22 jan

Storing: DDoS aanval Carmel platform (opgelost)

Omschrijving: Diverse klanten die aangesloten zijn via het Carmel platform geven aan dat het internet bijzonder traag is geworden of dat deze helemaal niet werkt.
Impact op: Alle internetverbindingen van onderwijs instellingen die aangesloten zijn op het Carmel platform.
Actie: Surfnet heeft een DDoS filter geplaatst om de overlast te beperken. Dit heeft direct geholpen.
Update: Begin en eind tijdstippen van de storing zijn bekend eveneens als de oorzaak. Actueel melding wordt dan ook direct gesloten en niet voorzien van nadere updates.

Omschrijving: Diverse klanten die aangesloten zijn via het Carmel platform geven aan dat het internet bijzonder traag is geworden of dat deze helemaal niet werkt.
Impact op: Alle internetverbindingen van onderwijs instellingen die aangesloten zijn op het Carmel platform.
Actie: Surfnet heeft een DDoS filter geplaatst om de overlast te beperken. Dit heeft direct geholpen.
Update: Begin en eind tijdstippen van de storing zijn bekend eveneens als de oorzaak. Actueel melding wordt dan ook direct gesloten en niet voorzien van nadere updates.
21 jan

[NL, AMS-01] Premium Network connectivity issues

Time: January 21, 2014 22:44:00 (CET)
Dear Customer,

We just experienced a network issue on the Premium network in AMS01.
The time-frame was between 22:29 and 22:34 CET.
The issue was caused by large dDoS attacks

The following prefixes are affected:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40

…………

5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

If you need further information, please open a ticket via the LeaseWeb Self Service Center, or contact us at [email protected].

17 jan

[NL, AMS-01] Premium Network connectivity issues

Time: January 17, 2014 19:43:00 (CET)
Dear Customer,

We have experienced a network interruption between 19:01 and 19:07.
The issue was caused by a very large dDoS attacks that resulted in congestion on the uplinks and caused the routing protocol to flap.
The issue has been mitigated and connectivity has been restored.

The following prefixes are affected:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40

…………

5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

If you need further information, please open a ticket via the LeaseWeb Self Service Center, or contact us at [email protected].

16 jan

[NL, AMS-01] High volume connectivity issues

Time: January 16, 2014 00:49:00 (CET)
Dear Customer,

You might have experienced service disruption(unreachability, packet loss) between 00:30 and 00:40.
The issue was caused by a large dDoS congesting one of the uplinks.
The issue has been mitigated and connectivity has been restored.

The following prefixes might have been affected :
62.212.84.0/24
85.17.84.0/24
94.75.217.0/24
94.75.220.0/22
94.75.229.0/24
94.75.234.0/24
94.75.240.0/24
94.75.253.0/24
95.211.92.0/23
2001:1AF8:4030::/44
…………
5.44.144.0/22
212.7.192.0/22
212.7.199.0/25
212.7.203.0/24
2A01:9400:3::/48

15 jan

[NL, AMS-01] Premium Network connectivity issues [Update]

Time: January 15, 2014 19:11:00 (CET)
Dear Customer,

We have experienced a network interruption between 19:01 and 19:07.
The issue was caused by a very large dDoS attacks that resulted in congestion on the uplinks and caused the routing protocol to flap.
The issue has been mitigated and connectivity has been restored.

The following prefixes are affected:

82.192.64.0/23
83.149.102.0/23
95.211.72.0/21
95.211.106.0/23
95.211.108.0/22
95.211.112.0/20
95.211.134.0/23
95.211.160.0/23
95.211.176.0/21
95.211.216.0/21
95.211.232.0/21
2001:1AF8:4500::/40
…………
31.186.170.0/24
37.61.232.0/24
46.226.192.0/22
62.212.75.128/26
82.192.64.0/23
92.114.86.0/23
93.176.128.0/23
94.177.98.0/23
109.70.12.0/22
185.19.214.0/25
185.24.174.0/24
188.95.136.0/23
190.105.195.0/24
212.7.200.0/22
212.7.214.0/24
190.105.195.0/24
2A01:9400:1::/48
2A02:40C0:2::/48
2A02:4900::/44

12 jan

[NL, AMS-01] Premium Network connectivity issues [Update]

Time: January 12, 2014 16:06:00 (CET)
Dear Customer,

We are currently experiencing a network interruption at this moment, the issue is being caused by multiple dDoS attacks.
We are investigating the issue and will post a update when it has been resolved.

