Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > VMPort.com - Down due to DDoS attacks.


VMPort.com - Down due to DDoS attacks.




Posted by GetKVM_Ash, 03-11-2012, 10:42 AM
Our main website and support system are currently under heavy DDoS attacks, this has also brought down our email system.

We are currently working with MDDHosting to resolve the issues which have been ongoing for the past 24 hours.

No virtual private server nodes or shared hosting clients are affected at this time. We will post updates whenever possible within this thread.

Thank you for your co-operation!

Ashley Hawkridge
Owner/Manager
VMPort.com

Posted by F-DNS, 03-11-2012, 11:20 AM
Ashley, check your PM box please

Posted by GetKVM_Ash, 03-11-2012, 11:21 AM
Will do

Posted by CH-Jeffrey, 03-11-2012, 11:25 AM
You guy's should put your main website under Cloudflare DNS.

Posted by GetKVM_Ash, 03-11-2012, 11:36 AM
Quote:
Originally Posted by CH-Jeffrey
You guy's should put your main website under Cloudflare DNS.
That wont do anything against 2Gbps

Posted by Miscis, 03-11-2012, 11:41 AM
Quote:
Originally Posted by VMPort
That wont do anything against 2Gbps
Actually, cloudflare is handling UDP-based attacks a lot better now.
Previously they would change the site's IPs around a few times and then just kick them off cloudflare, but now they actually take steps to mitigate the attack.
I've seen 15G+ UDP dropped by cloudflare. Not sure if premium or free.

Posted by GetKVM_Ash, 03-11-2012, 12:01 PM
*Update*

Three of our VPS nodes in Dusseldorf are also now under heavy attacks. We are working to resolve this issue now.

Best Regards

Posted by GetKVM_Ash, 03-11-2012, 06:11 PM
Do any WHT representative's want a list of about a 1000 IPs to cross-reference.

Posted by myhken, 03-12-2012, 11:32 AM
I have to say that you are good on info on the ongoing DDoS attack. It's a good thing that you send out e-mail with the current info, and I really hope the attack stops.

And a good thing that the VPS nodes is not so affected that your main site. I got two down messages on my VPS @ VM6 yesterday, but it was only out for few minutes.

Keep up the good work, and hope it stops at any moment now. So you can use your time running a webhost, not trying to stop a DDoS attack all the time.

Posted by GetKVM_Ash, 03-12-2012, 12:37 PM
Quote:
Originally Posted by myhken
I have to say that you are good on info on the ongoing DDoS attack. It's a good thing that you send out e-mail with the current info, and I really hope the attack stops.

And a good thing that the VPS nodes is not so affected that your main site. I got two down messages on my VPS @ VM6 yesterday, but it was only out for few minutes.

Keep up the good work, and hope it stops at any moment now. So you can use your time running a webhost, not trying to stop a DDoS attack all the time.
Thank you myhken that means a lot, its nice to know our clients are behind us. Yep a few were coming towards VM6 but we managed to stop them before they got started.

Main website and client portal are back online behind some DDoS protection and the attacks are still heading towards our domain but luckily the guys at koddos are keeping them at bay.

Just need to get our email back online (Waiting for propagation) and everything should begin returning to normal.


Posted by myhken, 03-12-2012, 12:42 PM
Good to hear.
Other companies has closed down after an attack like yours, so good you have the money to take action and not close down.

Kenneth

Posted by jhadley, 03-12-2012, 01:06 PM
How's koddos.com working out?

Posted by GetKVM_Ash, 03-12-2012, 01:10 PM
So far excellent, they have mitigated the attack which is still in the 100Mbps+ range the last i heard, site is loading like a dream still.

Had to request a few ports be opened for WHMCS to talk to SolusVM and they got that done in 10 minutes so im happy so far

Posted by GetKVM_Ash, 03-12-2012, 01:11 PM
Quote:
Originally Posted by jtodd
How's koddos.com working out?
Whilst your here and i have your personal email address, do you mind if i send a few test emails your way to see if our email is back up yet?


Posted by jhadley, 03-12-2012, 02:41 PM
Quote:
Originally Posted by VMPort
Whilst your here and i have your personal email address, do you mind if i send a few test emails your way to see if our email is back up yet?

I don't mind.

100Mbps attacks are a pretty poor test though.. I heard the attacks were 2Gbps+, i.e. too much for a standard 1Gbps pipe.

Posted by GetKVM_Ash, 03-12-2012, 02:50 PM
Quote:
Originally Posted by jtodd
I don't mind.

