15 September, 2008

DDOS To Network

Update 9PM 15 Sep: Most sites should be up. If you still cannot access your domain, it's either because your ISP hasn't updated their DNS cache or your domain is not using our nameservers, you need to update A record for your domain yourself.

Thank you for your patience and understanding.


Update 7PM 15 Sep: The attack is still ongoing, and the worst thing is, we do not know when it will be over.

So we have managed to get new IP addresses for our server and changed our server IPs. If your domain is using our nameservers (you should), you do not need to do anything. We've made changes to our DNS IPs and sites should be up soon.

If your domain is NOT using our nameservers, please change server IPs yourself. Just change IP from 203.175.160.x to 203.175.163.x

For example, if you are currently using 203.175.160.74, change it to 203.175.163.74

If yours is reseller account, you need to change your nameserver IPs instead of account IP.

-------------End Update-----------

Bad News !

There's Heavy DDOS attack to our uplink provider's network, 1gbps attack, the worst one in past few years to whole Singtel network. All our servers (and many other hosting providers on same network) are not accessible from around 1:30pm 15 Sep.

The attack is against other server, not ours, but it's too heavy, all servers on the network are affected.

We are monitoring and trying our best to find a solution but cannot estimate when the attack will be over since it's out of our control, not even in Singtel's control.

Will post here when there's updates.

Sorry for inconvenience and thank you for kind understanding.

SWH

PS. backup server is not a solution for such DDOS attack. As the whole network is under attack, all servers are not accessible. It's not practical to maintain a backup server for all servers in another datacenter. Even if it's possible to maintain backup servers in another datacenter, moving all account data to the other datacenter, making changes to IP address, waiting for DNS update, it would be a few days later considering the amount of domains/accounts affected.