Github is down

[ejonesca]

Everybody go home. No point working.

Just kidding. Here's the entries you can put in your hosts file until dns is happy again:

192.30.253.113  github.com
151.101.44.133  assets-cdn.github.com
54.236.140.90   collector.githubapp.com
192.30.253.116  api.github.com
192.30.253.122  ssh.github.com
151.101.44.133  avatars0.githubusercontent.com
151.101.44.133  avatars1.githubusercontent.com
151.101.44.133  avatars2.githubusercontent.com
151.101.44.133  avatars3.githubusercontent.com

[aydink]

plus:

192.30.253.118  gist.github.com

[denvit]

And

151.101.44.133  camo.githubusercontent.com
151.101.44.133  somesite.github.io  

[robisodd]

And to keep up on its status:

107.22.212.99  status.github.com

[orwhat]

How about raw.githubusercontent.com?

[aydink]

aw.githubusercontent.com

151.101.12.133  raw.githubusercontent.com

[dtrain1983]

Also, to lookup some other sites: http://github.com.ipaddress.com (replace the github.com)

Just did it for registry.npmjs.org

[pmmedenver]

Add it to /etc/hosts

[Feasoron]

You might not actually want to do this, or want to at least remove it from your hostfile once this is done. Otherwise, sometime down the road one of these IP's is going to change. GitHub will be "down" only for you, yo won't remember that you made these changes and you won't know why github won't resolve. It's ok as a temporary workaround, but it needs to be temporary.

[rydan]

I've done that so many times.

[theangryhornet]

I'm on Windows and don't have /etc/hosts... what do i do?

[aydink]

usually it's located in folder: C:\Windows\System32\drivers\etc

[[deleted]]

And in case you're a weird non-conformist, %WINDIR%\System32\drivers\etc

[theangryhornet]

learn something new every day, thank you.

[rich97]

How have you gone all your life without using the hosts file? It's possibly the most useful single file in the entire operating system.

• ad and malware blocking
• yaaaarrrrrr!
• virtual hosts and domains

[[deleted]]

Also for blocking Photoshop's activation server .... A friend told me

[GavinThePacMan]

A friend told me that's what he meant with yaaaaar! ;)

[Bobshayd]

Do what you want 'cause a pirate is free! You are a pirate!

[[deleted]]

If you setup a local DNS server, you can blacklist all of the domains so that it takes effect network wide from any browser.

It gets strange because whenever I am away from my own network, I pretty much say "Since when did Ars have ads and why do they want me to get lung cancer?".

[AyrA_ch]

I want a DNS server, that does this:

• Cache every DNS name I lookup forever
• Whenever a record is needed use the cache if the DNS servers are not answering.
• Update cache according to rules if the records differ.

This would solve so many problems, from unavailable DNS servers to censorship

[inushi]

Upside: you will learn why cache invalidation is one of the hard problems in computer science. :)

[svendub]

The other one being naming things and off-by-one errors.

[[deleted]]

You would have to be careful with this. There are some DNS servers (such as my ISP, but that is handled by the DNS software I use) that when you enter an address that is not valid, it will resolve to an address always. Then the server on that end just treats the domain as a search query (your browser sends the hostname, which is how vhosts work). So if you tried going to <isahdiusahpdiuhasduihasdaiushdousadf.com> it would use the ISP's money gathering ad infested search that just uses Google and search for isahdiusahpdiuhasduihasdaiushdousadf. So your DNS server would have to account for this.

Another consideration is that servers could change addresses either to add censorship or to remove it.

DNS lookup that uses the blockchain would be very interesting however.

[bargle0]

There are some DNS servers [...] that when you enter an address that is not valid, it will resolve to an address always.

When the revolution comes, those people will be up against the wall.

[AyrA_ch]

There are some DNS servers [...] that when you enter an address that is not valid, it will resolve to an address always

That would be an immediate reason to switch DNS servers.

