Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > VMPort (UrPad) UK down for past 4 days


VMPort (UrPad) UK down for past 4 days




Posted by kpmedia, 04-15-2013, 01:05 AM
I've not followed it closely, but my monitors have been going nuts.
(It's a test VPS, and I've been busy doing other stuff ... until now. I wanted it.)

It's been up maybe 5% of the time, down 95% for the past 3-4 days.

SolusVM eventually logs in VERY SLOWLY, then shows the VPS offline.
You can't boot the VPS.
Error: "A process has already been initiated for this virtual server. Please wait for the process to finish"

Is anybody else down?

From 11/11 to 2/13 it was fine. (Forget day of buyout, server move.)
Since 3/12, it's been REALLY bad. Lots of downtime. Days worth.

Also, I get the feeling that UrPad doesn't monitor the servers. Not really sure.

.
.

Posted by F-DNS, 04-15-2013, 03:25 AM
It's probably related to this -> http://www.webhostingtalk.com/showpo...5&postcount=91

There are also rumblings in that thread, and elsewhere, that it's a DDoS "arranged" by another provider looking to get into the UK market.

Posted by reto, 04-15-2013, 04:22 AM
Have you tried contacting support and get someone on your case? Whether it has anything to do with the allegations in the post that F-DNS mentions or not, you should be able to get some explanation.

Posted by Flapadar, 04-15-2013, 06:53 AM
Quote:
Originally Posted by F-DNS
It's probably related to this -> http://www.webhostingtalk.com/showpo...5&postcount=91

There are also rumblings in that thread, and elsewhere, that it's a DDoS "arranged" by another provider looking to get into the UK market.
It's more likely just the array of kids that like targetting VPS providers. We've been attacked about 10 times in the last month.. :/

(No UK offering)

Posted by F-DNS, 04-15-2013, 07:44 AM
Quote:
Originally Posted by Flapadar
It's more likely just the array of kids that like targetting VPS providers.
Fortunately the kiddies go back to "skewl" after the Easter break this week, so maybe things will calm down a bit.

Quote:
Originally Posted by Flapadar
(No UK offering)
AHA! So are you admitting that.... errr, no sorry, won't go there (Kidding!)

Posted by Flapadar, 04-15-2013, 07:46 AM
Quote:
Originally Posted by F-DNS
AHA! So are you admitting that.... errr, no sorry, won't go there (Kidding!)
lol

Out of curiosity though - the attacks against UK providers: Are the primarily spoofed+DNS amp with 3-5 chinese IP addresses attacking directly? We've been getting pestered by those recently; luckily only our website getting attacked though

Posted by F-DNS, 04-15-2013, 08:04 AM
Quote:
Originally Posted by Flapadar
Out of curiosity though - the attacks against UK providers: Are the primarily spoofed+DNS amp with 3-5 chinese IP addresses attacking directly? We've been getting pestered by those recently; luckily only our website getting attacked though
I've only heard whispers and mumblings so I can't comment, but perhaps a few hosts that are on the receiving end should stick their heads together (in private) and see if they can detect a common trend/group of IPs?

Posted by cd/home, 04-15-2013, 08:47 AM
Quote:
Originally Posted by F-DNS
and see if they can detect a common trend/group of IPs?
No need we are already picking up a trend of providers who are offering UK based VPSes but not getting any attacks or mention of them across different mediums, We are watching them close and also the IP's one wrong move we are ready to file court paper work for loss of earnings so are several others from the UK.

Posted by F-DNS, 04-15-2013, 09:04 AM
Quote:
Originally Posted by cd/home
we are ready to file court paper work for loss of earnings so are several others from the UK.
Which is why I declined to comment further. Once it goes legal (which it likely will) there shouldn't really be any more public discussion. And I'm in the UK too, remember

(No! It's not me either LOL)

Posted by mummy, 04-15-2013, 09:08 AM
I've had dealings with the UrPad guys, and one thing I did have a problem with was they didn't have an SLA - at least at the time when I was with them - up until about 8 months ago. Left for a similar reason, was on shared account, someone got DDoSed and we all suffered. I guess that happens though and other hosts have similar issues. Moved some of my sites on to another budget provider - http://www.hetzner.de, ever so slightly more expensive, yet with clear-cut SLA. Don't know if you need it, but none of the above will give you DDoS protection though, even as an add-on and if it hits you it's really bad for business. So, I had to buy DDoS protection separately from http://www.vistnet.com and have been cool since then. Wish we were back in the days when it required some skill and talent to DDoS someone and it cost real money - like someone before me said, even kids can do it on their lunch money today, and that's definitely not good. I imagine at one point, most hosts will wise up and arrange for some kind of DDoS protection with their plans.

