Jump to content


Photo

Echo Server - DDoS on IP 173.248.187.73

Current

  • Please log in to reply
2 replies to this topic

#1 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,900 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 31 January 2013 - 03:20 AM

Hello,

The Echo server came under a rather large DDoS attack tonight on the IP 173.248.187.73 and, as such, we've had to null-route this IP to restore service for all others on the server. We will be doing our best to restore service for those who were on that IP, however, there is no ETA at this time.

We will update this thread when we have more information to provide.

Posted ImagePosted Image
The graphs drop off quickly due to us placing a null-route quickly to eliminate this attack traffic. It peaked at 448,000 packets per second and 549.73 megbits per second before it was null-routed.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#2 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,900 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 31 January 2013 - 03:52 AM

Due to the nature of the attack and the fact that the targeted IP is shared by numerous accounts, we are shifting all affected accounts off to different IP addresses. We are doing this in small batches so that should the attack move, we're able to limit those affected and to work towards identifying the account that is under attack.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/

#3 MikeDVB

MikeDVB

    Forum Administrator

  • Staff Administrator
  • PipPipPipPipPip
  • 2,900 posts
  • Gender:Male
  • Location:Central Indiana, USA

Posted 31 January 2013 - 04:29 AM

All sites on the affected IP have now been shifted to new IP addresses. We will be watching for the attack to return on a new IP, at which point that IP will be null-routed and those accounts split off again in smaller batches until either the attack fails to return or we identify the target of the attack.
  • 0
Michael Denney - MDDHosting LLC - Providing Hosting since 2007
Scalable shared hosting plans in the cloud! Check them out!
Highly Available Cloud Shared, Reseller, and VPS
http://www.mddhosting.com/





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users