HostSailor AMS network issues

HostSailor · May 20

Hello everyone,

First of all sincere apologies for the inconvenience all of you are facing. We are genuinely sorry for this experience.

We are aware that a number of services, including Amsterdam VPSs, our website, client area, and other systems, have been intermittently unreachable.

This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

Our engineers have been working on this continuously for many hours, applying filtering and routing adjustments to reduce the impact. Some prefixes and locations are already stable again, while work is still ongoing on others.

Please know we really understand the pain, especially for customers who have only recently started seeing stable service again after the previous AMS issue. We know many of you rely on these VPSs for production workloads, and another disruption so soon is the last thing you should have to deal with.

Please rest assured that this is being treated with the highest priority and we are doing everything possible to restore full stability as quickly as we can.

We will continue to update this thread as more information becomes available.

I sincerely apologize to every single of you, this is certainly not the way HostSailor has built reputation over years. We'll make sure and do everything in our power to fix it ASAP.

Thank you

JohnFilch123 · May 20

Well...

cinwie · May 20

semangat

jcn50 · May 20

@HostSailor said: This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

https://clients.hostsailor.com is "behind" CloudFlare, can you elaborate on why you can't press on the "Under Attack!" button?..

emperor · May 20

@default said:

@wadhah said:

@default said:

@JabJab said:
what a shit show

I hope this does not have something to do with the fact that this low-end provider accepted linking to popular IRC networks which can become a magnet for DDoS sometimes. For example: @HostSailor has already accepted to support a server of a a major IRC network filled with bots (Undernet). I dare to assume @HostSailor has accepted other networks too.

they host undernet? mamma mia. even though i never support piracy and illegal stuff i will personally make them an irc filter and give them an excellent deal on ddos mit in ams

Yes, @HostSailor does support Undernet with a server, but was added recently.

HostSailor is not the only one though. We also have @gigahost and @SpartanHost - each offering a server listed on Undernet's servers page.

I only hope providers have very good DDoS protection when they get this kind of courage.

I believe their server is 2 years or more old..
Gigahost's one is most stable so far

jcn50 · May 20

@cinwie said: semangat

pantat

tentor · May 20

@jcn50 said:

@HostSailor said: This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

https://clients.hostsailor.com is "behind" CloudFlare, can you elaborate on why you can't press on the "Under Attack!" button?..

Maybe they attack network (IPs of HostSailor) and not the website specifically? Under attack will make no difference in this case.

jcn50 · May 20

@tentor said: Maybe they attack network (IPs of HostSailor) and not the website specifically? Under attack will make no difference in this case.

I thought the idea of CloudFlare was to hide the real IP(s)... so that attackers wouldn't know where to strike~

jcn50 · May 20

The irony: https://hostsailor.com/blog/things-to-consider-while-choosing-ddos-protection has a nice Loading... on the page~

cinwie · May 20

@jcn50 said:

@cinwie said: semangat

pantat

kasar om, pantek aja 😂

jcn50 · May 20

@cinwie said: kasar om, pantek aja 😂

Paman itu merindukan istrinya .
Anyway~

cinwie · May 20

@jcn50 said:

@cinwie said: kasar om, pantek aja 😂

Paman itu merindukan istrinya .
Anyway~

mari banyak berdoa saja, file ku di sana semua

jcn50 · May 20

@cinwie said: mari banyak berdoa saja, file ku di sana semua

You know we are required to talk in English here?.. I hope I won't get the moderator(s) on my a$$ again... I don't think there is a loss of data anyway.

cinwie · May 20

@jcn50 said:

@cinwie said: mari banyak berdoa saja, file ku di sana semua

You know we are required to talk in English here?.. I hope I won't get the moderator(s) on my a$$ again... I don't think there is a loss of data anyway.

Maybe I'm too bored and have encountered language problems here, hopefully nothing is missing

Calypso · May 20

@HostSailor said:
Hello everyone,

Standarized bla bla deleted. It's not inconvenience, it's a clear showing of incompetence of you as a company. It's beyond inconvenience.

intermittently unreachable.

