: 148
Content-Type: text/html
Location: http://www.microchip.com/
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Sun, 08 Dec 2013 07:41:10 GMT

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a
HREF="http://www.microchip.com/">here</a></body>

>From the above I assume it's a windows server cluster used primarily for email:

$ host microchip.com
microchip.com has address 198.175.253.160
microchip.com mail is handled by 10 mx.microchip.com.
microchip.com mail is handled by 20 mx2.microchip.com.

$ host mx.microchip.com
mx.microchip.com has address 198.175.253.14

They're all handled by Microchip's address block:

CIDR:           198.175.253.0/24

On the other hand, the servers at www.microchip.com do not work. They
are served by akamai static, and that is broken. Maybe Paul's boss
forgot to send out the cheque ;-)

You can check the info with the command "dig www.microchip.com", the
output of which is below. Notice the multiple NS records that point to
akamai - that means they're using akamai DNS servers for the domain
www.microchip.com - look for the "IN    NS" bit in the middle columns.
The domain itself also resolves to akamai IPs. Notice there's a single
"answer section" which gives you the main IP address and then multiple
answers in the "additional section" which supply further IPs. They're
all A-records, search for "IN    A" in the middle column.

Cheers,
D.

; <<>> DiG 9.9.2-P1 <<>> www.microchip.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11180
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 8, ADDITIONAL: 9

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.microchip.com.        IN    A

;; ANSWER SECTION:
www.microchip.com.    235    IN    CNAME    cnwww.microchip.com.edgekey.net.
cnwww.microchip.com.edgekey.net. 21147 IN CNAME
cnwww.microchip.com.edgekey.net.globalredir.akadns.net.
cnwww.microchip.com.edgekey.net.globalredir.akadns.net.    3147 IN
CNAME e1721.a.akamaiedge.net.
e1721.a.akamaiedge.net.    20    IN    A    23.63.119.45

;; AUTHORITY SECTION:
a.akamaiedge.net.    16981    IN    NS    n3a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n4a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n1a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n0a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n2a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n6a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n5a.akamaiedge.net.
a.akamaiedge.net.    16981    IN    NS    n7a.akamaiedge.net.

;; ADDITIONAL SECTION:
n0a.akamaiedge.net.    13587    IN    A    80.157.150.212
n1a.akamaiedge.net.    9432    IN    A    80.157.150.201
n2a.akamaiedge.net.    20197    IN    A    80.157.150.199
n3a.akamaiedge.net.    15313    IN    A    88.221.81.192
n4a.akamaiedge.net.    6824    IN    A    195.95.193.152
n5a.akamaiedge.net.    30963    IN    A    195.95.193.149
n6a.akamaiedge.net.    193    IN    A    195.95.193.155
n7a.akamaiedge.net.    7638    IN    A    195.95.193.153

;; Query time: 32 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Dec  8 08:22:59 2013
;; MSG SIZE  rcvd: 477