Same netblock owners on the attack as yesterdays, but new netblocks attacking I hate when this happens, entire dedicated server providers may end up getting blocked off due to DDOS attacks from their networks coming over and over.
The additional IPs from their networks coming in just keeps growing. Will be filing some large abuse complains here this afternoon. It is causing some problems also on other servers now too because its grown to over a gigabit in size and some of the paths to other servers getting clogged up as well.
We have found TWO target domains for these, and taking them both to DNS offline point now as these attacks continue to grow and they are both under one reseller.
The DNS is changed successfully, the packetloss is still happening some, the incoming traffic is heavy. It is causing some problems on the SQL proxy for external SQL access as we have some reports on this directly.
There are a total of 6 domains seeing attacks in a big way. Several of them on the same reseller so it seems quite linked. We have had to redirect these domains to not point to the servers due to these attacks. However the floods are still coming in until the DNS points are resolved.