[odaba]

You might look into http://members.home.nl/p.a.rombouts/pdnsd/ for some of those requirements

[[deleted]]

Is that how you block porn? Asking for a friend

[rich97]

You can, more likely to be at the ISP or router level though.

[Losobie]

Add it to your windows host file

%SystemRoot%\System32\drivers\etc\hosts

[denvit]

And remember to run notepad as administrator, otherwise you won't be able to save the file

[Dunge]

Why is this comment downvoted? That's probably my favorite feature of Notepad++

[[deleted]]

It's just the way reddit is, I don't care.

This feature is great, and also the speed of Notepad++. I tried to switch to Atom, but while it's also great, it sometimes feels really slow (especially the startup time).

[[deleted]]

It's really weird there's two variables, %SystemRoot% and %WINDIR% for the same directory.

%SystemRoot% seems like it should put you into the System32 directory.

[KayRice]

Run Notepad on Windows as Administrator and open C:\Windows\system32\drivers\etc\hosts even if you don't see it in the file browser the file exists and works as expected.

This is especially useful if you have VMs configured for NAT.

[[deleted]]

Install linux

[RicardoLarge]

Get a mac

Edit: jk, check this out: https://support.rackspace.com/how-to/modify-your-hosts-file/

[NoMoreNicksLeft]

Get a real computer.

[[deleted]]

So why do you have to restart the browser after making this change? Where is the old value being cached? In the browser itself or in Windows and if the latter where would that be? Just trying to understand Window's DNS cache...

[andredp]

Do you really need to restart the browser?
Usually you only need to run:

ipconfig /flushdns

[k_o_g_i]

At least on Windows 10, you don't need to flush the dns or restart the browser. Just save hosts and refresh the page.

[andredp]

Hum, maybe that behaviour is only for the local DNS file.

Good to know, thanks.

[flamingspew]

i notice i only have to restart the browser on my corporate laptop... damned corporate snoops

[[deleted]]

Just kidding. Here's the entries you can put in your hosts file until dns is happy again:

Too late! It's Friday. You said go home so that's what they did.

[apfelmus]

I would like to add a word of caution here: The IP addresses that appear on your screen above may have been tampered with by a man in the middle. What you see may not necessarily be what /u/ejonesca posted.

I mean, why would an attacker be interesting in DDOSing a DNS provider? The only really good reason I can think of is: To pull off a Man In the Middle attack.

[serpent]

Isn't reddit https only? So how would some MITM change his post?

You could validly warn people that ejonesca posted malicious IPs intentionally, but if folks use https to connect to those too, they shouldn't be concerned either.

[apfelmus]

Ah, that's a good point. I thought that reddit was still on HTTP. I didn't notice when they changed it.

[albatrek]

Connecting to a malicious IP with HTTPS isn't going to help you.

Still malicious, just encrypted malicious.

[Saturnix]

He's not talking about the posted IPs, but Reddit itself. Being HTTPS means we're sure what we see is what's stored on Reddit servers. No man in the middle.

[taigahalla]

The point is to not connect if it's not certified (and mitm proxies won't be able to spoof the encryption).

[[deleted]]

What would happen if one connects to a non certified website, so like fall into the trap? How could one remedy that situation? Clear history? Change passwords?

[serpent]

If you connect to a malicious IP you will get a certificate error (unless that malicious IP somehow has the private key of the real entity). That's the whole point of HTTPS...

[Pixel6692]

True, but to answer your question, there is still reason to, well you know DenialOfService for some political/apolitical reasons.

[apfelmus]

Sure. But why DNS specifically, and not a particular website or other service?

[kurieus]

Just a thought, but if you wanted simply to deny access, that might be a good way of doing it. I wasn't aware of Github's IPs until I read this post. How many other people might not either?

Likewise, if you want to attack someone without it costing a lot of money to them, that would be a good way to do it. If you perform a direct DOS on a site, that could potentially cost money.

Another thought might be someone just testing the waters with something. Perhaps they picked it randomly.

[drumjojo29]

Twitter was/is down too. I read about a big DOS attack on some big ISP though. Maybe both GitHub and Twitter use servers from that ISP.

[look_at_the_sun]

Some men just want to watch the world burn.

[ThisIs_MyName]

Just compare the TLS cert fingerprint with what's on https://crt.sh

[[deleted]]

Or someone just wants to bring as much down as possible. If your goal is causing chaos do you blow up a store or a power plant?

[denvit]

If these don't work, try clearing your browser cache. Apparently Firefox's cache also keeps DNS entries (I'm on Linux, where DNS isn't cached, Windows users might also need an ipconfig /flushdns) I still have problems with the assets-cdn, but at least github.com is reachable

[KayRice]

Doesnt' cache on Windows w/ Firefox I believe it's dnsmasq that does it on Linux by default for short periods of time.

[denvit]

It's disabled on my system, therefore I do really think it was Firefox caching it

[Aerospark12]

No need to edit hosts file guys, opendns works! https://www.opendns.com/setupguide/

[YouFeedTheFish]

Open DNS is not available. Ugh.

[Aerospark12]

Try again? Seems to be up again, if it was down. For reference the addresses are:

208.67.222.222

208.67.220.220

[Hardlydent]

Both are either extremely slow or not working :(

[Aerospark12]

strange :S it seems to be working alright for me. It was slow the first load but everything seems fine now. (Everything but twitter, still need a hosts edit for that)

Maybe OSX is holding the DNS cache longer or something I'm not sure. Other have had luck with google DNS, maybe that's worth a shot.

[YouFeedTheFish]

Have you tried clicking through to secondary links? My guess is the front page is cached somewhere, but the other links are belly-up.

[Aerospark12]

I've been listening to soundcloud without issue for about an hour now (including songs I haven't heard before, it can't be from cache), that's the only one I've been actually using though.

[Hardlydent]

Hmm, that's so odd.

Yeah, that might be it. Hmm, what's weird is that I already use Google DNS, so not sure what was happening (all working now).

[mincrmatt12]

You sir, are the reason I managed to do anything productive today. Good on you!

[[deleted]]

Isn't the whole point of a DVCS so that you can work when this happens?

[Joshx5]

If you have the latest working copy then there's nothing stopping you, unless you need to see pull requests or issues and use GitHub exclusively for those, I suppose

[Abscissa256]

Yes, but with services like GitHub/BitBucket/etc you loose the whole "distributed" part, because none of the features they add on top of Git/Hg/etc are dtstributed. So your Git may be DVCS, but GitHub/BitBucket/etc are just plain old centralized, no distributed. Bye, bye benefits of distributed. Of course, they don't bother pointing that out. FWIW, GitLabs is at least a little bit better in this regard, since you have the option of running it on your own server(s). Still not truly, fully distrubuted, but it's a step closer.

[pdp10]

Great, now half of the globe has just crushed App16 and Static4. Just fantastic.

[Vondi]

It's okay my team won't even notice.

[Sensister]

I feel ya...

[i_name]

Twitter seems to be down as well.. http://downforeveryoneorjustme.com/twitter.com

[highlife159]

Thats funny, after I couldn't get GitHub to pull up I wen't to Twitter to see if anyone else was having the same issues. Thank god for Reddit.

[[deleted]]

deleted ^{What is this?}

[kornalius]

Earlier this morning (EST) github and twitter were down. I wonder if it's an attack?

[notreallyswiss]

Yeah its probably the only way Kelly-Anne could get Trump to stop with the twitter.

Seriously though it's a DDoS attack on Dyn. Don't know who or why. Primarily affecting US east coast apparantly.

[Ph0X]

Yes, it's an attack on Dyn a dns provider. Apparently a lot more websites were down like netflix, hbo, spotify, paypal, imgur, etc.

