where we down and now back up ?

Customer Support Customer Only Discussion
1

had some complaints about mail and it was acting up.

is this part of the ddos attack?

2

I couldnt even ping to Jodohost. All sites down on all servers.

Now the route it toally different as well. Stable and not via savvis!

[CODE]Target Name: www.easyhrsolutions.com
IP: 64.187.100.169
Date/Time: 5/3/2006 3:57:21 PM to 5/3/2006 3:59:00 PM

Hop Sent Err PL% Min Max Avg Host Name / [IP]
3 100 0 0.0 8 36 12 hlfx-asr1.eastlink.ca [24.215.101.181]
4 100 0 0.0 8 215 23 hlfx-br1.eastlink.ca [24.222.79.205]
5 100 0 0.0 9 217 23 hlfx-br2.eastlink.ca [24.222.79.238]
6 100 0 0.0 30 74 33 [65.203.200.77]
7 100 0 0.0 29 61 35 0.so-0-1-0.XL1.MTL1.ALTER.NET [152.63.128.242]
8 100 0 0.0 71 141 77 0.so-7-0-0.XL1.MIA4.ALTER.NET [152.63.86.189]
9 100 0 0.0 74 122 79 POS6-0.GW4.MIA4.ALTER.NET [152.63.82.141]
10 100 0 0.0 71 129 77 internap-gw.customer.alter.net [157.130.85.222]
11 100 0 0.0 71 246 84 border5.pc1.bbnet1.mia003.pnap.net [69.25.0.13]
12 100 0 0.0 72 105 76 webhosting-9.border5.mia003.pnap.net [216.52.162.66]
13 100 0 0.0 73 87 77 rtr1.m****here.biz [204.10.104.77]
14 100 0 0.0 71 119 77 [64.187.100.169][/CODE]

3

Yes, we were blocking IPs, and actually had finished about 4 min before, and then we forwarded the list to upstream and went offline.

We are researching what happened still, it was off for 7 minutes.

4

Schooner, the different route would indicate that maybe internap made some changes, but we are waiting to hear back.

5

We have a much better route as a result. Not sure what caused this but hoping it sticks.

6

Ok, just heard back from internap, they made a TERRIBLE mistake, when we sent the list of IPs that were major DDoS contribtors, they blocked them, AND ALL ELSE. So it offlined us, they did not complete the ACL properly and made this happen.

7

getting 14 hops here :

1 <1 ms <1 ms <1 ms pf0.XXXXXXXXXXX.net [192.XXX.XXX.63]
2 2 ms 1 ms 1 ms 196.40.45.33
3 1 ms 1 ms 1 ms 196.40.9.250
4 3 ms 6 ms 8 ms 200.122.191.9
5 3 ms 8 ms 13 ms 200.122.150.101
6 2 ms 3 ms 2 ms 200.122.150.13
7 9 ms 10 ms 15 ms 200.122.150.22
8 52 ms 56 ms 49 ms sl-st20-mia-8-7.sprintlink.net [144.223.244.77]

9 54 ms 55 ms 56 ms sl-internap-145-0.sprintlink.net [144.223.245.14
6]
10 75 ms 57 ms 59 ms border5.pc1.bbnet1.mia003.pnap.net [69.25.0.13]

11 53 ms 63 ms 55 ms webhosting-9.border5.mia003.pnap.net [216.52.162
.66]
12 55 ms 52 ms 51 ms rtr1.m****here.biz [204.10.104.77]
13 51 ms 54 ms 52 ms 204.10.104.168

Trace complete.