Go Back   HostGator Peer Support Forums > HostGator Announcements > Network Status

Notices

Reply
 
Thread Tools
  #1  
Old 07-22-2004, 12:14 AM
GatorJustin's Avatar
GatorJustin GatorJustin is offline
Banned User
 
Join Date: Apr 2004
Location: Atlanta, GA
Posts: 771
Default

The Eclipse server has recently been the target of a 550mb/s DOS attack directed at the DNS port. As of 10 minutes ago, the attack had eroded to 330mb/s.

In an effort to preserve network integrity, Eclipse has been null routed until this attack subsides.

We apologize for any inconvenience this has caused.
Reply With Quote
  #2  
Old 07-22-2004, 01:39 AM
GatorJustin's Avatar
GatorJustin GatorJustin is offline
Banned User
 
Join Date: Apr 2004
Location: Atlanta, GA
Posts: 771
Default

Eclipse is now back online. We apologize for the downtime associated with this DOS attack.
Reply With Quote
  #3  
Old 07-22-2004, 03:12 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

The dos attack has resumed and the server has been null routed. It started at 450mbs+ and is now down to 200mbs. The box should be up shortly.
__________________
Gators love marshmallows.
Reply With Quote
  #4  
Old 07-22-2004, 03:46 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

The attack is now down to 50mb inbound. That's still enough to cripple the server but we are having null route lifted and going to attempt to trace down who they are targeting.
__________________
Gators love marshmallows.
Reply With Quote
  #5  
Old 07-22-2004, 04:16 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

As soon as it came back online it increased to 600mb sec dos.
__________________
Gators love marshmallows.
Reply With Quote
  #6  
Old 07-22-2004, 04:35 PM
scott scott is offline
Hatchling Croc
 
Join Date: Jun 2004
Posts: 10
Default

Any progress?

I assume this is why I can't check Mail?
Reply With Quote
  #7  
Old 07-22-2004, 04:42 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

It's slowly decreasing again. Till it's over we receive about 5 calls a minute reguarding this. So rest assured anything that can be done is being done.
__________________
Gators love marshmallows.
Reply With Quote
  #8  
Old 07-22-2004, 05:21 PM
vtrain's Avatar
vtrain vtrain is offline
Royal Croc
 
Join Date: Jan 2004
Location: Melbourne - Australia
Posts: 704
Default

hope you can track back who is doing this... and why...

please keep us posted...

Vt
__________________
Vtrain is Linux User #237333 on http://counter.li.org/
"Don't meddle in the affairs of sysadmins,
for they are subtle and quick to anger."
Reply With Quote
  #9  
Old 07-22-2004, 05:27 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

The datacenter is blocking ips hitting us at router level. We also have access to the server and are searching for any clues we can find. We have 1 suspect so far.
__________________
Gators love marshmallows.
Reply With Quote
  #10  
Old 07-22-2004, 05:54 PM
kc2equ kc2equ is offline
Hatchling Croc
 
Join Date: Jun 2004
Posts: 3
Default

isnt' there anything you can do to get out sites up and running again?! I have a mailbox full of upset customers!!

LET US KNOW!!
Reply With Quote
  #11  
Old 07-22-2004, 07:06 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

The server will be up any minute. The datacenter said they are now mitigating 300mb's+ of the dos. The incoming attack at this moment is around 12mb. We have terminated the site we believe was the target of the attacks as a step to put this issue behind us.


We believe the recent issues have been resolved and apologize to every one that had downtime as a result of this devastating attack.
__________________
Gators love marshmallows.
Reply With Quote
  #12  
Old 07-22-2004, 07:10 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

and it's back online. We are monitoring it.
__________________
Gators love marshmallows.
Reply With Quote
  #13  
Old 07-22-2004, 07:58 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

eurobeat.org had a bittorrent tracker as well as an irc channel with 500 people on at a time. I spoke with the reseller on the phone and am very confident this site was the cause. Both irc channels and trackers =a website's death wish.
__________________
Gators love marshmallows.
Reply With Quote
  #14  
Old 07-23-2004, 01:28 AM
greenman greenman is offline
Hatchling Croc
 
Join Date: Jun 2004
Location: Taos, New Mexico
Posts: 37
Default

So, was it a DOS attack, or was it a site using high-resource applications?
Reply With Quote
  #15  
Old 07-23-2004, 08:07 AM
probert probert is offline
Hatchling Croc
 
Join Date: Jul 2004
Location: UK
Posts: 4
Default

When oh when is my site going to be back up and running again


http://34d-25-35.com
Reply With Quote
  #16  
Old 07-23-2004, 12:16 PM
probert probert is offline
Hatchling Croc
 