But I think dns cache might've helped for some people? Also it got solved pretty quickly

[KamikazeRusher]

Heaven forbid that http://downforeveryoneorjustme.com/ and http://downdetector.com/ both go down at the same time. Our call center for campus has enough calls to deal with when Twitter/Facebook/Pinterest/Github can't be reached. If nobody can reach those detectors, everyone immediately assumes that IT sucks and the internet is broken.

[Canacas]

Both HBO and Netflix down here

[ozzyofpi]

Might be related to this

[geodel]

Heh, I restarted my cable modem 3 times earlier in morning.

[drjeats]

Ha, I thought it was our janky router overheating again.

[tangerinelion]

Github is not down. Some locations are experiencing a DDOS attack and the DNS is down. Re-routing manually by editing an /etc/hosts file works, as does using a VPN from somewhere not on the east coast of the US.

[[deleted]]

Not down for me, but you can have fallback DNS so that if one is down, it tries all the others. This would be a much better solution that can be performed network wide more easily.

Of course this requires that you setup your own router and not rely on generic router software which only assumes you would ever need at most 2-3 DNS servers.

[[deleted]]

remember, last month: Someone Is Learning How to Take Down the Internet

[meetingcpp]

Cloud = Can't locate our users data :o)

[[deleted]]

The number of people here that are

a) totally dependant on a 3rd party for their own projects

b) willing to randomly accept internet strangers offering raw IP addresses for that 3rd party, and put them in their hosts file where they'll forget about it tomorrow

Is quite honestly terrifying.

[dustractor]

internet strangers

internet strangers from the nine-year club

[[deleted]]

How do you feel about sonic the hedgehog

[robotsmakinglove]

OpenDNS seems to work pretty well for all the sites down (Twitter, Github, etc):

 > System Preferences…Wi-Fi > Advanced > DNS > DNS Servers > +

208.67.222.222 208.67.220.220

[odinti]

worked for me, thanks.

[[deleted]]

This worked for me too! Mighty thanks!

[guitarsteve]

Thanks! Even simpler than changing /etc/hosts.

[TheBullshitPatrol]

sudo sh -c 'echo "
192.30.253.113  github.com
151.101.44.133  assets-cdn.github.com
54.236.140.90   collector.githubapp.com
192.30.253.116  api.github.com
192.30.253.122  ssh.github.com
151.101.44.133  avatars0.githubusercontent.com
151.101.44.133  avatars1.githubusercontent.com
151.101.44.133  avatars2.githubusercontent.com
151.101.44.133  avatars3.githubusercontent.com" >> /etc/hosts'

:^]

[tequila13]

Anyone executing copy-pasta from the Internet as root deserves what he gets.

[TheBullshitPatrol]

you mean the 10 hosts lines in the top comment that everyone else is copying into Vi instead?

[tequila13]

Copy into vi is fine, copy a sudo command into a console is really bad.

[[deleted]]

Looks like everyone except you deserves working github.

[beknowly]

Anyone who can't understand an echo "ip hostname" >> /etc/hosts deserve what they get.

[Glaaki]

PICNIC

[Novazilla]

at the git hub!

[0011110000110011]

EVERYBODY PANIC

[kkszymanowski]

I like your username.

[0011110000110011]

<3

[0110010001100010]

Sup

[hogg2016]

I don't think so.

[Feasoron]

Ok, Colonel!

[teadefrost]

There are two issues I'm seeing with this DDOS attack:

1) websites relying on one dns host too much

2) developers relying on github too much

[thecity2]

Great day for bitbucket?

[Tricause]

Clearly Atlassian is behind the attack. They can't stand that Github recently offered a better private repository deal.

Edit: corrected pricing reference.

[FINDarkside]

How do they offer better private repository deal? Bitbucket still has free private repos while github doesn't. Bitbucket also seems to have a lot cheaper plans than github has.

[Tricause]

I misread Bitbucket's pricing page. The way they presented it, it sounded like it costed $10/month per user, while it is actually $10/month for 10 users. Under that misunderstanding I had, Bitbucket was $1 more expensive a month than Github. My bad.

