TCP-SYN flood attack on one of our hosting IP addresses
Posted by on 09 June 2015 03:15:18 PM
We are facing TCP-SYN flood attack on port 25 of hosting server “cp-40.webhostbox.net” (162.222.226.133), due to which the below mentioned subnet is under mitigation.
Subnet : 162.222.226.0/24
Affected IP address : 162.222.226.133
Affected Services : Mail service hosted on the server “cp-40.webhostbox.net”.
We have applied global filters on the IP address “162.222.226.133” in which we have noticed the attack. You should not face any issues on other IP addresses of this range “162.222.226.0/24”.
We will keep this thread updated with the latest developments. If you face issues while accessing websites or mails hosted on this subnet, please get touch with our Support help desk with the ‘traceroute’ result and your ISP details so that we can check it further.
Apologies for the inconvenience caused due to this.
Attack on DNS
Posted by on 09 June 2015 01:53:48 PM
We are currently facing an attack on the OrderBox DNS servers, on account of which the DNS records (A, MX, PTR, etc…) could not be fetched.
Below are the IP addresses which have been null routed due to the attack:
50.23.136.173
50.23.136.174
50.23.75.96
50.23.75.97
50.23.75.44
50.23.75.45
50.23.136.230
50.23.136.229
We are working in co-ordination with the data center to mitigate this attack as soon as possible. Please follow this thread for more information.
Feel free to contact the support team, in case of any further queries or concerns.
我几百个域名同时挂掉，一大堆用户追问我网站怎么打不开了。
