Current Echo Server - DDoS on IP 173.248.187.73

[Michael D.]

Hello,

 

The Echo server came under a rather large DDoS attack tonight on the IP 173.248.187.73 and, as such, we've had to null-route this IP to restore service for all others on the server. We will be doing our best to restore service for those who were on that IP, however, there is no ETA at this time.

 

We will update this thread when we have more information to provide.

 

http://www.screen-shot.net/pps.pnghttp://www.screen-shot.net/mbps.png

The graphs drop off quickly due to us placing a null-route quickly to eliminate this attack traffic. It peaked at 448,000 packets per second and 549.73 megbits per second before it was null-routed.

[Michael D.]

Due to the nature of the attack and the fact that the targeted IP is shared by numerous accounts, we are shifting all affected accounts off to different IP addresses. We are doing this in small batches so that should the attack move, we're able to limit those affected and to work towards identifying the account that is under attack.

[Michael D.]

All sites on the affected IP have now been shifted to new IP addresses. We will be watching for the attack to return on a new IP, at which point that IP will be null-routed and those accounts split off again in smaller batches until either the attack fails to return or we identify the target of the attack.