100Mbps attacks are a pretty poor test though.. I heard the attacks were 2Gbps+, i.e. too much for a standard 1Gbps pipe.
At one point they were, i imagine more and more of the zombies in this the net are getting shut down. And we are protected up to a larger scale now regardless.

Posted by jhadley, 03-12-2012, 02:56 PM
Quote:
Originally Posted by VMPort
At one point they were, i imagine more and more of the zombies in this the net are getting shut down. And we are protected up to a larger scale now regardless.
What level are you protected up to? I asked because I checked their site and they only claim 1Gbps.

Posted by GetKVM_Ash, 03-12-2012, 03:08 PM
Quote:
Originally Posted by jtodd
What level are you protected up to? I asked because I checked their site and they only claim 1Gbps.
Then you already know

Posted by jhadley, 03-12-2012, 03:10 PM
Quote:
Originally Posted by VMPort
Then you already know
Hope you're not paying a lot for that - you can get a 1Gbps pipe for next to nothing.

Posted by cd/home, 03-12-2012, 03:25 PM
Quote:
Originally Posted by jtodd
Hope you're not paying a lot for that - you can get a 1Gbps pipe for next to nothing.
But getting a 1Gbps pipe and allowing a constant DDoS attack isnt so straight forward I mean, I can get a 1Gbps pipe at Hetzner for peanuts but one sniff of an attack and your getting null routed...

To get a decent 1Gbps pipe with a decent provider with good hardware on the network level to actually build a solid solution from is going to cost $$$/£££.

If it was as simple as getting a 1Gbps pipe from a budget provider I would be selling DDoS protection right at this minute

Posted by GetKVM_Ash, 03-12-2012, 03:28 PM
Quote:
Originally Posted by jtodd
Hope you're not paying a lot for that - you can get a 1Gbps pipe for next to nothing.
There's a bit more to it than a 1Gbit pipe? You show me a provider that will mitigate an attack on 1Gbit dedi and by mitigate i don't mean null-routing your IP.

They have hardware firewalls and other methods of mitigating, they dont just stick accounts on a server with a 1Gbit port and leave them too it. Think even 10x sites on one of their servers with a 1Gbps attack coming in for each, that's 10Gbit which makes blows your 1Gbit port theory out of the window

Posted by jhadley, 03-12-2012, 03:29 PM
Of course there's more to it than that but unless I'm missing something, a 1Gbps, which is not huge, will take you down either way.

Posted by GetKVM_Ash, 03-12-2012, 03:33 PM
Quote:
Originally Posted by jtodd
Of course there's more to it than that but unless I'm missing something, a 1Gbps, which is not huge, will take you down either way.
Nope, if it gets to that threshold we have to pay for larger protection. But been protected up to 1Gbit is enough for most script kiddy's and its better than no protection at all with MDDHosting.

Posted by jhadley, 03-12-2012, 03:34 PM
Quote:
Originally Posted by VMPort
Nope, if it gets to that threshold we have to pay for larger protection. But been protected up to 1Gbit is enough for most script kiddy's and its better than no protection at all with MDDHosting.
Ok fair enough. What's their pricing like?

Posted by GetKVM_Ash, 03-12-2012, 03:36 PM
Quote:
Originally Posted by jtodd
Ok fair enough. What's their pricing like?
Not cheap if your going above the 1Gbit threshold

Posted by damoncloudflare, 03-12-2012, 05:52 PM
Quote:
Originally Posted by VMPort
That wont do anything against 2Gbps
Not entirely true. It depends on the type of attack against the site (UDP is probably ok) & we have made a ton of changes to enhance the DDoS mitigation capabilities of CloudFlare.

We can help mitigate a lot of attacks, even larger ones, but it really depends on the type of attack that is hitting the site.

Posted by GetKVM_Ash, 03-12-2012, 06:36 PM
Quote:
Originally Posted by damoncloudflare
Not entirely true. It depends on the type of attack against the site (UDP is probably ok) & we have made a ton of changes to enhance the DDoS mitigation capabilities of CloudFlare.

We can help mitigate a lot of attacks, even larger ones, but it really depends on the type of attack that is hitting the site.
I would give you guys another shot but i don't think we can use your NS with the DDoS hosting.

Posted by damoncloudflare, 03-12-2012, 09:34 PM
Don't know the answer to that one (might want to check with hosting provider...I know some do restrict using another service's DNS).



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
OnApp CDN issues (Views: 912)
Pacificrack/OC3 gone? (Views: 972)
Is burst.net down? (Views: 1051)
PhotonVPS Offline... (Views: 936)


Language: