Time: August 30, 2016 00:27:00 (CEST)
Dear LeaseWeb Customer,

We experienced high latency and packet loss on the 29th of August between 23:45 and 00:00 CEST due to a large DDoS attack in part of our network in AMS-01.

The following network prefixes might have been affected:

31.186.168.0/23
41.191.215.0/24
46.102.240.0/21
46.17.0.0/21
62.212.64.0/22
62.212.68.0/23
62.212.70.0/24
62.212.71.0/24
62.212.74.0/24
62.212.76.0/22
62.212.91.0/24
62.84.240.0/22
77.221.144.0/22
77.235.32.0/19
79.172.198.0/24
82.192.72.0/24
82.192.73.64/26
82.192.76.0/23
82.192.79.0/24
82.192.86.0/24
82.192.92.0/23
83.223.32.0/20
85.17.112.0/23
85.17.112.0/23
85.17.114.0/24
85.17.117.0/24
85.17.128.0/17
85.17.134.0/24
85.17.151.0/24
85.17.179.0/24
85.17.180.0/24
85.17.199.0/24
85.17.202.0/23
85.17.204.0/23
85.17.206.0/24
85.17.219.0/24
85.17.226.0/23
85.17.228.0/22
85.17.232.0/24
85.17.235.0/24
85.17.236.0/23
85.17.238.0/24
85.17.240.0/22
85.17.244.0/23
85.17.32.0/19
85.17.87.0/24
85.17.88.0/23
85.17.92.0/22
85.17.96.0/20
85.234.224.0/20
91.195.118.0/23
92.243.94.0/23
93.190.220.0/22
94.75.226.0/26
95.211.164.0/22
95.211.32.0/21
95.211.40.0/21
95.211.58.0/23
95.211.62.0/23
95.211.64.0/21
109.70.0.0/21
109.120.138.0/24
109.120.140.0/24
109.120.175.0/24
109.120.176.0/24
109.120.180.0/22
128.140.216.0/22
136.144.128.0/17
139.47.0.0/16
159.100.0.0/18
178.18.20.0/23
178.18.23.0/24
178.18.24.0/23
178.18.30.0/24
185.38.185.0/24
185.113.88.0/22
185.16.84.0/24
185.27.140.0/22
185.46.232.0/24
185.51.192.0/23
185.63.152.0/22
188.208.38.0/23
191.101.48.0/22
193.242.108.0/24
193.43.92.0/24
194.60.71.0/24
195.14.21.0/24
195.200.82.0/23
195.242.98.0/23
212.7.204.0/23
2001:1AF8:4300::/40
2a01:b2e0::/32
2A02:2968:20::/48
2A02:40C0:1::/48
2A04:88C0:2::/48
2a04:88c0:4::/48
2001:1AF8:2100::/40
2001:1AF8:4100::/40
2001:1AF8:701::/48

The attack has been mitigated and connectivity is now fully restored.

If you need further information, please open a ticket via the LeaseWeb Customer Portal, or contact us at [email protected].