Lowendbox.com down? For how long?

Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > Lowendbox.com down? For how long?

Posted by bergholt, 07-14-2011, 02:14 PM
Home from vacation to realize that one of my favourite VPS resources Lowendbox is down. Does anyone know how long it's been down?
Posted by Dustin Cisneros, 07-14-2011, 02:15 PM

Quote:

Originally Posted by bergholt

Home from vacation to realize that one of my favourite VPS resources Lowendbox is down. Does anyone know how long it's been down?

I have noticed it down for about 15 minutes, might just be some slight network hiccup.
Posted by Kevin Hillstrand, 07-14-2011, 02:18 PM
Seems like it is offline from my end. It's not responding to ping, so maybe the server is offline.
Posted by aroel, 07-14-2011, 02:24 PM
Yes, it's officially offline, I cannot browse nor ping it
Posted by canar, 07-14-2011, 03:00 PM

Quote:

Originally Posted by FTN-Kevin

so maybe the server is offline.

it looks like, 'talk' is running fine!
Posted by SirMarcel, 07-14-2011, 03:23 PM
looks like nginx is not started, at least to me
Posted by misspink, 07-14-2011, 03:49 PM

Quote:

Originally Posted by SirMarcel

looks like nginx is not started, at least to me

Pinging lowendbox.com [173.192.35.70] with 32 bytes of data:
Request timed out.
Request timed out.

i guess nginx handles ping requests too!!
Posted by Hsunami, 07-14-2011, 03:55 PM

Quote:

Originally Posted by canar

it looks like, 'talk' is running fine!

LowEndTalk is on a different server.
Posted by iKocka, 07-14-2011, 04:02 PM
Yeah, lowendbox.com is hosted on QuickWeb's VPS which is currently offline and lowendtalk.com is hosted on eNetSouth's VPS which is online. Let's wait for Roel to update us.
Posted by cd/home, 07-14-2011, 04:05 PM
Still down from my end (UK)

I wonder what the problem is...
Posted by HUGOBLUE, 07-14-2011, 04:23 PM
LEA is away on holidays, so he is probably not able to do much at this moment.

Maybe Quickweb can resolve the situation?
Posted by QuickWeb-Roel, 07-14-2011, 04:44 PM
The IP got nullrouted by SL due to massive DDoS going 2Gps, it will be lifted after a while.
Posted by misspink, 07-14-2011, 04:45 PM

Quote:

Originally Posted by QuickWeb-Roel

The IP got nullrouted by SL due to massive DDoS going 2Gps, it will be lifted after a while.

Why would anyone DDoS LEB?
Maybe someone didn't get their company listed!
Posted by GetKVM_Ash, 07-14-2011, 04:55 PM

Quote:

Originally Posted by misspink

Why would anyone DDoS LEB?
Maybe someone didn't get their company listed!

Its happened to them a few times.
Posted by Syphic, 07-14-2011, 05:02 PM
Yea, I check LEB a few times a week to see whats new on the market. Great resource.
Posted by dotHostel, 07-14-2011, 05:05 PM

Quote:

Originally Posted by QuickWeb-Roel

The IP got nullrouted by SL due to massive DDoS going 2Gps, it will be lifted after a while.

It seems lowendtalk was under attack too as I received a message from eNetSouth relating network issues in San Jose.
Posted by DeltaAnime, 07-14-2011, 05:42 PM

Quote:

Originally Posted by misspink

Why would anyone DDoS LEB?
Maybe someone didn't get their company listed!

The sad part is that could very well be the case. LEB is a fantastic resource but it has also pointed out the childish actions of many 'CEOs'. Some people simply can't handle the criticism and will rage/scream like children.

Francisco
Posted by cd/home, 07-14-2011, 05:43 PM

Quote:

Originally Posted by DeltaAnime

The sad part is that could very well be the case. LEB is a fantastic resource but it has also pointed out the childish actions of many 'CEOs'. Some people simply can't handle the criticism and will rage/scream like children.

Francisco

I agree, I personally love criticism gives room for improvement
Posted by canar, 07-14-2011, 05:57 PM

Quote:

Originally Posted by dotHostel

It seems lowendtalk was under attack too as I received a message from eNetSouth relating network issues in San Jose.

yes, lowendtalk is down now
Posted by dotHostel, 07-14-2011, 06:15 PM

Quote:

Originally Posted by canar

yes, lowendtalk is down now

Just received from eNetSouth:

Quote:

Thursday July 14th 4:48 PM CDT
==============================

eNetSouth West in San Jose, CA is being impacted again by a decent rate DDoS.

Samples of network performance data over the past 2 1/2 hours indicate this attack is persistant and growing.