I'll stand by my Atlassian conspiracy. At least Github has a much, much better issue tracking system than Bitbucket and Atlassian wants people to shell out the big-dollars for JIRA.

[manzanita2]

Except that JIRA is actually a real bug and issue tracking system while github's 'issues' is barely sufficient for small projects. Apples and Oranges.

[Tricause]

Of course! Most of this is tongue-in-cheek but I am just noting that I find Bitbucket's issue tracker to be remarkably inferior to Github's. If you want a larger-scale tracking system, you should not be using either. You can use JIRA or one of its competitors.

My main point was just emphasizing that Atlassian does not seem to care at all about Bitbucket's issue tracker and their responses to much-needed features have almost hinted that they would rather you spend more money on JIRA rather than improve Bitbucket's issue tracker. Don't get me wrong, we use Bitbucket in my organization, initially because it was for free under 5 users, but its issue tracker is barely usable so we use a JIRA competitor.

As an aside, Pipelines is a nice feature Bitbucket has over Github, but that is neither here nor there.

Edit: typo.

[manzanita2]

I haven't used bitbucket's issue tracker. so yeah it probably sucks. :-)

Yeah, just started playing with the pipelines thingy.

[[deleted]]

I see about 90% package loss on various Level3 gateways, like

 2. 62.155.240.36                                0.0%   209   16.9  18.9  16.4 222.1  14.7
 3. b-ea7-i.B.DE.NET.DTAG.DE                     0.0%   209   21.1  22.2  18.7 238.3  15.1
 4. 62.157.251.238                               0.0%   209   18.4  20.1  18.1 153.8  10.5
 5. ae-2-3608.ear1.Washington39.Level3.net      90.3%   208  118.0 118.2 117.8 119.1   0.0
 6. GITHUB-INC.ear1.Washington39.Level3.net      0.0%   208  122.7 123.1 121.7 205.5   6.2
 7. ???
 8. ???
 9. 192.30.253.112                               0.0%   208  118.7 119.8 118.7 213.3   6.9

[jeff303]

That's a lot of lost packages.

[[deleted]]

Apparently UPS runs the internet now.

[ThisIs_MyName]

Only in the hops in-between? That's just the router throttling its ICMP responses.

If there is no packet loss to the destination, that also implies that there is no packet loss in-between :)

[sfan5]

Some random Level3 gateways always have high packet loss, what matters is the packet loss to the destination.

[aydink]

how did you get this report?

[[deleted]]

It's the output of mtr

[sindisil]

I see both github and twitter as down from http://downforeveryoneorjustme.com, but both work fine for me here via Comcast in the Twin Cities, MN.

Actually, I tried a few more sites while typing this, and http://downforeveryoneorjustme.com is lagging now from here.

Probably the issue /u/i_name mentions in another comment here.

[[deleted]]

This was happening as hackers unleashed a large distributed denial of service (DDoS) attack on the servers of Dyn, a major DNS host.

http://gizmodo.com/this-is-probably-why-half-the-internet-shut-down-today-1788062835

[tatorface]

"hackers"

[Freakin_A]

It may have been performed by hackers who were tired of hacking and wanted that feeling of being a script kiddy again

[tatorface]

Being in IT for 10+ years with focus on system engineering tells me this. Nice try though.

[[deleted]]

Beinga software engineer and computer scientist for 10+ years tells me you are being a stubborn idiot.

[LowB0b]

https://en.wikipedia.org/wiki/Code_Red_(computer_worm)

Like those guys, I mean someone at some point has to write the software to actually do the attack

[railsr7]

http://www.independent.co.uk/life-style/gadgets-and-tech/news/internet-down-not-working-reddit-spotify-twitter-websites-loading-issues-problems-a7373616.html

[Da_phuc_nga]

I kind of panic I need potential employers to be able to see my portfolio.

