All services appear to be working restored, we will continue to monitor and update.

Update 1 - 18th May 2026 16:41

The Data Centers initial fix didn't hold. They are rebooting core servers to stabilise. We are hoping it should be corrected shortly.
Cause appears to be an upstream routers are "flapping" (up > down > up transitions)

We are seeing periods of sustained uptime followed by short bursts of flapping, which is causing the disruption some clients are experiencing.

Good new is that our latest cluster network is fully stable and unaffected, we are working on migrating all clients onto the new infrastructure and away from the aging network data center.

Initial Report - 18th May 2026 13:54

We are aware of a network issue that is affecting connectivity to cloud3 and cloud4 right now. We are investigating the cause as we speak.

We will be upgrading node1.momentumcluster.com during this maintenance window.

Some services may be unavailable during this window.

We will be updating and patching software, adding JetBackups for self service backup management, hardening security and reviewing our migrations from cloud3 that occured during the last 2 weeks.

We apologise for the inconvienence and appreciate your patience while we upgrade your hosting experience.

Update 11 - 3rd May 02:10pm AEST

cloud3 has been returned to service. We are still working on migrating clients to different infrastructure, but at least those who remained should be functional now. We will compile a post-mortum of the events over the past 4 days. But for now we are watching how things are going, and working on cleaning up the existing migration work.

Update 10 - 3rd May 11:42am AEST

We are continuing to migrate clients to new infrastructure. The work continues. If you wish to recieve a progress update we are happy to provide one via email support@momentumhosting.com.au. 

Thank you.

Update 9 - 3rd May 2:36am

We have fully or partially restored as many client accounts that we have either domain management control or DNS control onto new infrastructure, with the remaining clients who we require assistance from them to update their DNS or Name Servers still to come.
We will be reaching out individually to clients who need to update their nameservers or A records as quickly as we can.

If any affected clients have:

a. Your own managed DNS (i.e Cloudflare)
Please update your A record and www record to 139.180.183.136 

or b. Ability to update name servers at your domain registrar (i.e GoDaddy, MelbourneIT, Crazy Domains etc)
Please change your name servers from any that match ns1.momentumdns.com, ns2.momentumdns.com, ns1.cpanel88.net, ns2.cpanel88.net and update them to:
- ns1.momentumcluster.com
- ns2.momentumcluster.com

And after you make the update, please inform us immediately via email (reply to any email notice we have ever sent) so that we can prioritise your restore.

This is our top priority and we will provide more updates as they come in. 

Update 8 - 2nd May 6:08pm

After a fruitless day engaging with our data center partner (Digital Pacific) and their failure to restore connectivity to our network within a reasonable timeframe, we have had to make the decision to migrate affected customers to different infrastructure immediately. We have already started this process, it will be manual and laborious but we can't wait for third parties to drag their feet. We want to assure everyone that we will provide a complete account of everything that has happened over the previous 48 hours to all affected customers, our deepest apologies for this outage, and continued dedication to our customers. 

When the situation was within our control we had everything planned, actioning and was succeeding, we have now encountered a critical hardware fault, and a provider with limited support resources over the weekend. The datacenter is either unable or unwilling to fix within a timely manner so we have been forced to take additional recovery action to restore our clients services. We will provide another update as soon as we can, but we wanted to let you know this has not dropped off our radar, we have been working on this for 3 days straight.

Any affected customers will receive contact from us via email and phone as soon as we have your migration complete if we require your assistance with updating your name servers, or DNS records as we don't control everyones infra setup, so we will liase personally with what we need.

Please know that we are working dilligently to resolve this and we are dedicated to our customers services being online.

Update 7 - 2nd May 11:07am

After another all nighter the server has now encounted a critical hardware failure that requires the techs to perform work on the hardware directly to restore connectivity. Please be patient as we push for the work to be completed quickly.

Update 6 - 12:50pm AEST

Customer accounts are coming online faster now, we are checking each one thoroughly to ensure that the restore process was successful.

Update 5 - 11:10am AEST

All databases have been restored. Most websites are back online. We are working on the remaining accounts and will update again soon. If you've reached out already thank you for your understanding, and thank you all for your patience while we undertake this laborous task. Reach out if you have any questions.

Update 4 - 9:46am AEST

Database restores have almost completed, we should see a lot of websites come back online as soon as it is finished restoring. We appreciate your patience while we work on this problem for you.

Update 3 - 6:51am AEST

We have restored some of affected accounts within the last 10 hours, the remaining accounts are awaiting the restore of the databases which is approximately 3/4 complete. No ETA at this time, we are working hard to restore everything as soon as possible.

Update 2 - 5:55am AEST

One of our shared hosting servers (cloud3) was affected by a critical authentication bypass vulnerability in cPanel/WHM (CVE-2026-41940). The vulnerability was disclosed by the vendor on 28 April 2026, with the patch released the same day. There was no advance warning to hosting providers. Security researchers have since established that this vulnerability had been actively exploited as a zero-day from at least 23 February 2026, more than two months before public disclosure.

The incident on cloud3 resulted in deletion of customer data on the affected server. We are restoring all affected accounts from off-site backups (websites, databases, and mail). Due to the volume of data, restoration is in progress and will continue over the next 24 to 72 hours.

Our other servers were patched on 28 April 2026 and were not affected by this incident. 

No client action is required at this stage. Mail sent to your domains during the outage is being queued by sending servers and will be delivered once your account is restored.

