Win26 seeing abuse, resolved

[Stephen]

needing to debug an issue with win26, it is either taking a DDOS similar to win27, or it is having extremely abnormal traffic flows which need to be checked.

 

[Stephen]

Re: Win26 seeing abuse, going to turn off iis 2-3 minutes

IIS is back up now, still some abnormal network traffic however.

 

[Stephen]

Re: Win26 seeing abuse, going to turn off iis 2-3 minutes

I am rebooting win26 now to hopefully resolve this matter.

 

[Stephen]

Re: Win26 seeing abuse, going to turn off iis 2-3 minutes

win26 is coming up, but the reboot confirmed my fears that it looks like same type of DOS as the other day coming at win27, where they kept coming eventhough the server was down.

 

[Stephen]

Re: Win26 seeing abuse, going to turn off iis 2-3 minutes

Issue is mostly resolved now, we have it isolated down and requesting upstreams to block the packets from the source IPs now.