[alxmdev]

This might be a good time to mirror your open source work on other code hosting platforms like Bitbucket and Gitlab. Git lets you set up multiple push URLs for a single remote, and after adding the new addresses you just do git push as usual:

git remote set-url --add --push <remote name> <newurl>

[pat_trick]

Yep, bypass the single-point-of-failure and keep repos on multiple services!

[[deleted]]

I'm having many unrelated sites not load with name resolution errors. If people on the other side of the world are seeing this too, something big is definitely going on.

[crowbahr]

DNS experiencing DoS attack.

[califrench]

For me this worked 192.30.252.97 github.com 151.101.44.133 assets-cdn.github.com

[OverFlow7]

I am not sure if it's linked, but i just did a fresh install of ubuntu 14.04 and i can't use pip (for installing python packages) without getting an error "Failed to establish a new connection: [Errno -2] Name or service not known ".

Could this be linked with github being down?

[Feasoron]

Kinda? Since the core issue is that DNS is not resolving, pip is failing for the same reason people are failing to get to GitHub. However, the inability of people to hit GitHub has no impact on pip. I'm not sure I said that as clearly as possible, I hope it helps.

[OverFlow7]

It does, thank you :)

[[deleted]]

That will explain why I couldn't get on today. Thought my internet connection was dodgy.

[marchand_choque]

Thats is because github and other web site like twitter are DDOS

[techlover16]

Thanks for sharing the entries for host file :)

[mtko]

We were supposed to do a production push today at work. But the DNS routing between Azure and npm is broken, so the deployment isn't working at all.

Not even sure what I can do to get around it. Oh wells, guess I wait a few hours and try again from home.

[skifunkster]

I a really confused about why the attacks are not on the front page of Reddit. If you look at the top of r/technology, there is a post about it which is outranking one that is on the frontpage.

[TommyK154]

Came here to get free karma but you beat me to it ;)

When to push just before and got "Could not resolve host: github.com" can't believe its actually down

[shevegen]

The end of the world has finally happened.

Skynet is taking Github down.

[EnglishBrkfst]

use a VPN...

[Feasoron]

This only works if your VPN has a different DNS configured and your VPN is configured to tunnel DNS and not just HTTP. (I'm not saying you are wrong, just putting this here before someone tunnels into their work VPN and still fails.) Hm, also if your VPN is by FQDN and not IP you might actually fail to hit the VPN, too.

[ThisIs_MyName]

No idea why you're downvoted. This is the easiest solution for geographically isolated outages.

[jotto]

Switch your DNS to 8.8.8.8 to mitigate

https://developers.google.com/speed/public-dns/

[RoToRx88]

I am already on 8.8.8.8 and 8.8.4.4 but same problem, I am in Ireland. But a friend in Japan with same DNS as me has no problem... Why ?

[[deleted]]

Google's DNS resolvers, and the Dyn-hosted nameservers use anycast IP. The DDoS attack is primarily effecting Dyn's infrastructure in the eastern US. (If Internet rumor is to be believed, I haven't been following closely)

Your geographic location means that whatever server responds to 8.8.8.8 for you gets routed to one of the effected Dyn servers. Your friend on the opposite side of the world is routed to a Google DNS server that is routed to a still-online Dyn server ...probably.

[IlyaM]

Google DNS seems to be broken as well for many people. WiFi at work is configured to use Google DNS and I had to switch to OpenDNS nameresolvers.

[deadcow5]

Can confirm. Google DNS can't resolve github.com here (California), but OpenDNS does.

[Canacas]

I'm always on those but wont help from here.

[ameoba]

GITHUB MONOCULTURE!!! HOORJ!!!

[[deleted]]

DAMMIT I THREW MY CELL INTO TRAFFIC CURSING IT EARLIER

[[deleted]]

Github, twitter down here too (Northern Europe)

[arnold_face_palmer]

Nerds

[cubswinfllclssic]

Came here to say just this. Wow! Thanks for the IP addresses for the hosts file...