Web17 - Seeing DDOS causing some network loss - checking

Stephen

US Operations
Staff member
We are working to block DDOS again on web17, as it is causing some packetloss on web17, web10 and web 11
 
Same netblock owners on the attack as yesterdays, but new netblocks attacking :( I hate when this happens, entire dedicated server providers may end up getting blocked off due to DDOS attacks from their networks coming over and over.
 
The additional IPs from their networks coming in just keeps growing. Will be filing some large abuse complains here this afternoon. It is causing some problems also on other servers now too because its grown to over a gigabit in size and some of the paths to other servers getting clogged up as well.
 
Server is working a little bit better, but not good yet. Still seeing quite a bit of packetloss due to the incoming attacks.
 
We have found TWO target domains for these, and taking them both to DNS offline point now as these attacks continue to grow and they are both under one reseller.
 
The DNS is changed successfully, the packetloss is still happening some, the incoming traffic is heavy. It is causing some problems on the SQL proxy for external SQL access as we have some reports on this directly.
 
There are a total of 6 domains seeing attacks in a big way. Several of them on the same reseller so it seems quite linked. We have had to redirect these domains to not point to the servers due to these attacks. However the floods are still coming in until the DNS points are resolved.
 
The server has been working at 100% for about 1.5 hours now. But still being closely monitored!
 
Back
Top