We are working to mititgate as quickly as possible.

Posted by VectorVPS, 07-14-2011, 06:32 PM
Still down as of 6:30PM EST.
Posted by QuickWeb-Roel, 07-14-2011, 06:32 PM
yes we (i mean SL) tried to place it under CiscoGuard then got overrun after reaching 1,500,000,000 bps inbound to the IP that caused an over utilization of the guards. But it is contained and no other clients on the same node were affected.... it is kindsa massive undertaking of attacker for such as small site.
Posted by BC-enetsouth, 07-14-2011, 06:37 PM

Quote:

Originally Posted by QuickWeb-Roel

yes we (i mean SL) tried to place it under CiscoGuard then got overrun after reaching 1,500,000,000 bps inbound to the IP that caused an over utilization of the guards. But it is contained and no other clients on the same node were affected.... it is kindsa massive undertaking of attacker for such as small site.

I will second this as well. 8x8 (Central Host) stated it was Multi-Gigabit UDP attack to lowendtalk.com.

Brandon
Posted by Ville:, 07-14-2011, 06:49 PM
Seriously someone is annoyed. Probably some host or individual as others have suggested.
I hope this attacker is caught.
Posted by BC-enetsouth, 07-14-2011, 06:55 PM
I can assure you that this is not just a annoyed someone. This was a huge attack from many locations.

Brandon
Posted by misspink, 07-14-2011, 06:56 PM
Any idea when LEB/LET is going to be back up? I'm trying to find a VPS to keep my backups.
Posted by GetKVM_Ash, 07-14-2011, 06:59 PM
Check the offers forum
Posted by dmmcintyre3, 07-14-2011, 07:03 PM

Quote:

Originally Posted by misspink

Any idea when LEB/LET is going to be back up? I'm trying to find a VPS to keep my backups.

for backup space, see http://www.webhostingtalk.com/showthread.php?t=1055770
Posted by misspink, 07-14-2011, 07:04 PM
I kinda need EU, not really good enough:
Code:
[root@ams ~]# wget http://lowendvps.hostigation.com/100mb.bin -O /dev/null
--2011-07-14 22:03:58--  http://lowendvps.hostigation.com/100mb.bin
Resolving lowendvps.hostigation.com... 216.189.1.101
Connecting to lowendvps.hostigation.com|216.189.1.101|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 104857600 (100M) [application/octet-stream]
Saving to: `/dev/null'

 7% [=>                                     ] 7,584,424    562K/s  eta 2m 37s
Posted by HostHatch_AR, 07-14-2011, 07:04 PM
Someone looks really mad..
Posted by Ville:, 07-14-2011, 07:04 PM

Quote:

Originally Posted by BC-enetsouth

I can assure you that this is not just a annoyed someone. This was a huge attack from many locations.

Brandon

Still it is possible to purchase a botnet , so one may of done that.
Posted by SSD Nodes, 07-14-2011, 07:15 PM

Quote:

Originally Posted by cd/home

I agree, I personally love criticism gives room for improvement

I definitely agree, although constructive feedback is always better than simply "ur service sux"
Posted by 96mb, 07-14-2011, 07:22 PM
Now I am really not sure whether it is a good thing to be popular or have some popularity among low end VPS community
Just kidding, thanks to LEA for constantly bringing good deals to us and -1 for those teenager DDOSers, thanks for being so childish and foolish
Posted by 96mb, 07-14-2011, 07:27 PM
And I highly suspect the DDOSer knows the fact that LEA is on vacation and trying to take advantage of that...disgusting, I got to say
Posted by canar, 07-14-2011, 08:02 PM

Quote:

Originally Posted by 96mb

And I highly suspect the DDOSer knows the fact that LEA is on vacation and trying to take advantage of that...disgusting, I got to say

Always a bad idea to make a vacation public!
Posted by Dustin Cisneros, 07-14-2011, 09:15 PM

Quote:

Originally Posted by canar

Always a bad idea to make a vacation public!

Most of the times he does make it public which I feel is fair to keep his users updated and as possibly why hes not updating the list.

Most of the times Ive seen while on vacation he try's his best to remain active and still list how ever ddos can happen at any time.

I'm sure Roel and Softlayer is doing everything they can to get it online ASAP.
Posted by net, 07-14-2011, 09:29 PM

Quote:

Originally Posted by 96mb

Now I am really not sure whether it is a good thing to be popular or have some popularity among low end VPS community
Just kidding, thanks to LEA for constantly bringing good deals to us and -1 for those teenager DDOSers, thanks for being so childish and foolish

It is ok to be popular but just don't piss someone too much :-)

Human is human.
Posted by dave - just199, 07-14-2011, 10:17 PM
Hmm maybe a candidate for cloudflare
Posted by 96mb, 07-14-2011, 10:20 PM

Quote:

Originally Posted by net

It is ok to be popular but just don't piss someone too much :-)

Human is human.

I do not think LEA has pissed anyone too much unless anyone pissed at him 10 times as much before.
Although I do not know LEA personally, but I do not immature pissy who would like to argue with people could host such a great community
Posted by misspink, 07-14-2011, 10:21 PM
Any idea when it'll be back up? I think softlayer nullroutes for 24 hours but i'm not sure about enetsouth.
Posted by 96mb, 07-14-2011, 10:22 PM

Quote:

Originally Posted by Dave - Just199

Hmm maybe a candidate for cloudflare

I think LEA does not want to hide his server info behind cloudflare since that means he could use a Xeon dedi to run the website.
Obviously I do not think he is going to do that, but it is always good to seal the mouth of some people, if you know what I mean
Posted by misspink, 07-14-2011, 10:23 PM

Quote:

Originally Posted by 96mb

I think LEA does not want to hide his server info behind cloudflare since that means he could use a Xeon dedi to run the website.
Obviously I do not think he is going to do that, but it is always good to seal the mouth of some people, if you know what I mean

He could still be using anything, it's not as if an IP address tells you what hardware the server is running.
Posted by 96mb, 07-14-2011, 10:23 PM

Quote:

Originally Posted by misspink

Any idea when it'll be back up? I think softlayer nullroutes for 24 hours but i'm not sure about enetsouth.

On the plus side though, I think WHT should see a traffic spike today
Posted by dave - just199, 07-14-2011, 10:23 PM
I think if he announced that he was going to use cloudflare especially due to these attacks everyone would accept that. Hell it makes sense for most of the LEB audience to use it.
Posted by 96mb, 07-14-2011, 10:28 PM

Quote:

Originally Posted by misspink

He could still be using anything, it's not as if an IP address tells you what hardware the server is running.

True, but at least we know it is an IP from Quickweb and tracert would at least tell you what node LEB is on.
But you are right, having an IP is just too little info to prove anything....
Posted by 96mb, 07-14-2011, 10:30 PM

Quote:

Originally Posted by Dave - Just199

I think if he announced that he was going to use cloudflare especially due to these attacks everyone would accept that. Hell it makes sense for most of the LEB audience to use it.

guys like you and me will accept it, but hell, there are always guys on the other side of the fence Just read all those comments linking LEB to BuyVM and you'll know what I mean
Posted by QuickWeb-Roel, 07-14-2011, 10:41 PM

Quote:

Originally Posted by misspink

Any idea when it'll be back up? I think softlayer nullroutes for 24 hours but i'm not sure about enetsouth.

correct it is at least 24 hours as Softlayer SOP, i think LEB is using DNSME for his DNS so it is easy to fail it over to a new IP but then again he's on the road so...
Posted by procrastinator, 07-14-2011, 10:52 PM
must be dr.mike.. haha.. /joke seriously though with way too much nonsense going on over LEB/LET lately I'm not surprise this is happen.
Posted by shepardx, 07-14-2011, 11:07 PM

Quote:

Originally Posted by procrastinator

must be dr.mike.. haha.. /joke seriously though with way too much nonsense going on over LEB/LET lately I'm not surprise this is happen.

I think you got the right point
Posted by BC-enetsouth, 07-15-2011, 12:24 AM

Quote:

Originally Posted by misspink

Any idea when it'll be back up? I think softlayer nullroutes for 24 hours but i'm not sure about enetsouth.

I have exchanged a couple of emails with LEA. I am in a hold situation currently at his request.

I'm certain we will talk more once he is back from his travels.

Brandon
Posted by QuickWeb-Roel, 07-15-2011, 12:36 AM
LEB is actually up and running for a while now, just wait for him to propagate the domain.
Posted by BC-enetsouth, 07-15-2011, 12:51 AM
I'm being sarcastic/serious when I say this but so it can be DDoS'd off the face of the planet again?

We never downed his instance. It's still there but will need some changes to prevent this in the future.
Posted by rgenzon, 07-15-2011, 01:43 AM
I thought I was the only one who can't access the site. I hope the issue gets fixed soon. I feel bad for both QuickWeb and LowEndBox though
Posted by shepardx, 07-15-2011, 03:02 AM

Quote:

Originally Posted by rgenzon

I thought I was the only one who can't access the site. I hope the issue gets fixed soon. I feel bad for both QuickWeb and LowEndBox though

And ensCloud
Posted by HUGOBLUE, 07-15-2011, 04:45 AM

Quote:

Originally Posted by QuickWeb-Roel

LEB is actually up and running for a while now, just wait for him to propagate the domain.

LEB is loading for me now Good work!
Posted by Ville:, 07-15-2011, 04:46 AM
Looks up from here to.
Posted by vladc, 07-15-2011, 04:51 AM
It's up for me too, also, LEB is now on cloudflare. I hope they also changed the container's IP address.
Posted by HUGOBLUE, 07-15-2011, 05:37 AM

Quote:

Originally Posted by vladc

It's up for me too, also, LEB is now on cloudflare. I hope they also changed the container's IP address.

Quickweb provided them a new IP that is not null routed by SoftLayer
Posted by flyah, 07-15-2011, 06:11 AM
How does cloudflare work on these kind of situation btw? (Haven't figured out how to use it yet.)
Posted by 96mb, 07-15-2011, 07:42 AM

Quote:

Originally Posted by flyah

How does cloudflare work on these kind of situation btw? (Haven't figured out how to use it yet.)

I guess because they have so many servers and their bandwidth is large enough, it is just impossible to occupy all their bandwidth unless there is really a huge attack...
Could someone verify please?
Posted by GetKVM_Ash, 07-15-2011, 08:18 AM
Cloudflare blocks known malicious users from accessing your site using databases of such known users. It also hides your original IP. Nobody can get to your site without going through cloudflare first.
Posted by dave - just199, 07-15-2011, 08:24 AM
Glad to see he took the advice on cloudflare for LEB.
Looks like LET is still down though.
Posted by Violetli, 07-15-2011, 02:28 PM
Maybe this happened because few providers that where offered in LEB recently where closed down, and some had hundreds and hundreds of clients. Including Hostrail of which many clients lost all their data (their own fault anyway) because of it, and they where waiting on facebook to get their data back (and perhaps some are still waiting). Few others died as well at the same period! So, some angry clients from anywhere, they might be behind attack.

To make it clear, if, say, 'buyvm' is gone (which is too unlikely -they are a great provider- but only assume), then expect LEB to have a lot of attacks IMO, since Buyvm host really lots of VPS clients, furthermore, as buyvm owner stated they host a lot of clients from China. Also, many clients buy 5 or 10 VPSes! So good luck with holding some angry customer attacks.
Posted by Syphic, 07-15-2011, 03:31 PM
It is back up
Posted by DeltaAnime, 07-15-2011, 03:39 PM

Quote:

Originally Posted by Violetli

Maybe this happened because few providers that where offered in LEB recently where closed down, and some had hundreds and hundreds of clients. Including Hostrail of which many clients lost all their data (their own fault anyway) because of it, and they where waiting on facebook to get their data back (and perhaps some are still waiting). Few others died as well at the same period! So, some angry clients from anywhere, they might be behind attack.

To make it clear, if, say, 'buyvm' is gone (which is too unlikely -they are a great provider- but only assume), then expect LEB to have a lot of attacks IMO, since Buyvm host really lots of VPS clients, furthermore, as buyvm owner stated they host a lot of clients from China. Also, many clients buy 5 or 10 VPSes! So good luck with holding some angry customer attacks.

I don't think they got hit by some angry client that got jacked over (insert provider). I'm betting there are many companies that LEA holds back from listing because he finds major issues with them or was dropped some information about them before hand, making him reconsider a listing.

Alas, LEA has been posting more and more 'gameserver companies', where they started doing runescape/minecraft first and VPS' came as a 'filler' later. I know for a fact the runescape community is still jam packed with ddos kids and minecraft is going that way too.

Francisco
Posted by Ville:, 07-15-2011, 06:33 PM
Seems down again.

Fantastic.
Posted by bhavicp, 07-15-2011, 06:41 PM

Quote:

Originally Posted by Ville:

Seems down again.

Fantastic.

It's loading fine for me..
Posted by Ville:, 07-15-2011, 07:11 PM
IT was definately down for a short time
Posted by vRozenSch00n, 07-15-2011, 07:15 PM
I'm glad LEB and LET are back
Posted by dmmcintyre3, 07-16-2011, 01:27 AM
I'm impressed at how good LEA is at hiding his real IP, it only took me 5 min to find it.
Posted by cd/home, 07-16-2011, 10:29 AM

Quote:

Originally Posted by dmmcintyre3

I'm impressed at how good LEA is at hiding his real IP, it only took me 5 min to find it.

http://www.intodns.com/lowendbox.com
Posted by Henrik, 07-26-2011, 05:55 PM
I hope it stays up now, it's a great resource