Jump to content


Photo

DDoS attack on on Echo server

Current DDoS Echo

  • Please log in to reply
4 replies to this topic

#1 Scott

Scott

    MDDHosting Staff

  • Staff Administrator
  • PipPipPipPip
  • 421 posts
  • Gender:Male

Posted 28 November 2012 - 05:12 PM

We are currently investigating a small DDoS attack against our echo server. We have taken measures to mitigate the attack while we investigate to identify the target and work to bring affected accounts back online. At this time, aproximately 90 accounts are offline. Due to the nature of these kinds of attacks, we expecte several more short burts of downtime for the entire server with potential for additional downtime for accounts on the same IP as the targetted site.

If you have any general questions that are not specific to your account and do not contain any sensitive information, feel free to ask here on our forums by replying to this topic.

For more information about DDoS attacks, how they work, and what can be done about them, you may be interested in this Wikipedia article: http://en.wikipedia....-service_attack

Additional details will be posted here when they are available.
  • 0
Scott S - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#2 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,893 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 28 November 2012 - 05:31 PM

We're currently migrating all affected users off of the IP under attack - if you're offline, hosted on the Echo server, and using external DNS - you will want to log into your cPanel and see what your IP has changed to. We're still in the process of making these changes, so it may be a short bit before your IP changes. If in doubt, feel free to open a ticket.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#3 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,893 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 28 November 2012 - 06:08 PM

For any curious, this attack peaked at about 130,000 packets per second:
Posted Image
This is reported by the upstream switch, so "out" is actually traffic inbound to the server and "in" is actually outbound traffic from the server.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#4 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,893 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 28 November 2012 - 06:11 PM

At this time, all accounts that were on the affected IP have been migrated to a new IP. We will continue monitoring closely for any changes.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#5 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,893 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 28 November 2012 - 08:56 PM

The attack shifted to a new IP just now, we're going to further split the accounts off of that IP to identify who the actual target is - this last outage should result in no more than 25 accounts being offline, down from the original 90.
Posted Image
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users