Sunday, May 17, 2009
Connectivity Issue
We are aware that customers have been having issues connecting to sites on our network since this morning.
The issue has been traced to a hacked customer server which was pushing out denial of service attack. We will monitor the network over the next 24 hours to ensure that we can maintain a degree of stability.
UPDATE 19:00
It has become apparent this afternoon that a second denial of service attack was hitting our DNS servers ns1 and ns2. Customers will be aware of the importance of the name servers. Not only do they allow remote visitors to find the IP address of the server, they're also used by the web servers and Sql servers for performing reverse lookups.
The result of the attack has been to slow down all services including DSL/transit due to the high volume of UDP traffic hitting our routers.
We believe that at this stage we have been able to take action to reduce the effects of the Dos attack. We will be monitoring the network this evening and taking appropriate action as needed.
UPDATE 19:50
Network monitoring is showing that services have returned to normal. We will continue to monitor the network and services over the next 24 hours.
UPDATE 21:00
One issue with some static transit routes has been resolved. There are now no outstanding issues.
The issue has been traced to a hacked customer server which was pushing out denial of service attack. We will monitor the network over the next 24 hours to ensure that we can maintain a degree of stability.
UPDATE 19:00
It has become apparent this afternoon that a second denial of service attack was hitting our DNS servers ns1 and ns2. Customers will be aware of the importance of the name servers. Not only do they allow remote visitors to find the IP address of the server, they're also used by the web servers and Sql servers for performing reverse lookups.
The result of the attack has been to slow down all services including DSL/transit due to the high volume of UDP traffic hitting our routers.
We believe that at this stage we have been able to take action to reduce the effects of the Dos attack. We will be monitoring the network this evening and taking appropriate action as needed.
UPDATE 19:50
Network monitoring is showing that services have returned to normal. We will continue to monitor the network and services over the next 24 hours.
UPDATE 21:00
One issue with some static transit routes has been resolved. There are now no outstanding issues.
# posted by Netserve @ 2:33 PM 