We will update this page as services come back online and publish a full incident report once restoration is complete.

If you're interested in the scale of this problem you can read the techincal breakdown here: https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/

For urgent matters, contact 1800 704 728 or email support@momentumhosting.com.au we are actively monitoring tickets replies in under 15 minutes currently.

Update 1 - 1 May 2026 5:10am AEST

We have contained the exploted machine and have begun restoring user accounts files back on to the server. There is a large number of files to restore, we are working as fast as we can to get everyone back up and running. At this stage it looks like we have lost some customer emails that were received during this window, and possibly prior. We won't know for sure until the restore is complete and our full audit has occured.

We appreciate your patience while we work on this problem, and we want to assure everyone that we are working as quickly as possible - no one has slept since yesterday, we're commited to this issue until it's resolved.

Service Incident - 30 April 2026 6:38pm AEST

One of our shared hosting servers (cloud3) was affected by the cPanel/WHM authentication bypass vulnerability disclosed publicly on 28 April 2026 (CVE-2026-41940). This vulnerability affected all supported cPanel versions and was being actively exploited as a zero-day before a patch was available.

The incident resulted in data deletion on the affected server. We are currently restoring all affected accounts from off-site backups. Websites, databases, and mail are all being restored.

Due to the volume of data involved, restoration is taking longer than we would like. We are working on it continuously and will update this page as services come back online.

No action is required from clients at this stage. Once your account is restored, all websites, email accounts, and databases will resume functioning as normal. Mail sent to your domains during the outage is being queued by sending servers and will be delivered once restoration completes.

We will publish a full incident report once services are fully restored.

Update 1 - 10 May 12:50am AEST

We have identified the issue and are taking steps to bring affected website accounts online. We will have another update by morning.

We are aware of issues on cloud4 relating to some websites and email accounts, we are investigating and will come back with an update as soon as one is available.

Both cloud3 and cloud4 will soon be decommissioned and all clients will be migrated to newer infrastructure we will require some assistance from some clients who have third party DNS or self managed domains. We will reach out to anyone before anything happens.

We are working on this problem with urgency.

Please read the announcement regarding the end of life process for cloud3.

Update 02/02/2025:
https://myaccount.momentumhosting.com.au/announcements/21/Cloud3-Migrations-Started.html

Original Announcement:
https://myaccount.momentumhosting.com.au/announcements/20/cloud3-Migrations-Starting-2025.html 

Service Notification - Update #1

Date: 23 January 2026 16:45 AEST Status: Ongoing - Root Cause Identified Affected Servers: cloud3 (101.0.86.67), cloud4 (101.0.65.98)

Update

We have identified the source of the connectivity issues affecting some customers.

The problem has been isolated to a specific upstream routing path within our datacenter's transit network. Traffic routed via this path is experiencing an MTU limitation causing large packets to be silently dropped. Traffic routed via alternate paths is unaffected, which explains why some customers experience issues while others do not.

This is affecting customers on multiple ISPs including Telstra and Optus.

Current Status

We have implemented a server-side workaround which resolves connectivity for affected customers. We have escalated to our upstream provider with detailed diagnostic information identifying the specific network path involved.

Next Update

We will provide a further update once we receive a response from our upstream provider or when the issue is resolved.

Summary

Some customers connecting via Telstra fixed-line internet services experienced intermittent connectivity issues when accessing websites and email services hosted on cloud3. Affected users may have observed connection timeouts when loading websites or connecting to email, despite being able to ping the server successfully.

Root Cause

A routing change within Telstra's network introduced an MTU (Maximum Transmission Unit) limitation on the network path to our server. The affected network equipment was silently discarding packets larger than approximately 1200 bytes rather than sending the appropriate ICMP fragmentation messages that would allow our server to automatically adjust.

This type of issue, known as a "PMTU black hole," causes TCP connections to establish successfully but then fail when transferring data. The problem only affected customers whose traffic was routed through the affected Telstra network path.

Resolution

We have implemented TCP MSS clamping on the server to limit outbound packet sizes. This ensures reliable connectivity regardless of MTU limitations on upstream networks.

Impact

• Customers on other ISPs including Starlink, Optus, and TPG were unaffected
• No data was lost
• No server configuration or hardware was at fault

We apologise for any inconvenience caused. If you continue to experience connectivity issues, please contact our support team.

Our SMTP service Postal will be upgraded tonight starting at 10:00pm. The upgrade requires a restart of the service and a short delay (less than 5mins) will be noticed while the service is restarted.

We will update this again once the service is upgraded and restarted. 

We are investigating a connection issue with our cloud4 cpanel server. More to come.

A reboot of cloud3 is scheduled tonight. This is to keep the server up to date and improve performance. All services will be offline for a short period while the server is restarted. Total downtime will be less than 20 minutes.

A reboot of cloud4 is scheduled tonight. This is to keep the server up to date and improve performance. All services will be offline for a short period while the server is restarted. Total downtime will be less than 30 minutes.

Our LA C-panel server is experiencing network connection issues at the datacentre.

Update: The data center has corrected the network fault and the service is back online.

We have allocated a maintenance window of 60 minutes for server updates to take place on this server. 

Our systems engineers have scheduled maintenance on our cloud4 Sydney server.

This server has been running continuously for over 400 days, which is why we need to schedule some maintenance and reboots on that machine.

There will be a 4 hour window where server downtime will take place.

We will update this notice once the server is back up and running.

We appreciate your patience during this scheduled maintenance.