Join Date: Jul 2004
Location: UK
Posts: 4
Default

Quote:
Originally Posted by probert
When oh when is my site going to be back up and running again


http://34d-25-35.com
Now down for an unbelievable 24hours

Whats happening?
E-mail is not being replied to
Reply With Quote
  #17  
Old 07-23-2004, 01:00 PM
Stef's Avatar
Stef Stef is offline
Royal Croc
 
Join Date: May 2004
Posts: 715
Default

Quote:
Now down for an unbelievable 24hours
I can see your site without any problems, believe me
Reply With Quote
  #18  
Old 07-23-2004, 03:11 PM
vtrain's Avatar
vtrain vtrain is offline
Royal Croc
 
Join Date: Jan 2004
Location: Melbourne - Australia
Posts: 704
Default

Is eclipse.websitewelcome.com beeing attacked again? :-(

Vtrain
__________________
Vtrain is Linux User #237333 on http://counter.li.org/
"Don't meddle in the affairs of sysadmins,
for they are subtle and quick to anger."
Reply With Quote
  #19  
Old 07-23-2004, 03:55 PM
greenman greenman is offline
Hatchling Croc
 
Join Date: Jun 2004
Location: Taos, New Mexico
Posts: 37
Default

Unbelievable. I'm running out of patience, here. I've spent 6 months and hundreds of hours working hard to get a decent google pagerank and a top yahoo ranking, only to have them trashed by having the site down for significant portions of the past 3 days.

To make matters worse, emails go unreturned, phone calls unanswered, and forum questions are not responded to.
Reply With Quote
  #20  
Old 07-23-2004, 04:30 PM
Sev Sev is offline
Hatchling Croc
 
Join Date: Jun 2004
Posts: 8
Default

yeah definitly going to be wanted my refund for this month
__________________
www.firetrill-hosting.com
Reply With Quote
  #21  
Old 07-23-2004, 04:36 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

The dos attack came back a little while ago. It is an automated dos attack that seems to be going on around the same time everyday and still seems to be targeting the IP the above site we mentioned that we have deleted. The data center is again working on stopping the attack.

We are in the process of changing everyone's IP. Once its changed, which will be done any minute, all of your sites will come back up. Running your sites on 2 IP's will allow us to switch back and forth as soon as any attack starts. This should be the resolution everyone is looking for.

We know how much the downtime hurts everyone, but we are in the same boat and are losing thousands off this attack.
__________________
Gators love marshmallows.
Reply With Quote
  #22  
Old 07-23-2004, 04:49 PM
GatorBrent's Avatar
GatorBrent GatorBrent is offline
HostGator Staff
 
Join Date: Oct 2002
Location: houston, texas
Posts: 3,006
Default

Everyone that was on the .98 ip is now on 69.93.47.100 and once again up. We will eventually go back to the .98 and the minute the attack comes back if and when it does we do we can switch back to the .100 ip.

This problem has been solved.

If you have any questions please let us know.
__________________
Gators love marshmallows.
Reply With Quote
  #23  
Old 07-23-2004, 05:15 PM
Sev Sev is offline
Hatchling Croc
 
Join Date: Jun 2004
Posts: 8
Default

my site isnt up. thats a problem
__________________
www.firetrill-hosting.com
Reply With Quote
  #24  
Old 07-23-2004, 05:18 PM
probert probert is offline
Hatchling Croc
 
Join Date: Jul 2004
Location: UK
Posts: 4
Default

Quote:
Originally Posted by Stef
Quote:
Now down for an unbelievable 24hours
I can see your site without any problems, believe me

after thirty six hours my site was back on line at 18:49hours today

Yes I know you could see my site at 6 pm it came back on line at 10 minutes to 6 pm after being off line for 36 hours
Reply With Quote
  #25  
Old 07-23-2004, 05:22 PM
probert probert is offline
Hatchling Croc
 
Join Date: Jul 2004
Location: UK
Posts: 4
Default

Quote:
Originally Posted by Stef
Quote:
Now down for an unbelievable 24hours
I can see your site without any problems, believe me

At 6pm yes you could
it had been back up for a whole 11minutes
36 hours off line
Reply With Quote
Reply

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
8/19/04 network issues GatorBrent Network Status 3 08-20-2004 08:16 AM
[Closed] FTP issues Piggers Shared Hosting Support 2 05-17-2004 10:07 PM
mail/mx/dns issues yournamehere Shared Hosting Support 3 03-02-2004 02:48 PM
Mailing list issues Matchstick Shared Hosting Support 3 06-21-2003 03:17 AM

All times are GMT -5. The time now is 03:03 AM.