Win39 CL1 is seeing some packet loss.

Ashish

Super Moderator
Staff member
Win39 CL1 is seeing some packet loss. It seems there is a network attack on one of them making some network slowness to the rest of servers, we are tracing it down.
 
Win39 is the one being attacked and we have temporarily disconnected it, while checking logs for it more to find attacked site.
 
There's a pretty bad sustained attack on Win39. As soon as I bring the link up on it, other servers start getting impacted. We're working to trace down the site that this is happening with but it is quite hard to trace so far. Had a few clues but they weren't the ones responsible.
 
We are still working to stop all attacks on Win39, we've got its network disabled at this point as we're isolating it from Win19 so Win19 stops losing packets while we work on Win39.
 
This attack is relentless... And still impacting other servers when the Win39 is up on network. We are trying to escalate this upstream to fully block a few networks from accessing our network.
 
At the moment, most sites are up, sites on dedicated IPs are being added now, I believe we've found the site being targeted, and should be nearing resolution.
 
Ehh, it looks like there may be multiple sites still using that IP that is down, as there was a prior DDOS attack on the shared IP address. We moved them over to a new address, but it looks like some did not move their DNS before, so there are still some on that old IP. So it is possible there is more than one site still down by the looks of it.
 
Back
Top