Fluid Hosting Forums  
HomeWeb HostingSupportContact UsAbout UsForums |

Go Back   Fluid Hosting Forums > Customer's Forums > Maintenance Notifications > Unscheduled Maintenance / Critical Alerts

Reply
 
Thread Tools Display Modes
Old 04-14-2013, 05:33 PM   #1
FH-Vlad
Senior Member
 
Join Date: Mar 2006
Posts: 402
(Shared/reseller) DDOS on web7.nozonenet.com: shared IP null-routed

We are seeing issue on web7.nozonenet.com. The servet is being rebooted.

Last edited by FH-Dave; 04-14-2013 at 09:54 PM.
FH-Vlad is offline   Reply With Quote
Old 04-14-2013, 05:59 PM   #2
FH-Vlad
Senior Member
 
Join Date: Mar 2006
Posts: 402
It turns out this server is under heavy DDOS attack. We can see at least 2x 1Gbps of traffic going into it. We are working on resolving the issue.

Last edited by FH-Dave; 04-14-2013 at 09:54 PM.
FH-Vlad is offline   Reply With Quote
Old 04-14-2013, 08:38 PM   #3
FH-Vlad
Senior Member
 
Join Date: Mar 2006
Posts: 402
Attack seemed to have subsided. We have removed the null-route on web7 shared IP.

Last edited by FH-Dave; 04-14-2013 at 09:50 PM.
FH-Vlad is offline   Reply With Quote
Old 04-14-2013, 08:59 PM   #4
FH-Vlad
Senior Member
 
Join Date: Mar 2006
Posts: 402
As soon as the null route is removed, DDOS continues. The target of the attack remained: the shared IP address of web7. Thus, we are forced to null route it again.

All websites that are on dedicated IP address should be working normally.

Last edited by FH-Dave; 04-14-2013 at 09:52 PM.
FH-Vlad is offline   Reply With Quote
Old 04-15-2013, 12:16 AM   #5
FH-John
Fluid Hosting Tech
 
FH-John's Avatar
 
Join Date: Feb 2003
Location: Washington
Posts: 4,177
web7 shared IP has been enabled. Sites utilizing it are now working.
__________________
John T. Yocum
"An empty stomach is not a good political adviser." -- Albert Einstein
"There never was a good war or a bad peace." -- Benjamin Franklin
FH-John is offline   Reply With Quote
Old 04-15-2013, 12:27 AM   #6
FH-John
Fluid Hosting Tech
 
FH-John's Avatar
 
Join Date: Feb 2003
Location: Washington
Posts: 4,177
web7 shared IP is down again. The attackers changed their method of attack. We're working to mitigate it.
__________________
John T. Yocum
"An empty stomach is not a good political adviser." -- Albert Einstein
"There never was a good war or a bad peace." -- Benjamin Franklin
FH-John is offline   Reply With Quote
Old 04-15-2013, 01:34 AM   #7
FH-John
Fluid Hosting Tech
 
FH-John's Avatar
 
Join Date: Feb 2003
Location: Washington
Posts: 4,177
The attackers are very determined. Attack size has reached 2.6Gb/s, and over 400Kpps.
__________________
John T. Yocum
"An empty stomach is not a good political adviser." -- Albert Einstein
"There never was a good war or a bad peace." -- Benjamin Franklin
FH-John is offline   Reply With Quote
Old 04-15-2013, 02:01 AM   #8
FH-John
Fluid Hosting Tech
 
FH-John's Avatar
 
Join Date: Feb 2003
Location: Washington
Posts: 4,177
web7 is up, though the attacks continue.
__________________
John T. Yocum
"An empty stomach is not a good political adviser." -- Albert Einstein
"There never was a good war or a bad peace." -- Benjamin Franklin
FH-John is offline   Reply With Quote
Old 04-15-2013, 02:26 AM   #9
FH-John
Fluid Hosting Tech
 
FH-John's Avatar
 
Join Date: Feb 2003
Location: Washington
Posts: 4,177
Shared IP had to be turned off again.
__________________
John T. Yocum
"An empty stomach is not a good political adviser." -- Albert Einstein
"There never was a good war or a bad peace." -- Benjamin Franklin
FH-John is offline   Reply With Quote
Old 04-15-2013, 03:39 AM   #10
alex
Registered User
 
Join Date: Jun 2011
Posts: 48
DDoS attack on the server continues. We do our best to stop it, but the server is still unavailable from time to time.
alex is offline   Reply With Quote
Old 04-15-2013, 04:35 AM   #11
alex
Registered User
 
Join Date: Jun 2011
Posts: 48
Note: the attack seems to have subsided as of now (6:08 AM ET).

Notice for all clients who are affected by this DDoS attack:

This DDoS attack is targeting the server's main IP address, which is shared among the hundreds of websites. As we may not know how long this attack may continue, switching to a dedicated will help you to remove your website from the influence of this DDOS attack. Please take account, however, of DNS cache and propagation, the impact of which varies from one ISP to another


How to switch to a dedicated IP?


If you wish to switch your site to a dedicated IP, please login in your Control panel --> Domain Settings --> Select one of your domains --> Web Service (click on the icon) and find the option IP Address (CHANGE to Dedicated IP). Use this option if you wish to switch your site to a dedicated IP address.

Last edited by FH-Dave; 04-15-2013 at 05:09 AM.
alex is offline   Reply With Quote
Old 04-15-2013, 07:36 AM   #12
FH-Vlad
Senior Member
 
Join Date: Mar 2006
Posts: 402
As you might already noticed, some 15-20 minutes ago we have removed null route and all sites on web7 should be fully operational now.

However, we are monitoring the server and in case that DDOS attack starts targeting web7 again, we'll be forced to null the traffic again.
FH-Vlad is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 02:19 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
Copyright© Fluid Hosting WebHosting Services