Time: September 2, 2014 19:07:00 (CEST)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our Network in AMS-01. The following network prefixes might have been affected:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40
5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
91.217.72.0/23
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

Time: September 3, 2014 13:08:00 (CEST)
Dear LeaseWeb customer,

At this moment our Linux shared webhosting platform in the Netherlands is the target of a large DDoS attack. Websites hosted on IP 95.211.13.68 are currently slow or unavailable. We are doing everything we can to mitigate the attack.

We will update this message when we have more information.

[UPDATE 13:08 CEST]

The attack has stopped and services have restored.

[UPDATE 21:40]

The attack started again. The websites might be unavailable or will be loading slow. We are doing our utmost best to mitigate the attack.

[UPDATE 2014-09-04@10:12]

The attack ended this morning around 06:00 and services are restored.

Time: September 3, 2014 16:10:00 (CEST)
Dear Leaseweb Customer,

Currently we are experiencing packet loss and/or higher latency to/from specific networks due to a major fiber cut between NL and US. Many transatlantic connections which are taking this route are affected. We expect that the issue will have been resolved in the next few hours.

You will be updated trough this NOC posting.

Time: September 9, 2014 14:08:00 (CEST)
Dear customer,

Our shared storage infrastructure has encountered a major issue in both controller heads.
if you are using this part of our infrastructure, you might encounter issues with your virtual machines or datastores.
The platform should now be available again but is closely monitored for any anomalies.

Time: September 3, 2014 16:10:00 (CEST)
Dear Leaseweb Customer,

Currently we are experiencing packet loss and/or higher latency to/from specific networks due to a major fiber cut between NL and US. Many transatlantic connections which are taking this route are affected. We expect that the issue will have been resolved in the next few hours.

You will be updated trough this NOC posting.

Time: September 3, 2014 10:41:00 (CEST)
Dear LeaseWeb customer,

At this moment our Linux shared webhosting platform in the Netherlands is the target of a large DDoS attack. Websites hosted on IP 95.211.13.68 are currently slow or unavailable. We are doing everything we can to mitigate the attack.

We will update this message when we have more information.

Time: September 2, 2014 19:07:00 (CEST)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our Network in AMS-01. The following network prefixes might have been affected:

94.75.192.0/18
95.211.0.0/19
62.212.75.0/24
82.192.87.0/24
2001:1AF8:4400::/40
5.61.248.0/24
37.1.144.0/24
46.182.176.0/22
77.81.240.0/21
87.236.96.0/21
90.156.224.0/20
91.217.72.0/23
94.124.56.0/21
145.255.128.0/21
193.107.18.0/24
212.7.193.128/25
212.7.192.128/25
2A01:9400:2::/48
2A02:CC8::/32
2A03:E280:0:1::/64

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

Time: September 1, 2014 11:35:00 (CEST)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our High Volume Network in AMS-01. The following network prefixes might have been affected:

82.150.152.0/25
82.150.152.192/26
95.211.60.0/23
95.211.105.0/24
94.75.218.0/23
94.75.232.0/24
94.75.250.0/24
179.43.173.0/25
188.0.224.0/26
188.0.224.64/27
194.0.5.0/24
194.0.28.0/22
212.7.205.0/24
212.7.207.0/24
212.7.210.0/24

2001:1AF8:4050::/44

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].

Time: September 1, 2014 03:30:00 (CEST)
Dear Leaseweb Customer,

We experienced high latency and packet loss due to a DDoS attack in part of our High Volume Network in AMS-01. The following network prefixes might have been affected:

82.150.152.0/25
82.150.152.192/26
95.211.60.0/23
95.211.105.0/24
94.75.218.0/23
94.75.232.0/24
94.75.250.0/24
179.43.173.0/25
188.0.224.0/26
188.0.224.64/27
194.0.5.0/24
194.0.28.0/22
212.7.205.0/24
212.7.207.0/24
212.7.210.0/24

2001:1AF8:4050::/44

The incoming DDoS is now being filtered and traffic level/connectivity is back to normal. If you notice any issues, please open a ticket via the LeaseWeb Self Service Center, or contact us directly at [email protected].