Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > Another DDoS on Namecheap DNS?


Another DDoS on Namecheap DNS?




Posted by Dr_Gaston, 10-17-2012, 04:46 PM
Some of my customer's domains are not resolving right, so I started digging a little with just-ping.com and found out that the DNSx.REGISTRAR-SERVERS.COM are indeed having issues.

Anyone experiencing the same? Is this another DDoS similar to the one we had in March? There is nothing posted on the Namecheap Service Status page.


DNS1.REGISTRAR-SERVERS.COM
New York, U.S.A.: Packets lost (40%)
Stockholm, Sweden: Packets lost (100%)
Santa Clara, U.S.A.: Okay
Vancouver, Canada: Packets lost (100%)
London, United Kingdom: Packets lost (70%)
Madrid, Spain: Okay
Padova, Italy: Packets lost (100%)
Singapore, Singapore: Packets lost (70%)
Austin, U.S.A.: Okay
Cologne, Germany: Packets lost (100%)

DNS2.REGISTRAR-SERVERS.COM
Gdansk, Poland: Packets lost (10%)
Cairo, Egypt: Packets lost (20%)
Beijing, China: Okay
Buenos Aires, Argentina: Okay
Belgrade, Serbia: Packets lost (10%)
Toronto, Canada: Packets lost (10%)

DNS3.REGISTRAR-SERVERS.COM
Stockholm, Sweden: Packets lost (80%)
Santa Clara, U.S.A.: Packets lost (80%)
Vancouver, Canada: Packets lost (80%)
London, United Kingdom: Packets lost (90%)
Madrid, Spain: Packets lost (80%)
Padova, Italy: Packets lost (90%)
Singapore, Singapore: Packets lost (90%)

Posted by Boxxed, 10-17-2012, 05:48 PM
Oh i didn't know that, looks like the namecheap dns hosted sites are still working at glimpse and fine for me.

Posted by MyAdminHub, 10-17-2012, 06:13 PM
They are still working for me, weird.

Posted by Dr_Gaston, 10-17-2012, 06:36 PM
Looks to be very localized: some people have not been able to resolve for most of the day, while some others are just fine. This is really weird.

If you go to just-ping.com/index.php?vh=DNS1.REGISTRAR-SERVERS.COM you can check for yourself. Seems to be sometimes OK, sometimes hammered.

Posted by jdownj, 10-17-2012, 06:44 PM
There is a bunch of network weirdness around today... trying to assemble enough data to make sense of everything... but Namecheap DNS has certainly been part of it...

Posted by mdrussell, 10-17-2012, 06:49 PM
This is the first reported issue I've seen on our FreeDNS. I'm digging deeper but it doesn't look widespread and all of our DNS clusters are functioning normally.

Matt

Posted by kpmedia, 10-17-2012, 08:21 PM
That looks less like DDoS, and more like routing issue somewhere on other large carrier networks outside North America. This is why I never use any single DNS network for important sites. I'll only use 2 servers max from any one provider.

#

Posted by Dr_Gaston, 10-17-2012, 08:55 PM
Quote:
Originally Posted by mdrussell
This is the first reported issue I've seen on our FreeDNS. I'm digging deeper but it doesn't look widespread and all of our DNS clusters are functioning normally.

Matt
Matt,

Just use the just-ping.com website and you will see it is pretty widespread. Here is the latest status on DNS1.REGISTRAR-SERVERS.COM:
Amsterdam2, Netherlands: Packets lost (100%)
Florida, U.S.A.: Packets lost (100%)
Amsterdam3, Netherlands: Okay
Sydney, Australia: Okay
New York, U.S.A.: Packets lost (100%)
Stockholm, Sweden: Packets lost (100%)
Santa Clara, U.S.A.: Okay
Vancouver, Canada: Packets lost (40%)
London, United Kingdom: Packets lost (70%)
Madrid, Spain: Okay
Padova, Italy: Packets lost (100%)
Singapore, Singapore: Okay
Austin, U.S.A.: Okay
Cologne, Germany: Packets lost (50%)
München, Germany: Packets lost (80%)
Amsterdam, Netherlands: Packets lost (100%)
Shanghai, China: Packets lost (90%)

Might be a routing issue rather than a DDoS, but that was heavily impacting resolution for my customer's domains. I had to transfer their DNS away and now everything is back to normal.

