Resolved DDoS Attack on Jasmine / 173.248.191.24

[Michael D.]

Our networking team alerted us to a disruptive inbound DDoS attack on the IP 173.248.191.24 [Jasmine Server]. We are splitting any clients on the affected IP off to new distinct IPs for two reasons:

1. To restore service to these accounts during the null-route on 173.248.191.24.

2. To further identify the target of this attack as it could be any one of the accounts currently on the targeted IP.

 

If your service is on this IP and you're using our DNS this will be largely transparent other than th downtime before your IP is changed. If you're not using our DNS and your site is on the IP '173.248.191.24' you will need to manually modify your dns to relfect the new IP which you will be able to see via your cPanel [ http://jasmine.supportedns.com/cpanel ].

 

If you have any generalized questions feel free to ask them here - any account-specific questions should be addressed in a ticket.

 

Do understand that when we know who the target is we will contact that customer to make them aware.

[Michael D.]

It appears this issue didn't last long - as we were getting ready to move accounts the attack appears to have subsided. We're going to leave everything as-is at this point and will mark this tentatively closed. If the issure recurs we'll update this thread accordingly.

[Michael D.]

This attack has returned, we are going to proceed with the IP changes regardless to isolate who is under attack.

[Michael D.]

All accounts on the affected IP have been migrated to an alternative IP.