Downplaying it. Don't do that. Your BGP announcements have gone for almost half a day now. Then it's not "intermittently unreachable", it's just dead. Gone.

This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

That doesn't explain that the BGP announcements have gone. Or there is not a well thought infrastructure for it. Never experienced it in 30+ years.

I sincerely apologize to every single of you, this is certainly not the way HostSailor has built reputation over years. We'll make sure and do everything in our power to fix it ASAP.

What reputation? The one I've seen flowing down the drain last couple of weeks? The major part of that reputation being destroyed is not the fact that things go wrong though. It's the way HostSailor treats them, communicates and takes way too long time to fix. And yes, I'm a technician, I know what you can face in the real world. But even if you are facing a real big DDoS, in 12 hours technicians should have come up with a plan B that's not using that infrastructure to get at least the IP ranges announced.

AFAIK you normally can't even face a DDoS anymore when the IP ranges are not routed to you...

And stop using the same bullshit over and over again about "we understand", "we feel", "we apologise" etc. It has become unbelievable. And really, really think about PROPER compensation for all affected users. When this issue is over, even when it is in 1 hour, nobody will use the VPS for proper purposes for the next couple of weeks to see if it's really "back to normal" - so it has been unusable for at least 2 months.

JabJab · May 20

I love e-mails!

I would love more e-mails like that for IPv4... lol

// This makes me wonder if this DDOS has anything to do with AMS issues - they they closed/kicked someone that is now taking revenge? Or they changed routing, someone ("someone") applied for refund, was denied and now is taking a revenge? Timing is too good to be true

Calypso · May 20

@JabJab said:
I love e-mails!

I would love more e-mails like that for IPv4... lol

// This makes me wonder if this DDOS has anything to do with AMS issues - they they closed/kicked someone that is now taking revenge? Or they changed routing, someone ("someone") applied for refund, was denied and now is taking a revenge? Timing is too good to be true

I've limited my monitoring; had over 1000 mails this morning. And i'm packing to go on holiday.

default · May 20

@emperor said:

@default said:

@wadhah said:

@default said:

@JabJab said:
what a shit show

I hope this does not have something to do with the fact that this low-end provider accepted linking to popular IRC networks which can become a magnet for DDoS sometimes. For example: @HostSailor has already accepted to support a server of a a major IRC network filled with bots (Undernet). I dare to assume @HostSailor has accepted other networks too.

they host undernet? mamma mia. even though i never support piracy and illegal stuff i will personally make them an irc filter and give them an excellent deal on ddos mit in ams

Yes, @HostSailor does support Undernet with a server, but was added recently.

HostSailor is not the only one though. We also have @gigahost and @SpartanHost - each offering a server listed on Undernet's servers page.

I only hope providers have very good DDoS protection when they get this kind of courage.

I believe their server is 2 years or more old..
Gigahost's one is most stable so far

Considering HostSailor is not in the public list of website, I assume it's under testing or beta or something.

Anyway, I find it fascinating how some low-end providers go with major IRC networks which are a magnet for DDoS. It is like the low-end providers want to dream big and are looking for trouble.

* - Capelle.NL.EU.Undernet.Org Message of the Day - 
* - 2025-2-24 21:06
* - 
* -                      ***
* -                     * //*
* -                      //*
* -            **       **/|      **
* -          ************//***********
* -          ***********//************
* -            **      |/**       **
* -                     **/|
* -                     *//
* -                     //*
* -                    |/**
* -                     **/|
* -         ***         *//         ***
* -          *****      //*      *****
* -           *******  |/**   *******
* -                *************
* -                   *******
* -                      *
* - 
* -  _   _           _     ____        _ _
* - | | | | ___  ___| |_  / ___|  __ _(_) | ___  _ __
* - | |_| |/ _ \/ __| __| \___ \ / _` | | |/ _ \| '__|
* - |  _  | (_) \__ \ |_   ___) | (_| | | | (_) | |
* - |_| |_|\___/|___/\__| |____/ \__,_|_|_|\___/|_|
* - 
* - 
* - [ Web Hosting, Dedicated, Managed, VPS & Shared Hosting ]
* - 
* -                       Visit us at,
* -              -= https://www.hostsailor.com =-
* - 
* - [ Your Host: Capelle.NL.EU.Undernet.org ]
* - [ IPv4: ircu2.hostsailor.com ]
* - 
* - [ Server usage Policy ]
* - [ no clones/drones ] [ no spamming] [ no flooding ]
* - 
* - HostSailor can refuse access to anyone using this server
* - at any time and without any notice.
* - 
* - By using this server you agree to the terms above and also
* - are bound by the terms stated in Undernet's Acceptable use
* - Policy, which can be viewed at:
* - 
* - http://www.undernet.org/aup.php
* - 
* - [ Server Information ]
* - [ Ports: 6660-6669, 7000 - open for client connections ]