You can see Ticket #DQD-188-21368 at support.namecheap.com for more details.

Thanks.

Posted by hitmeback, 10-20-2012, 08:57 AM
just use cloudflare.

Posted by IRCCo Jeff, 10-20-2012, 12:26 PM
Not sure how that's viable advise; CloudFlare has had 13 outages, degraded service, etc. (give or take, I counted quickly) per their own reporting, this month alone.

https://twitter.com/CloudFlareSys

Posted by smerz, 10-20-2012, 01:30 PM
I think he meant the cloudflare DNS servers / services.

Posted by Boxxed, 10-20-2012, 03:22 PM
Would say use Cloudflare, it might have downtime even akamai technologies do have downtime, but still they all are redundant

Posted by Steven, 10-20-2012, 07:43 PM
Quote:
Originally Posted by smerz
I think he meant the cloudflare DNS servers / services.
Their name servers have had outages too I believe.

Posted by Erawan Arif Nugroho, 10-20-2012, 08:22 PM
Cloudflare always bring my site down everyday. I just switched my DNS for my Blog to DNS.HE.NET

But for main website, I still use NameCheap DNS and NameCheap Free DNS.

Just wondering, why people would DDOSing NameCheap

Posted by compevo, 10-22-2012, 06:13 PM
I've seen this with a lot of the big domain providers including Enom before. The problem is that when you offer free DNS and so many people are using it and even 1 of those people's sites are targeted by a DDOS attack, it affects everyone.

Personally I think the only and best solution is to use private DNS services.

Posted by damoncloudflare, 10-23-2012, 02:41 PM
Quote:
Originally Posted by IRCCo Jeff
Not sure how that's viable advise; CloudFlare has had 13 outages, degraded service, etc. (give or take, I counted quickly) per their own reporting, this month alone.

https://twitter.com/CloudFlareSys
We update that handle when we think there is a possibility of some customers having issues. It doesn't mean that they all users would experience an issue based on us posting an update to the handle. Given that you are providing a competitive product of sorts (DDoS protection/mitigation), it can hardly be said that your viewpoints would be considered neutral.

Posted by IRCCo Jeff, 10-23-2012, 02:53 PM
We do not offer competing products.

Posted by damoncloudflare, 10-25-2012, 04:20 PM
Quote:
Originally Posted by IRCCo Jeff
We do not offer competing products.
Black Lotus doesn't offer DDoS mitigation or protection? Seems to be counter to your profile and signature.

About IRCCo Jeff

Location
Los Angeles, CA

Signature

Black Lotus - Industry Standard DDoS Mitigation
We enable network operators to become DDoS mitigation providers.

Posted by mdrussell, 10-25-2012, 04:21 PM
Let's close out this thread. We use and enjoy both CloudFlare and BlackLotus. No need for this thread to derail...

Posted by IRCCo Jeff, 10-25-2012, 06:05 PM
Quote:
Originally Posted by damoncloudflare
Black Lotus doesn't offer DDoS mitigation or protection? Seems to be counter to your profile and signature.

About IRCCo Jeff

Location
Los Angeles, CA

Signature

Black Lotus - Industry Standard DDoS Mitigation
We enable network operators to become DDoS mitigation providers.
Of course we do, but on the other hand signatures are supposed to be disabled for this thread.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
KnownHost down? [merged] (Views: 1710)
24khost Server Down (Views: 866)
Contabo down? (Views: 990)


Language: