29 apr

[NL, AMS-01] Connectivity issues in part of our network [Update]

Time: April 29, 2014 15:25:00 (CEST)
Dear LeaseWeb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our network in our AMS01 data-center.

The following network prefixes might have been affected:

62.212.64.0/22
62.212.68.0/23
62.212.70.0/24
82.192.79.0/24
85.17.128.0/17
85.17.87.0/24
85.17.92.0/22
95.211.32.0/21
95.211.164.0/22
85.17.112.0/23
212.7.204.0/23
185.16.84.0/24
185.46.232.0/24
185.51.192.0/22
62.212.92.0/24
85.17.68.0/22
85.17.135.0/24
85.17.152.0/23
85.17.158.0/24
85.17.166.0/24
85.17.169.0/24
85.17.176.0/24
85.17.181.0/24
85.17.186.0/24
85.17.193.0/24
85.17.252.0/24
95.211.48.0/21
95.211.56.0/23
37.75.152.0/21
80.65.32.0/20
82.192.67.0/24
82.192.69.0/24
85.234.224.0/19
91.224.38.0/23
159.255.192.0/22
178.18.20.0/23
178.18.22.0/24
185.24.240.0/24
193.27.72.0/23
194.0.197.0/24
195.140.240.0/22
62.212.67.0/24
62.212.71.0/24
62.212.74.0/24
62.212.91.0/24
82.192.76.0/23
82.192.86.0/24
82.192.92.0/23
85.17.134.0/24
85.17.199.0/24
85.17.202.0/23
85.17.204.0/23
85.17.206.0/24
85.17.219.0/24
85.17.226.0/23
85.17.228.0/22
85.17.232.0/24
85.17.235.0/24
85.17.236.0/23
85.17.238.0/24
85.17.240.0/22
85.17.244.0/23
85.17.245.0/27
94.75.226.0/26
95.211.40.0/21
95.211.58.0/23
95.211.62.0/23
95.211.64.0/21
95.211.164.0/22
93.190.220.0/22
31.186.168.0/23
195.14.21.0/24
41.191.215.0/24
167.88.48.0/20

2001:1AF8:4100::/40
2001:1AF8:4200::/40
2001:1AF8:4300::/40
2A02:40C0:1::/48
2A02:BC0::/32
2A03:7480::/44
2a01:b2e0::/32

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

26 apr

Traagheid shared hosting (opgelost)

Als gevolg van problemen op ons shared hosting platform kan het zijn dat u op dit moment traagheid ondervind of dat uw pagina’s op momenten zelfs niet te benaderen zijn. Onze technici zijn hiervan op de hoogte. We hopen dit probleem z.s.m. verholpen te hebben. Updates volgen op dit bericht.

Update 11:01
De oorzaak blijkt een DDoS aanval te zijn. Onze systeem- en netwerkbeheerders doen er alles aan deze z.s.m. af te weren

Update 11:36
De aanval die zojuist werd uitgevoerd op onze shared hosting diensten is inmiddels onder controle, de dienstverlening heeft zich als vanouds hervat. Onze systeembeheerders houden onze systemen uiteraard nog steeds nauwlettend in de gaten

13 apr

[NL, AMS-01] Connectivity issues in part of our network

Time: April 13, 2014 21:00:00 (CEST)
Dear LeaseWeb Customer,

Between 20:45 and 20:55 for a brief intervals you might have experienced high latency or packet loss due to increase in traffic caused by a DDoS attack in part of our network in our AMS01 data-center.

The following network prefixes have been affected:
62.212.64.0/22
62.212.68.0/23
62.212.70.0/23
62.212.74.0/24
62.212.91.0/24
62.212.92.0/24
82.192.76.0/23
82.192.79.0/24
82.192.86.0/24
82.192.92.0/23
85.17.68.0/22
85.17.87.0/24
85.17.92.0/22
85.17.112.0/23
85.17.128.0/17
94.75.226.0/26
95.211.32.0/20
95.211.48.0/21
95.211.56.0/22
95.211.62.0/23
95.211.64.0/21
95.211.164.0/22

2001:1AF8:4100::/40
2001:1AF8:4200::/40
2001:1AF8:4300::/40

31.186.168.0/23
37.75.152.0/21
41.191.215.0/24
80.65.32.0/20
82.192.67.0/24
82.192.69.0/24
85.234.224.0/19
91.224.38.0/23
93.190.220.0/22
159.255.192.0/22
167.88.48.0/20
178.18.20.0/23
178.18.22.0/24
185.16.84.0/24
185.24.240.0/24
185.51.192.0/22
193.27.72.0/23
194.0.197.0/24
195.14.21.0/24
195.140.240.0/22
212.7.204.0/23
2A02:BC0::/32
2A03:7480::/44
2A02:40C0:1::/48
2a01:b2e0::/32

The incoming DDoS has been mitigated and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

13 apr

[NL] Issues on Cloud platform [Update]

Time: April 13, 2014 14:30:00 (CEST)
Dear LeaseWeb Customer,

[UPDATE 17:00]
The incoming DDoS has been stopped, and the platform is stable again. If you have issues with your VM, please stop and start the VM first.
[END UPDATE]

We are experiencing high latency and packet loss due to an incoming DDoS on the LeaseWeb Cloud

Affected customers are those running on the Resource Pool and LeaseWeb Virtual Servers powered by Apache CloudStack.