emperor · May 20

@default said:

@emperor said:

@default said:

@wadhah said:

@default said:

@JabJab said:
what a shit show

I hope this does not have something to do with the fact that this low-end provider accepted linking to popular IRC networks which can become a magnet for DDoS sometimes. For example: @HostSailor has already accepted to support a server of a a major IRC network filled with bots (Undernet). I dare to assume @HostSailor has accepted other networks too.

they host undernet? mamma mia. even though i never support piracy and illegal stuff i will personally make them an irc filter and give them an excellent deal on ddos mit in ams

Yes, @HostSailor does support Undernet with a server, but was added recently.

HostSailor is not the only one though. We also have @gigahost and @SpartanHost - each offering a server listed on Undernet's servers page.

I only hope providers have very good DDoS protection when they get this kind of courage.

I believe their server is 2 years or more old..
Gigahost's one is most stable so far

Considering HostSailor is not in the public list of website, I assume it's under testing or beta or something.

Anyway, I find it fascinating how some low-end providers go with major IRC networks which are a magnet for DDoS. It is like the low-end providers want to dream big and are looking for trouble.
* - Capelle.NL.EU.Undernet.Org Message of the Day - 
* - 2025-2-24 21:06
* - 
* -                      ***
* -                     * //*
* -                      //*
* -            **       **/|      **
* -          ************//***********
* -          ***********//************
* -            **      |/**       **
* -                     **/|
* -                     *//
* -                     //*
* -                    |/**
* -                     **/|
* -         ***         *//         ***
* -          *****      //*      *****
* -           *******  |/**   *******
* -                *************
* -                   *******
* -                      *
* - 
* -  _   _           _     ____        _ _
* - | | | | ___  ___| |_  / ___|  __ _(_) | ___  _ __
* - | |_| |/ _ \/ __| __| \___ \ / _` | | |/ _ \| '__|
* - |  _  | (_) \__ \ |_   ___) | (_| | | | (_) | |
* - |_| |_|\___/|___/\__| |____/ \__,_|_|_|\___/|_|
* - 
* - 
* - [ Web Hosting, Dedicated, Managed, VPS & Shared Hosting ]
* - 
* -                       Visit us at,
* -              -= https://www.hostsailor.com =-
* - 
* - [ Your Host: Capelle.NL.EU.Undernet.org ]
* - [ IPv4: ircu2.hostsailor.com ]
* - 
* - [ Server usage Policy ]
* - [ no clones/drones ] [ no spamming] [ no flooding ]
* - 
* - HostSailor can refuse access to anyone using this server
* - at any time and without any notice.
* - 
* - By using this server you agree to the terms above and also
* - are bound by the terms stated in Undernet's Acceptable use
* - Policy, which can be viewed at:
* - 
* - http://www.undernet.org/aup.php
* - 
* - [ Server Information ]
* - [ Ports: 6660-6669, 7000 - open for client connections ]

My bad, i though you speak about pipera server, this indeed is newer

Nyr · May 20

@default said:

@JabJab said:
what a shit show

I hope this does not have something to do with the fact that this low-end provider accepted linking to popular IRC networks which can become a magnet for DDoS sometimes. For example: @HostSailor has already accepted to support a server of a a major IRC network filled with bots (Undernet). I dare to assume @HostSailor has accepted other networks too.