Posted by cd/home, 04-15-2013, 09:14 AM
Quote:
Originally Posted by F-DNS
Which is why I declined to comment further. Once it goes legal (which it likely will) there shouldn't really be any more public discussion. And I'm in the UK too, remember

(No! It's not me either LOL)
No worries, Just putting the info out that we are watching extremely close

Posted by MannDude, 04-15-2013, 01:11 PM
Yes, our UK location has been under attack since Friday night, starting at around 11PM EST and the attack continues.

It appears to be a shady provider utilizing gang like tactics / cyber-warfare in an effort to claim their 'turf'. It's sad what people will do, we have our suspects and we're narrowing it down.

Kids will be kids, and even if it's not a kid in the sense of age, it's a child in the sense of behavior.


Many clients who have been impacted by this have already opened a ticket. If you've failed to open a ticket with us already, then open one and we'll discuss options for you.

Posted by ~Lee~, 04-15-2013, 01:48 PM
Quote:
Originally Posted by cd/home
No need we are already picking up a trend of providers who are offering UK based VPSes but not getting any attacks or mention of them across different mediums, We are watching them close and also the IP's one wrong move we are ready to file court paper work for loss of earnings so are several others from the UK.
And how exactly is this affecting you?

Posted by SeriesN, 04-15-2013, 01:49 PM
Quote:
Originally Posted by cd/home
No need we are already picking up a trend of providers who are offering UK based VPSes but not getting any attacks or mention of them across different mediums, We are watching them close and also the IP's one wrong move we are ready to file court paper work for loss of earnings so are several others from the UK.
Who are you going to file complaint against?

Posted by kpmedia, 04-18-2013, 02:15 AM
It's still down.

I put in a ticket on 4/15 (3 days ago), asking to be moved to another server, and they've still not responded.

This is the worst downtime and host response I've ever had. (Going back to the 1990s.) This is not an exaggeration.

.
.

Posted by MannDude, 04-18-2013, 02:32 AM
Quote:
Originally Posted by kpmedia
It's still down.

I put in a ticket on 4/15 (3 days ago), asking to be moved to another server, and they've still not responded.

This is the worst downtime and host response I've ever had. (Going back to the 1990s.) This is not an exaggeration.

.
.
Whats the ticket number? I'm looking at the ticket queue now and don't see anything that old in regards to the attack. Depending on what node you're on, one is still being hit. (Since Friday night) The DC has nullrouted most IPs on this node as they're targeting the entire range on the node it appears. We would most certainly set you up on a new node if we were able to access Uniform, however we can not at this time.

PM me your ticket number and I'll be happy to discuss with you what options we have for you.

All the best,

Posted by cd/home, 04-18-2013, 02:41 AM
Quote:
Originally Posted by MannDude
We would most certainly set you up on a new node if we were able to access Uniform, however we can not at this time.
Ask the DC to connect you up with a console and do it that way or simply ask the DC to move the servers into their own rack and setup a pfsense + Snort firewall to help with the attack, Of course it's not all singing all dancing but it could work for a short while.

Posted by kpmedia, 04-18-2013, 03:16 AM
I have nothing important on the old node. Nuke it, for all I care.

This is a test VPS. I use it weekly for panel research, and OS research. I'm going to be publishing some of my findings later this year, when I can. In the shorter term, I'll be creating some guides for newbies. It currently has Virtualmin installed, with some customizations. If you can save and migrate it, great. If not, that's fine too. I really don't care that much. I just need a working VPS.

I've PM'd you.

.
.

Posted by DMills, 04-18-2013, 04:15 AM
Hi,

Theres alot of rumors and crap talk going on over these UK attacks, I surf a IRC Network called Efnet and idle in some chans, theres been a few floods and chan take over to UK Hosters channels. Strangely these "kids" have quite some power, youve been getting hit sense our UK network has been getting nailed, we just recently had 75% of our UK network and gear routed through our solid main network in L.A with traffic filtered through our gear at awknet. Jwr has something set up special due too this attack for us that actually allowed us to bring back up 90% of our UK gear back online, and have it online stable, and yes its still being nailed hardcore.