We are currently investigating the cause of this issue.

If you need further information, please open a ticket via the LeaseWeb Self Service Center, or contact us at [email protected].

12 apr

[NL, AMS-01] Connectivity issues in part of our network [Update]

Time: April 12, 2014 20:35:00 (CEST)
Dear LeaseWeb Customer,

Between 20:00 and 20:30 for brief intervals you should have experienced high latency and packet loss due to multiple DDoS attacks in part of our network in our AMS01 data-center.

[Update 22:10]
We experienced same problems between 22:00 and 22:10.

The following network prefixes have been affected:
62.212.64.0/22
62.212.68.0/23
62.212.70.0/23
62.212.74.0/24
62.212.91.0/24
62.212.92.0/24
82.192.76.0/23
82.192.79.0/24
82.192.86.0/24
82.192.92.0/23
85.17.68.0/22
85.17.87.0/24
85.17.92.0/22
85.17.112.0/23
85.17.128.0/17
94.75.226.0/26
95.211.32.0/20
95.211.48.0/21
95.211.56.0/22
95.211.62.0/23
95.211.64.0/21
95.211.164.0/22

2001:1AF8:4100::/40
2001:1AF8:4200::/40
2001:1AF8:4300::/40

31.186.168.0/23
37.75.152.0/21
41.191.215.0/24
80.65.32.0/20
82.192.67.0/24
82.192.69.0/24
85.234.224.0/19
91.224.38.0/23
93.190.220.0/22
159.255.192.0/22
167.88.48.0/20
178.18.20.0/23
178.18.22.0/24
185.16.84.0/24
185.24.240.0/24
185.51.192.0/22
193.27.72.0/23
194.0.197.0/24
195.14.21.0/24
195.140.240.0/22
212.7.204.0/23
2A02:BC0::/32
2A03:7480::/44
2A02:40C0:1::/48
2a01:b2e0::/32

The incoming DDoS's are now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

11 apr

Internet storing (opgelost)

Status: Storing (gesloten) Storing begin: 9:30
Storing eind: 9:38
Datum: 11 april 2014
Omschrijving: Één van onze klanten is doelwit geweest van een DDoS aanval. Hier door zijn er PPP sessies gemigreerd naar een andere access router om een storing langer dan een korte onderbreking te voorkomen.
Impact op: Alle internet verbinding die via de betrokken access router liepen.
Actie: De DDoS aanval nam na 8 minuten af. Direct na vol lopen werden de sessies gemigreerd naar een andere access router. De storing is dus verholpen.
Update: [11 april – 10:52 uur]

Er is zojuist opnieuw een aanval geweest op de zelfde klant. Om het probleem definitief op te lossen hebben we de klant tijdelijk afgesloten tot de aanvallers hun interesse in het doelwit verliezen.
09 apr

Ziggo Zakelijk storing door DDoS (opgelost)

Ziggo Zakelijk heeft vanavond last gehad van een DDoS aanval op een gedeelte van haar netwerk. Hierdoor hadden zakelijke klanten uit gebieden in Noord-Holland last van trage of geen verbinding met het internet. In de loop van de avond is Ziggo erin geslaagd de DDoS aanval af te slaan en is de storing opgelost.

09 apr

DDoS-aanval afgewend

aangemeld 10:37

Glasvezelklanten ontsloten via EFX te Eindhoven hebben zojuist een korte dip in hun verbinding ervaren; een gevolg van een DDoS. De aanval is afgewend en de verbindingen zijn hersteld.

08 apr

[NL, AMS-01] Connectivity issues in part of our network [Update]

Time: April 7, 2014 15:38:00 (CEST)
Dear LeaseWeb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our network in our AMS01 data-center.

The following network prefixes might have been affected:
5.79.80.0/21
62.212.72.0/23
62.212.82.0/23
62.212.85.0/24
62.212.88.0/23
82.192.78.0/24
82.192.80.0/23
82.192.84.0/23
82.192.90.0/23
82.192.94.0/23
83.149.70.0/23
83.149.124.0/22
85.17.24.0/21
85.17.72.0/23
85.17.90.0/24
85.17.132.0/24
85.17.136.0/24
85.17.147.0/24
85.17.172.0/24
85.17.190.0/23
95.211.88.0/22
95.211.128.0/22
95.211.132.0/23
95.211.136.0/21
95.211.144.0/20
95.211.200.0/21
46.243.0.0/22
46.243.4.0/23
146.185.0.0/23
190.105.0.0/24
212.7.204.192/26
212.7.206.128/27
212.7.212.0/23
216.59.55.0/24
216.59.59.0/24
216.59.60.0/24
95.211.208.0/21
95.211.60.0/23
95.211.104.0/23
94.75.218.0/23
94.75.232.0/24
94.75.250.0/24
82.150.152.0/25
82.150.152.192/26
188.0.224.0/26
188.0.224.64/27
194.0.5.0/24
194.0.28.0/22
212.7.205.0/24
212.7.206.0/23
212.7.210.0/24

2001:1af8:4010::/44
2001:1AF8:4050::/44
2001:1af8:4070::/44

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].