The following prefixes are affected:

Update
@16:30
We are still troubleshooting and trying to stabilise traffic levels.

Update
@16:40
Traffic levels are back to normal and platform is now stable again.
…………

62.212.64.0/22
62.212.68.0/23
62.212.70.0/24
85.17.128.0/17
95.211.32.0/21
82.192.79.0/24
85.17.87.0/24
85.17.92.0/22
95.211.164.0/22
85.17.112.0/23
2001:1AF8:4100::/40

…………..

212.7.204.0/23
185.16.84.0/24

…………

62.212.92.0/24
85.17.68.0/22
85.17.135.0/24
85.17.152.0/23
85.17.158.0/24
85.17.166.0/24
85.17.169.0/24
85.17.176.0/24
85.17.181.0/24
85.17.186.0/24
85.17.193.0/24
85.17.252.0/24
95.211.48.0/21
95.211.56.0/23
2001:1AF8:4200::/40

…………

37.75.152.0/21
80.65.32.0/20
82.192.67.0/24
82.192.69.0/24
85.234.224.0/19
91.224.38.0/23
159.255.192.0/22
178.18.20.0/23
178.18.22.0/24
185.24.240.0/24
193.27.72.0/23
194.0.197.0/24
195.140.240.0/22
2A02:BC0::/32
2A03:7480::/44
…………

62.212.67.0/24
62.212.71.0/24
62.212.74.0/24
62.212.91.0/24
82.192.76.0/23
82.192.86.0/24
82.192.92.0/23
85.17.134.0/24
85.17.199.0/24
85.17.202.0/23
85.17.204.0/23
85.17.206.0/24
85.17.219.0/24
85.17.226.0/23
85.17.228.0/22
85.17.232.0/24
85.17.235.0/24
85.17.236.0/23
85.17.238.0/24
85.17.240.0/22
85.17.244.0/23
95.211.40.0/21
95.211.58.0/23
95.211.62.0/23
95.211.64.0/21
95.211.164.0/22
2001:1AF8:4300::/40

…………

93.190.220.0/22
31.186.168.0/23
195.14.21.0/24
2A02:40C0:1::/48

10 jan

[NL, AMS-01] Reachability problems on the Premium Network due to DDoS attack [Update]

Time: January 10, 2014 08:05:00 (CET)
Dear Customer,

Due to a recent attack there might have been packet loss or higher latency between 07:55-08:15 towards our premium network in AMS01, Netherlands. The attack is currently filtered and therefore resolved.

Affected Prefixes:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40

…………

5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

We apologize for the inconvenience. If you need any further information, or still experience issues please contact us at [email protected]. We apologize for the inconvenience.
Visit http://leasewebnoc.com/en/networkstatus/premium-network-connectivity-issues-4 to track updates and progress.

08 jan

[NL, AMS-01] Premium Network connectivity issues

Time: January 8, 2014 05:50:00 (CET)
Dear Customer,

We experienced a network interruption between 05:50-06:00 and between 10:00-10:15 CET. The issue was caused by multiple DDoS attacks, they are filtered at the moment.

Impact for the following prefixes:
94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25

2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64
2001:1AF8:4400::/40

If you are still experiencing issues, or require assistance, please contact us via [email protected] or create a ticket via the SSC.

07 nov

[opgelost] Distributed Denial of Service attack op het BIT-netwerk

[opgelost] DDOS naar BIT-netwerk
Op dit moment vindt er een Distributed Denial of Service Attack (DDOS) plaats op een server in het netwerk van BIT. Er wordt hierbij gepoogd om met zeer grote hoeveelheden dataverkeer een server onbereikbaar te maken. Deze aanval is van een dermate grote omvang dat enkele netwerkverbindingen in het BIT-netwerk overbelast worden. Als gevolg hiervan kan het mogelijk zijn dat u gedurende deze aanval packetloss of een verminderde snelheid ervaart.

Onze engineers zijn op dit moment bezig de aanval af te slaan.