We have a few options too decide through management, but we where able to bring most of our UK boxes back without these kids able too drop any of it any more. Now our Sr Network management team is working with another UK NOC too figure a few things out. The strange thing is half of our UK NOC is being affected. Luckily, we had some extra funds invested into backup situations and it saved us this time..

Good luck.

Posted by kpmedia, 04-18-2013, 07:34 PM
Quote:
Originally Posted by MannDude
Whats the ticket number? I'm looking at the ticket queue now and don't see anything that
It been at least 16+ hours since I sent a PM, and there's been no response.

Not once did UrPad contact me to tell what was going on, what my options were, etc.
The server is back now, but it's almost a week later (7 days).

I think it's worse than AltusHost.

.
.

Posted by ym_21, 04-18-2013, 09:29 PM
Quote:
Originally Posted by kpmedia
It been at least 16+ hours since I sent a PM, and there's been no response.

Not once did UrPad contact me to tell what was going on, what my options were, etc.
The server is back now, but it's almost a week later (7 days).

I think it's worse than AltusHost.

.
.
They are a terrible company. I mentioned in my other thread, if their servers were being attacked and their customers are affected, they should at least notify their customers of the current situation. However they seem to be on a high horse and refuse to take action against the DDoS and let their customers suffer. 1 Week of downtime and no contact made to their customers, definitely one of the worst hosts out there.

I am awaiting a refund from UrPad which was promised but will probably not materialise. I will send them a ticket now to remind them of this so lets see what excuse they give now.

Posted by MannDude, 04-19-2013, 12:36 AM
Quote:
Originally Posted by kpmedia
It been at least 16+ hours since I sent a PM, and there's been no response.

Not once did UrPad contact me to tell what was going on, what my options were, etc.
The server is back now, but it's almost a week later (7 days).

I think it's worse than AltusHost.

.
.
I thought I responded to your PM, I see that I didn't. Last night I passed that info along to our support staff manager and to my boss as well, as I do not personally have access to anything related to vmPort.

Quote:
Originally Posted by ym_21
They are a terrible company. I mentioned in my other thread, if their servers were being attacked and their customers are affected, they should at least notify their customers of the current situation. However they seem to be on a high horse and refuse to take action against the DDoS and let their customers suffer. 1 Week of downtime and no contact made to their customers, definitely one of the worst hosts out there.

I am awaiting a refund from UrPad which was promised but will probably not materialise. I will send them a ticket now to remind them of this so lets see what excuse they give now.
I agree that you had a terrible experience, that does not equal terrible company. Every one who submitted a ticket was notified of what was going on, as not every single customer in our UK location was effected by the attacks. The IPs that were being attacked were nullrouted, and the action we're taking is being done so behind the scenes and at the datacenter level and is being given the appropriate level of priority. It'd be silly to think any company would just sit there idly and allow something negative to impact their customers. You make it sound as if we do not care and have not provided the details when asked, which is not the case at all. I share the same frustration of our impacted customers, you're not alone in behind frustrated. Please don't think otherwise.

We've processed all requests for refunds that have been submitted by those impacted by these attacks. Please provide me a ticket number so that I can assure your request was processed, as I would of been the one processing these, and despite having a higher than usual work load at the moment don't believe I've looked over one.

Posted by kpmedia, 04-19-2013, 01:39 AM
I went to sleep, woke up. Another day has gone by. Still no replies to tickets.

At least the server is up now.
It appears to have at least stayed up for the past 24 hours.
So I can go back to what I was planning to do this week and next (I hope).

This host is fine for testing, but NOT for production sites.

.
.

Posted by ym_21, 04-19-2013, 09:25 AM
Still waiting for refund...

Posted by ym_21, 04-19-2013, 11:33 AM
UrPad has deleted my last reply to ticket #166214 (regarding refund) and they have also closed the ticket, yet no refund.
How professional...

Posted by Martin-D, 04-19-2013, 01:19 PM
How about you stop bitching in both threads and move elsewhere? You're just looking stupid now.

Posted by ym_21, 04-19-2013, 01:57 PM
Quote:
Originally Posted by Martin-D
How about you stop bitching in both threads and move elsewhere? You're just looking stupid now.
I'm sorry, is this your board?
It isn't is it? So no, I will not stop stating the facts.

