Discover Centmin Mod today
Register Now

Choopa, reliablesite.net, vultr, ovh DDOS attacks

Discussion in 'Virtual Private Server (VPS) hosting' started by eva2000, Sep 21, 2016.

  1. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    Looks like past few days web hosts and data centers from Choopa.net, reliablesite, vultr, ovh, digitalocean etc are getting hammered by DDOS attcks !
    https://twitter.com/olesovhcom/status/778019962036314112

    ouch
     
  2. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    Akamai too

    upload_2016-9-21_13-24-12.png
     
  3. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
  4. RoldanLT

    RoldanLT Well-Known Member

    3,901
    949
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,298
    Local Time:
    12:00 AM
    1.11
    10.2
    I am affected by this issue, on my OVH server :/.
    Looks like PH IP was block? :/
     
  5. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    ouch, OVH Canada or France ? Seems my SoYouStart Canada server is ok so far. My Vultr NJ VPS was going up and down a day or so ago

    upload_2016-9-22_0-1-11.png upload_2016-9-22_0-2-50.png
     
  6. RoldanLT

    RoldanLT Well-Known Member

    3,901
    949
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,298
    Local Time:
    12:00 AM
    1.11
    10.2
    Canada.
    But Maybe problem is specific to my ISP as I can't even access versaweb.
    MTR report to OVH:
    Screenshot from 2016-09-21 19-51-43.png
    Screenshot from 2016-09-21 19-49-27.png
     
  7. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    I believe one the threads says Fiberhub is also affected by these attacks/outages and Fiberhub is Versaweb company/datacenter.
     
    • Informative Informative x 1
  8. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
  9. RoldanLT

    RoldanLT Well-Known Member

    3,901
    949
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,298
    Local Time:
    12:00 AM
    1.11
    10.2
    OVH support:
     
  10. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    Could be your ISP then, maybe your modem/router at your place ? needs a reboot ? :)
     
  11. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
  12. RoldanLT

    RoldanLT Well-Known Member

    3,901
    949
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,298
    Local Time:
    12:00 AM
    1.11
    10.2
    But it's not just me, it's all user using the same ISP on my country have the same problem yesterday :/.
     
  13. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    oh dear, change ISPes hehe
     
  14. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    More OVH tweets with DDOS attack numbers https://twitter.com/olesovhcom/status/778830571677978624 !

    upload_2016-9-22_16-5-34.png

    dam :eek:

    from OVH twitter seems they are upgrading routers and capacity from 10Gbps to 100Gbps routers ASAP https://twitter.com/olesovhcom

    OVH Tasks
    OVH Tasks  

     
  15. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    • Informative Informative x 3
  16. andrewklimek

    andrewklimek New Member

    5
    2
    3
    Jul 17, 2014
    Ratings:
    +2
    Local Time:
    12:00 PM
    Wow! Ironically, I moved all my clients to OVH Canada yesterday and didn't notice anything
     
    • Like Like x 1
  17. deltahf

    deltahf Active Member

    207
    101
    43
    Jun 8, 2014
    Ratings:
    +154
    Local Time:
    12:00 PM
    My server with ReliableSite has been up and down throughout all of this, but only for about 30 minutes at a time. No extended downtime, fortunately. :eek:

    The email I got from RS said they received an attack of 500Gbps. Whoever is doing this has some serious firepower...
     
  18. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah don't think the attack was active yesterday. My SoYouStart Canada server was fine throughout too.
    500Gbps yikes, not many DDOS mitigation providers can support that. I believe Reliablesite was attacked at their upstream Choopa provider so don't think Reliablesite could of done anything to prevent it. Similar to how Linode was DDOS attacked in Xmas 2015/New Year 2016 at their upstreams (along with their own network). I suspect this will hurt Reliablesite alot though from their WHT thread some clients had very extended downtime.
     
  19. Revenge

    Revenge Active Member

    288
    64
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +227
    Local Time:
    5:00 PM
    1.9.x
    10.1.x
    My SoYouStart server in France and a OVH server in Canada, they both were not affected.
     
    • Informative Informative x 1
  20. eva2000

    eva2000 Administrator Staff Member

    30,168
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,137
    Local Time:
    2:00 AM
    Nginx 1.13.x
    MariaDB 5.5
    with OVH upgrading their network, i am thinking of cancelling my SoYouStart server for an OVH one just to get a higher 500Mbps cap heh :)