DDoS Attacks Causing Network Instability

Published on September 5, 2009 at 11:47 am by iWeb-Op in: Status

We’re currently investigating network issues causing intermittent connectivity problems. Dedicated servers, colocation and Shared hosting customers (Panelbox or Sebulba) may notice slowdowns or connectivity problems. Important DDoS attacks directed to our network are currently causing slowdowns and instability depending on the route taken to reach our network. The attacks might also have affected DNS services. We are working on filtering the attacks and identifying and isolating the targets. We will post regular updates on the situation here.

Comments

  1. Mark
    September 5th, 2009 12:12 pm

    I am seeing a ton of instability through your peer1 & tata links. It looks like the DDoS is overwhelming your circuit capacity causing your sessions to flap.

    I hope you can mitigate this quickly. You’ve been solid so far, but it’s been going on 2+ hours as of this writing.

    16150 13768 13768 13768 32613 32613 32613, (suppressed due to dampening)
    217.75.96.60 from 217.75.96.60 (217.75.96.60)
    Origin IGP, metric 0, localpref 100, valid, external
    Community: 13768:64999 13768:65006 13768:65410 16150:63392 16150:65320 16150:65334 32613:100 32613:200
    Dampinfo: penalty 786, flapped 4 times in 00:30:42, reuse in 00:01:00
    3277 3267 6453 32613
    194.85.4.55 from 194.85.4.55 (194.85.4.16)
    Origin IGP, localpref 100, valid, external
    Community: 3277:3267 3277:65321 3277:65323
    3267 6453 32613
    194.85.40.15 from 194.85.40.15 (193.232.80.7)
    Origin IGP, localpref 100, valid, external
    2914 6453 32613
    129.250.0.171 from 129.250.0.171 (129.250.0.79)
    Origin IGP, metric 5, localpref 100, valid, external
    Community: 2914:420 2914:2000 2914:3000 65504:6453
    3582 4600 11537 13768 32613 32613 32613, (suppressed due to dampening)
    128.223.253.8 from 128.223.253.8 (128.223.253.8)
    Origin IGP, localpref 100, valid, external
    Community: 3582:566 4600:199
    Dampinfo: penalty 1092, flapped 7 times in 00:30:52, reuse in 00:08:10

  2. Jon
    September 5th, 2009 12:58 pm

    I only just saw this blog posting after I just filed a support request about packet loss, (normally I get the blog updates via email)

    I’m seeing up to 1000ms ping times on a single internal hop inside iweb’s network when pinging internally from my server. Yesterday I was seeing errors in dmesg about ethernet lockups. These problems are coming and going but are definitely very unusual compared to the previous year of smooth network connectivity we’ve enjoyed with iweb.

    There is currently severe packet loss (eg 40-50%) between iweb and the UK cable ISP VirginMedia. I assume this is also related.

    I was concerned that there was a hardware fault with my server or that the recently updated Linux kernel had some new bug.

  3. Jean-Luc
    September 5th, 2009 1:06 pm

    @Jon : It’s related yes. It’s not your hardware or OS.

About the iWeb blog

The iWeb Blog covers web hosting, web development, web design, Internet marketing and just about every announcement concerning iWeb.

System Status

All Systems Running without Issues.
Details