Posted by MannDude, 04-19-2013, 03:53 PM
Quote:
Originally Posted by ym_21
UrPad has deleted my last reply to ticket #166214 (regarding refund) and they have also closed the ticket, yet no refund.
How professional...
You're ticket is still open, has NOT been deleted, and I do not appreciate you trying to state otherwise.

In the ticket I explained to you very clearly.

Quote:
04/14/2013 00:13


Hi.

I am requesting a full refund as per this post http://www.webhostingtalk.com/showpo...5&postcount=91

Thank you
Quote:
04/14/2013 00:26 (13 minutes to respond)

Hi there,

I'll give you a partial refund, as these issues haven't always been present. The refund will be prorated, assuming that you had cancelled a month ago so the amount will be higher than it would be as if the date were today, but it will not be a full refund as you've had service since November. As your payment is greater than six months old, I can not process the refund from our payment processor directly (2CheckOut). This isn't a policy thing, it's literally a function that is disabled after six months. The only people who have access to provide refunds, myself included, are out of the country so when I return to the states I'll manually process your refund via PayPal.

Your refund amount will be for $7, and will be processed before the end of next week. Due to security reasons I do not plan on disclosing our travel dates but I will return and be able to do this for you within the next seven days.

Regards,

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Curtis M.
Administrative Assistant
URPad.net - A FTNHosting Company
Quote:
04/14/2013 00:30

Thank you for the quick resolution.
Quote:
04/19/2013 11:31 (after we 'deleted' his ticket)

Hi,

This ticket has not been resolved. Please process the refund and why did you remove my last reply?
I'm posting these here as proof that we did not delete your ticket.



Now, I will admit that I have overlooked it as your case was unique as your payment was more than six months old ($12/YR promotional client, ordered in October last year) and I could not process the refund direct from 2CheckOut due to that. We have no company PayPal as we use 2CO to process PayPal payments made by our customers (better fraud screening), so I am refunding you from MY personal PayPal (I'll get reimbursed).

Now, the reasonable method of asking for an update would be to simply update the ticket you had created and say something along the lines of, "Hey there! Just curious if you've made it back yet and can process my refund now?"

Instead, you came here with bold claims and lies trying to say we deleted your ticket?

I'm processing your refund right now, and I wish you the best of luck with your new provider.

Posted by ym_21, 04-19-2013, 04:06 PM
Quote:
Originally Posted by MannDude
You're ticket is still open, has NOT been deleted, and I do not appreciate you trying to state otherwise.

In the ticket I explained to you very clearly.

I'm posting these here as proof that we did not delete your ticket.



Now, I will admit that I have overlooked it as your case was unique as your payment was more than six months old ($12/YR promotional client, ordered in October last year) and I could not process the refund direct from 2CheckOut due to that. We have no company PayPal as we use 2CO to process PayPal payments made by our customers (better fraud screening), so I am refunding you from MY personal PayPal (I'll get reimbursed).

Now, the reasonable method of asking for an update would be to simply update the ticket you had created and say something along the lines of, "Hey there! Just curious if you've made it back yet and can process my refund now?"

Instead, you came here with bold claims and lies trying to say we deleted your ticket?

I'm processing your refund right now, and I wish you the best of luck with your new provider.
Thanks for your long and winded reply but I never said you deleted my ticket. I simply said you deleted my last reply to the ticket.
I made a reply to the ticket at 0130 GMT time today (look at my other post) and this afternoon 1626 GMT the ticket was closed with my last reply deleted. I had to make another reply in-order to re-open the ticket.

I am now tired of dealing with UrPad. Can you please process the refund.
I hope we never have to deal with each other again in the future.

Posted by MannDude, 04-19-2013, 06:28 PM
Quote:
Originally Posted by ym_21
Thanks for your long and winded reply but I never said you deleted my ticket. I simply said you deleted my last reply to the ticket.
I made a reply to the ticket at 0130 GMT time today (look at my other post) and this afternoon 1626 GMT the ticket was closed with my last reply deleted. I had to make another reply in-order to re-open the ticket.

I am now tired of dealing with UrPad. Can you please process the refund.
I hope we never have to deal with each other again in the future.

As I already told you via the ticket update, your refund was processed hours ago.

Posted by ym_21, 04-19-2013, 07:34 PM
Quote:
Originally Posted by MannDude
As I already told you via the ticket update, your refund was processed hours ago.
When I made that post, it had not been processed. You made this post 2.5 hours after my post. What point are you trying to make?

