Denial Of Service - Nicole

[Matt]

We are currently mitigating a denial of service attack that was aimed at the Nicole server. This server has been temporarily brought down to help mitigate the attack. When the server was brought down the attack was directed at the main router which is now also being configured to mitigate the attack.

Most sites should be okay within a few minutes. No word yet on the Nicole server. We will keep you posted.

[Christopher]

good job matt

thanks

[EmergentMedia]

Yeah - everything seems to be working great now. Thanks for such a quick response and for answering the phone. It's always good just to hear someone say, "We're aware of it and dealing with it" instead of being left in the dark.

Keep up the great work!

[Matt]

Thanks. Sorry about that, as you know these DOS attacks come without an inkling of notice.

Still trying to pinpoint the problem but it seems to be reslved for the time being. Those of you on the Nicole server we will have you back online just as soon as possible.

[Matt]

Nicole is back online.

[Matt]

Some people are still not able to access nicole at the moment. We are working on this.

[Matt]

All right this server has been removed from the network again. This was a full blown Distributed Denial of Service attack which came from several thousand spoofed IPs.

We are looking into alternatives right now however bringing the server back online to the general Internet might take a while at this point.

[Matt]

It was necessary to null route the IP address associated with most our the sites on that server. Customers on dedicated IP addresses should be showing no issues right now.

What we are doing: We are changing IP addresses. Resellers are getting a new unique IP address so that we can narrow down the search for exactly which site's are the target of this massive attack.

As soon as your sites resolve to their new IP addresses you should be able to access them.

This process may or may not bring on another DDOS. If it does we will continue the process of terminating all traffic to the said IP until we have a final solution.

[Matt]

Most of you have new IP addresses by now. We split the server into about 15 IP addresses which, if the problem happens again will allow us to narrow the search down even further.

Those of you with new IPs should be able to see your site, unless you have spoiled your local DNS cache by trying to access your website during the outage.

You can correct that and I will tell you how to get around it soon as ALL sites ave new IPs.

[Christopher]

Thanks again Matt that was alot faster than I thought, I can access my sites and FTP, however I still can not access email accounts. Is this part of the local DNS issue?

Actually one of my sites: http://zee750s.com/ should be a motorcycle forum home page, It worked once and now it's it's something else a completely different site. Also the reseller control panel has no access.

Christopher