Indeed HostSailor hosts multiple IRC networks, and the upstream TNGNET too.

Both HostSailor and TNGNET have an... interesting past, and an interesting set of customers.

tfgp99 · May 20

@HostSailor said:
Hello everyone,

First of all sincere apologies for the inconvenience all of you are facing. We are genuinely sorry for this experience.

We are aware that a number of services, including Amsterdam VPSs, our website, client area, and other systems, have been intermittently unreachable.

This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

Our engineers have been working on this continuously for many hours, applying filtering and routing adjustments to reduce the impact. Some prefixes and locations are already stable again, while work is still ongoing on others.

Please know we really understand the pain, especially for customers who have only recently started seeing stable service again after the previous AMS issue. We know many of you rely on these VPSs for production workloads, and another disruption so soon is the last thing you should have to deal with.

Please rest assured that this is being treated with the highest priority and we are doing everything possible to restore full stability as quickly as we can.

We will continue to update this thread as more information becomes available.

I sincerely apologize to every single of you, this is certainly not the way HostSailor has built reputation over years. We'll make sure and do everything in our power to fix it ASAP.

Thank you

I only can see excuses.
My machine is still off. Please solve.

default · May 20

@tfgp99 said:

@HostSailor said:
Hello everyone,

First of all sincere apologies for the inconvenience all of you are facing. We are genuinely sorry for this experience.

We are aware that a number of services, including Amsterdam VPSs, our website, client area, and other systems, have been intermittently unreachable.

This is the result of a large, distributed DDoS attack specifically targeting multiple IP ranges across our network. The attack is affecting several locations simultaneously, which is why customers may also notice issues outside of Amsterdam.

Our engineers have been working on this continuously for many hours, applying filtering and routing adjustments to reduce the impact. Some prefixes and locations are already stable again, while work is still ongoing on others.

Please know we really understand the pain, especially for customers who have only recently started seeing stable service again after the previous AMS issue. We know many of you rely on these VPSs for production workloads, and another disruption so soon is the last thing you should have to deal with.

Please rest assured that this is being treated with the highest priority and we are doing everything possible to restore full stability as quickly as we can.

We will continue to update this thread as more information becomes available.

I sincerely apologize to every single of you, this is certainly not the way HostSailor has built reputation over years. We'll make sure and do everything in our power to fix it ASAP.

Thank you

I only can see excuses.
My machine is still off. Please solve.

My machines are down too.

khalequzzaman · May 20

Seems my VPS is down too!

tfgp99 · May 20

Better to say that i know the issue is on IPv4 (BGP), IPv6 is affected as well.

tongtong · May 20

My machine has returned to normal. The period of abnormality lasted approximately 12 hours; the server did not go down during this time, so it was likely a purely network-related configuration issue.
top - 18:13:38 up 12 days, 7:57, 1 user

cinwie · May 20

14 hours have passed, finally it's back to life

Calypso · May 20

@tongtong @cinwie Where are your VPSes located? Mine in Amsterdam is still dead and so are the HostSailor sites

zed · May 20

@wadhah said:

@jcn50 said:

@wadhah said: if anyone is angry because of the downtime and wants to transfer me their servers i will gladly take them thank you for your attention

With their AMS location down, their clients portal down and their SolusVM down: it is unknown if anything is even transferrable... except if you want to transfer a /dev/null string?

i am a patient horse, i'll wait

i'll take all your hostsailor vpses espsecially any lax ones i never tried their us stuff

i'll take ams only lax is a ghetto

JabJab · May 20

My AMS is back.

// However for how long is a different question.

zed · May 20

my ipv4 is still down, ipv6 came back a few hours ago.

amusingly (not really) ipv6 was FINE until SOMEBODY (you know who you are~) posted here that it was working. it died soon after. coincidence?!

Howdy, Stranger!

Categories

In this Discussion

HostSailor AMS network issues

Comments

Howdy, Stranger!

Quick Links

Categories

In this Discussion

HostSailor AMS network issues

Comments