My post was made at 1556 EST
Refund was processed at 1608 EST

If my numbers are correct, 12 minutes != hours ago. 1608 is also after 1556 so I don't know how you are claiming to have processed the refund "hours" ago. Stop trying to be patronising because its not working. Especially when the person you're trying to patronise has to teach you basic maths.

Posted by RSS-Artie, 04-19-2013, 11:44 PM
You got your refund, what more you want? I mean I enjoy the popcorn as do others, but telling their rep that he doesn't know math is humorous at best.

And if you would stop spamming WHT with "URPad reviews" that'd be nice. We get it, you don't like them.

Posted by ym_21, 04-20-2013, 08:38 AM
Quote:
Originally Posted by RSS-Artie
You got your refund, what more you want? I mean I enjoy the popcorn as do others, but telling their rep that he doesn't know math is humorous at best.

And if you would stop spamming WHT with "URPad reviews" that'd be nice. We get it, you don't like them.
Just because I have received a refund does not mean I am not allowed to have an opinion about them. Is that what you think, once a refund has been given, the ex-customer is not allowed to talk about them again?

Also, the only thing humorous about telling him he doesn't know his maths is that I have clearly proven this in my previous post that you seemed to have overlooked.

Finally, if I have been spamming WHT with UrPad reviews then why aren't you reporting them to WHT? Why have they not been removed/closed already? The fact is, I have only made one UrPad review. So if you can link me to my other reviews then I would be interested to know.

Posted by ~Lee~, 04-20-2013, 09:29 AM
Quote:
Originally Posted by ym_21
I am not allowed to have an opinion about them.
The search function is everyone's friend, if they want want to find your opinion on the matter they can, but what you end up doing, sorry what you are now doing is trolling, so when people see you in a URPad related thread it just gets ignored and your opinion stops being relevant.

Posted by zoid, 04-20-2013, 09:39 AM
Quote:
Originally Posted by RSS-Artie
You got your refund, what more you want? I mean I enjoy the popcorn as do others, but telling their rep that he doesn't know math is humorous at best.
Well, if the rep states incorrect facts it should be the OP's right to correct them.

Posted by F-DNS, 04-20-2013, 10:24 AM
Quote:
Originally Posted by ym_21
Is that what you think, once a refund has been given, the ex-customer is not allowed to talk about them again?
Not in this thread, certainly.

Quote:
This forum is provided to discuss current outage issues and to allow a way for customers and providers to communicate. Comments by non-customers will be removed. Reviews are only suitable in the appropriate main forum category.

Posted by ym_21, 04-20-2013, 12:29 PM
Quote:
Originally Posted by F-DNS
Not in this thread, certainly.
If that's the case. Why are you posting here?
Double standards?

Posted by F-DNS, 04-20-2013, 01:50 PM
Quote:
Originally Posted by ym_21
If that's the case. Why are you posting here?
I'm an URPad customer, so I'm OK here.

Quote:
Originally Posted by ym_21
Double standards?
No, quadruple VPSs

Posted by zacharooni, 04-20-2013, 02:48 PM
Urpad customer here, their billing system is down.

Posted by F-DNS, 04-20-2013, 02:51 PM
Quote:
Originally Posted by zacharooni
Urpad customer here, their billing system is down.
It's 100% fine for me, post a tracert?

Posted by FTN-Chris, 04-20-2013, 02:52 PM
Quote:
Originally Posted by zacharooni
Urpad customer here, their billing system is down.
Hello Zacharooni,

We are not currently experiencing any issues with our billing system at this time. Could you private message me your IP for I can investigate this for you?

Thanks,
Chris.M

Posted by F-DNS, 04-20-2013, 03:01 PM
Quote:
Originally Posted by FTN-Chris
Thanks,
Chris.M
And there was me trying to get you a night off. You've earned it

Posted by FTN-Chris, 04-20-2013, 03:08 PM
Zach,

I have attempted to reply to your PM but it appears you inbox is full.

Posted by zacharooni, 04-20-2013, 03:10 PM
Got your message, everything is okay now!

Posted by F-DNS, 04-20-2013, 03:17 PM
Quote:
Originally Posted by zacharooni
Got your message, everything is okay now!
So, end of thread?



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
VolumeDrive Down? (Views: 1027)
vpsville.ca down? (Views: 1027)
Staminus down (Views: 1577)
SITE5 Down ? (Views: 1115)

Language: