Dismiss Notice
It can take 24-48 hours for the hosting/Teamspeak applications to be reviewed. Opening a thread before 48 hours, asking about the application timeline will result in your account and application being deleted permanently.

Before signing up for an account, please see our Forbidden Countries List (https://www.instafree.com/forbidden_countries.php). If you are on that list, please do not attempt to sign up, as you will not be given a hosting account. Using a proxy to circumvent that list is a violation of our TOS and will result in immediate deletion of your account.

ISSUE: RESOLVED A maintenance today?

Discussion in 'Network and Server Status' started by Fedora, Dec 11, 2015.

  1. Fedora

    Fedora Premium Hosting Client VPS Client

    Messages:
    2,142
    Likes Received:
    2,241
    Hello!

    I received an email about my website, and says that we had a down time for 1 hour.

    It was a maintenance? Or some problems?

    I hope everything is ok now. :)

    Greetings!
     
  2. Find Dank

    Find Dank Hosting Client

    Messages:
    75
    Likes Received:
    15
    I also noticed that my sites were down and not responding. They are on the premium plan as well. Hopefully it is just maintenance and will be back up soon. Bryan is usually very quick with things like this.
     
  3. Hussam Al-Tayeb

    Hussam Al-Tayeb Hosting Client

    Messages:
    480
    Likes Received:
    255
    My website says "Server Monitor" instead of the usual content.
    I am using my own domain name by the way.
    I didn't receive any email.
     
  4. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    Hi guys,

    Sorry for the delay. I was on a plane in the middle of the Gulf of Mexico when this all happened. One site on the server was being very badly DDoSed 100 Gbps+, and was causing things to go very badly.

    The logs aren't really showing much right now, but we had to reroute some sites to try to find out which was being attacked. We still haven't found the exact site, but it will be terminated immediately once we figure that out.
     
  5. Hussam Al-Tayeb

    Hussam Al-Tayeb Hosting Client

    Messages:
    480
    Likes Received:
    255
    My website loads again. Thank you!

    Ouch, wow. That is a big attack!

    What kind of DDoS by the way? Too many concurrent hits?
     
  6. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    It is the 2nd in a matter of days, unfortunately.
     
  7. Fedora

    Fedora Premium Hosting Client VPS Client

    Messages:
    2,142
    Likes Received:
    2,241
    Bryan, you are our superhero. :)

    I hope all is well soon.

    Thank you!
     
    Bryan likes this.
  8. Find Dank

    Find Dank Hosting Client

    Messages:
    75
    Likes Received:
    15
    Yes noticed that the sites are back up. Glad you got everything fixed Bryan.

    Thanks for speedy fix.
     
    Fedora and Bryan like this.
  9. Fedora

    Fedora Premium Hosting Client VPS Client

    Messages:
    2,142
    Likes Received:
    2,241
    Bryan,

    I don't know if problem with my connection or what, but the forum is a little slow for the last days. Sometimes I need reload the site, but I don't have problem with others sites.

    Maybe this can be related with this issue?
     
  10. Fedora

    Fedora Premium Hosting Client VPS Client

    Messages:
    2,142
    Likes Received:
    2,241
    And...

    My site is down again.

    It seems that continue to attack to Instafree.
     
  11. Adam Price

    Adam Price New Member

    Messages:
    7
    Likes Received:
    1
    My site just went down too, :(
     
  12. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    Fedora,

    The forum is actually on a separate server. No problems with it as far as I know. Been fast for me.

    And yes, somebody's site is again being DDoSed, and the IP has been null routed by the datacenter in an effort to stop the attack. Trying desperately to figure out whose site it is causing these issues.
     
  13. Hussam Al-Tayeb

    Hussam Al-Tayeb Hosting Client

    Messages:
    480
    Likes Received:
    255
    Best of luck Bryan. Thank you for the update.
     
    Bryan likes this.
  14. Fedora

    Fedora Premium Hosting Client VPS Client

    Messages:
    2,142
    Likes Received:
    2,241
    Best of luck Bryan!
     
    Bryan likes this.
  15. Sain Cai

    Sain Cai Hosting Client

    Messages:
    25
    Likes Received:
    18
  16. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    Correct. Everything on that IP address is presently down. It is being null routed at the datacenter until the attack subsides, unfortunately.
     
  17. Hussam Al-Tayeb

    Hussam Al-Tayeb Hosting Client

    Messages:
    480
    Likes Received:
    255
    Bryan, are they attacking the IP directly or an address that resolved to that IP?

    Also can they not drop connections coming from the attacking IPs?

    Edit: Ok, it is back up.
     
    Last edited: Dec 12, 2015
  18. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    Everything is back up for now.

    They are attacking the IP directly, but it's probably after getting the IP from their domain. We have tried isolating some domains again to different IPs to try to narrow it down. There are a small amount of ICMP and TCP attacks which we can trace and eliminate (we get those every day).

    This one is more a large UDP attack, which leaves little trace, and does not reach the Apache/Litespeed logs. We can't really drop UDP as a whole due to the DNS, and unfortunately, it's a huge botnet, so the IPs can't be dropped. As soon as they are, there are an equal amount to replace them.
     
  19. Hussam Al-Tayeb

    Hussam Al-Tayeb Hosting Client

    Messages:
    480
    Likes Received:
    255
    That's one of the benefits of using cloudflare. The original IP is hidden as long as you don't use your website to send emails.
     
    Bryan likes this.
  20. Bryan

    Bryan Administrator

    Messages:
    6,701
    Likes Received:
    1,403
    Yep! Unfortunately, only a handful of people use it here.
     

Share This Page