26 feb

[NL, AMS-01] Connectivity issues in part of our network

Time: February 26, 2014 16:22:00 (CET)
Dear LeaseWeb Customer,

You might have experienced high latency and packet loss due to a DDoS attack in our Premium Network at AMS-01. One of our routers lost routing protocol sessions. As this is a redundant setup, the other router took over the traffic.

The following network prefixes might have been affected:
5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
62.212.75.0/24
77.81.240.0/21
87.236.96.0/21
82.192.87.0/24
90.156.224.0/20
94.75.192.0/18
94.124.56.0/21
95.211.0.0/19
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25

2001:1AF8:4400::/40
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

If you still notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

25 feb

[NL, AMS-01] Connectivity issues in part of our network [Update]

Time: February 24, 2014 05:40:00 (CET)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to DDoS in part of our network in AMS-01.

The following network prefixes might have been affected:

108.59.0.0/20
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40
185.17.184.0/23
95.211.168.0/21
95.211.94.0/23
95.211.184.0/21
95.211.192.0/21
95.211.224.0/21
95.211.240.0/22
2001:1af8:4020::/44
91.215.156.0/22
145.255.129.0/24
192.162.136.0/22
194.145.208.0/23
193.151.89.0/24
193.151.90.0/24
212.7.198.0/24

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal.

If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

25 feb

[US, WDC-01] Connectivity issues in part of our network [Update]

Time: February 24, 2014 03:40:00 (CET)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to DDoS in part of our network in WDC-01.

The following network prefixes might have been affected:

108.59.0.0/20
162.210.192.0/21
192.96.200.0/21
198.7.56.0/21
199.115.112.0/21
199.58.84.0/22
207.244.64.0/18
2604:9A00:2100::/40
91.242.214.0/23

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal.

If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

25 feb

[NL, AMS-01] Connectivity issues in part of our network [Update]

Time: February 24, 2014 15:15:00 (CET)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to DDoS in part of our network in AMS-01.

The following network prefixes might have been affected:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40
5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal.

If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

25 feb

[DE, FRA-10] Connectivity issues in part of our network [Update]

Time: February 23, 2014 09:02:00 (CET)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to DDoS in part of our network in FRA-10 between 08:45 and 08:55 CET.

The following network prefixes might have been affected:

46.165.196.0/21
37.58.52.0/23
2A00:C98:2010::/44

If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

24 feb

[opgelost] Denial of service attack

Tussen 16.06 en 16.24 uur zijn er een aantal korte DDoS-aanvallen uitgevoerd op infrastructuur van één van onze klanten. Klanten die op dezelfde colocatieswitches van BIT aangesloten zitten kunnen hier korte onderbrekingen of vertraging door ondervonden hebben.

Monitoring van BIT detecteerde de DDoS snel waarna mitigerende maatregelen genomen zijn door engineers.

24 feb

Sites cluster 64 verminderd bereikbaar (opgelost)

Update 14:53 uur: De site welke aangevallen werd is geïsoleerd en er komt geen verkeer meer binnen op cluster 64.

Update 14:25 uur: Er komt nog steeds veel verkeer binnen van de DDoS. We filteren het grootste deel echter direct weg waardoor de impact minimaal is. We zijn momenteel bezig om de site in kwestie te isoleren zodat de DDoS geen impact meer heeft op de rest van cluster 64.

Update 13:36 uur: Wij houden de DDoS sinds 12:23 met succes tegen. De DDoS aanval is nog steeds bezig, maar hij wordt nu gefilterd.

Update 12:10 uur: We hebben de aanval grotendeels tegengehouden, en houden het geheel nog even in de gaten om te kijken of de huidige filters effectief genoeg zijn, of nog enige bijstelling nodig hebben.

Update 12:04 uur: We hebben een tijdelijk oplossing waardoor sites weer beter bereikbaar zullen worden over de komende paar minuten.

Er vindt momenteel een DDoS plaats op cluster 64. Hierdoor zijn sites op dit cluster minder goed bereikbaar.

23 feb

[DE, FRA-10] Connectivity issues in part of our network [Update]

Time: February 22, 2014 13:30:00 (CET)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to DDoS in part of our network in FRA-10 between 13:15 and 13:25 CET. The following network prefixes might have been affected: 178.162.192.0/19 2A00:C98:2050::/44 If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].