/ Register

Learn about Centmin Mod LEMP Stack today
Register Now

Choopa, reliablesite.net, vultr, ovh DDOS attacks

Discussion in 'Virtual Private Server (VPS) hosting' started by eva2000, Sep 21, 2016.

Tags:
Previous Thread Next Thread
Loading...
Page 1 of 2
  1. Sep 21, 2016 #1
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Looks like past few days web hosts and data centers from Choopa.net, reliablesite, vultr, ovh, digitalocean etc are getting hammered by DDOS attcks !
    https://twitter.com/olesovhcom/status/778019962036314112

    ouch
     
  2. Sep 21, 2016 #2
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Akamai too

    upload_2016-9-21_13-24-12.png
     
  3. Sep 21, 2016 #3
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  4. Sep 21, 2016 #4
    rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    12:22 PM
    Mainline
    10.2
    I am affected by this issue, on my OVH server :/.
    Looks like PH IP was block? :/
     
  5. Sep 22, 2016 #5
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    ouch, OVH Canada or France ? Seems my SoYouStart Canada server is ok so far. My Vultr NJ VPS was going up and down a day or so ago

    upload_2016-9-22_0-1-11.png upload_2016-9-22_0-2-50.png
     
  6. Sep 22, 2016 #6
    rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    12:22 PM
    Mainline
    10.2
    Canada.
    But Maybe problem is specific to my ISP as I can't even access versaweb.
    MTR report to OVH:
    Screenshot from 2016-09-21 19-51-43.png
    Screenshot from 2016-09-21 19-49-27.png
     
  7. Sep 22, 2016 #7
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    I believe one the threads says Fiberhub is also affected by these attacks/outages and Fiberhub is Versaweb company/datacenter.
     
  8. Sep 22, 2016 #8
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  9. Sep 22, 2016 #9
    rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    12:22 PM
    Mainline
    10.2
    OVH support:
     
  10. Sep 22, 2016 #10
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Could be your ISP then, maybe your modem/router at your place ? needs a reboot ? :)
     
  11. Sep 22, 2016 #11
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  12. Sep 22, 2016 #12
    rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    12:22 PM
    Mainline
    10.2
    But it's not just me, it's all user using the same ISP on my country have the same problem yesterday :/.
     
  13. Sep 22, 2016 #13
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    oh dear, change ISPes hehe
     
  14. Sep 22, 2016 #14
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    More OVH tweets with DDOS attack numbers https://twitter.com/olesovhcom/status/778830571677978624 !

    upload_2016-9-22_16-5-34.png

    dam :eek:

    from OVH twitter seems they are upgrading routers and capacity from 10Gbps to 100Gbps routers ASAP https://twitter.com/olesovhcom

    OVH Tasks
    OVH Tasks  

     
  15. Sep 22, 2016 #15
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  16. Sep 23, 2016 #16
    andrewklimek

    andrewklimek New Member

    5
    2
    3
    Jul 17, 2014
    Ratings:
    +2
    Local Time:
    11:22 PM
    Wow! Ironically, I moved all my clients to OVH Canada yesterday and didn't notice anything
     
  17. Sep 23, 2016 #17
    deltahf

    deltahf Premium Member Premium Member

    585
    264
    63
    Jun 8, 2014
    Ratings:
    +486
    Local Time:
    11:22 PM
    My server with ReliableSite has been up and down throughout all of this, but only for about 30 minutes at a time. No extended downtime, fortunately. :eek:

    The email I got from RS said they received an attack of 500Gbps. Whoever is doing this has some serious firepower...
     
  18. Sep 23, 2016 #18
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Yeah don't think the attack was active yesterday. My SoYouStart Canada server was fine throughout too.
    500Gbps yikes, not many DDOS mitigation providers can support that. I believe Reliablesite was attacked at their upstream Choopa provider so don't think Reliablesite could of done anything to prevent it. Similar to how Linode was DDOS attacked in Xmas 2015/New Year 2016 at their upstreams (along with their own network). I suspect this will hurt Reliablesite alot though from their WHT thread some clients had very extended downtime.
     
  19. Sep 23, 2016 #19
    Revenge

    Revenge Active Member

    469
    93
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +354
    Local Time:
    4:22 AM
    1.9.x
    10.1.x
    My SoYouStart server in France and a OVH server in Canada, they both were not affected.
     
  20. Sep 23, 2016 #20
    eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    2:22 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    with OVH upgrading their network, i am thinking of cancelling my SoYouStart server for an OVH one just to get a higher 500Mbps cap heh :)
     
Previous Thread Next Thread
Loading...
Page 1 of 2

.