ajx22
May 9th, 2002, 07:51 PM
I wanted to inform everyone that the SLOW server issues that you may have been experiencing (especially with our Forum) the past few days are being dealt with via my hosting company. Things SHOULD be better now, as they have discovered the problem and are working on correcting it. I guess that there have been some Flooding Attacks on some servers - to overload them and cause poor performance. The problem IP's are being banned as we speak.
Please accept my apologies for the inconvenience this has caused. It is out of my hands...but I am doing everything possible to get this issue corrected ASAP.
Here is a copy of an e-mail I received from our technician @ our hosting company explaining the issue. (e-mail addresses removed)
AJ,
Here is what I just got from our provider……
Below I will paste some information that has everything that you will need to know on this situation. This is the latest:
As you are aware, two nights ago, some of our clients started to experience connectivity issues when trying to reach their sites. After further investigation we determined that several IP blocks were under a distributed Denial of Service Attack (DoS). Our System Administrators were monitoring this at the server level and set up automated scripts to block IPs that established too many connections to a server. We began to block these IPs at the router. We are currently working with the service providers of the IPs in question in order to get the offenders shut out on their networks as well.
Below are definitions of a DoS Attack as well as a link that will explain the issue further.
"...A denial of service (DoS) attack occurs when an attacker or attackers cause degradation or loss of a service by overwhelming it with spurious data or requests for service so that the legitimate requests are lost, ignored, or serviced very slowly. An analogy in the pencil and paper world would be for a political action group to send an organization such a large number of letters and postcards that the organization's handling of all other mail suffers...."
"...a type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols....
http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2784023,00.h
tml
We are continuing to address this issue and hope to have it resolved soon. We appreciate your patience in this matter and apologize for any inconvenience this may have caused. If you have any further questions concerning this issue, please do not hesitate to contact us.
Sincerely,
Michelle Hillaert
Alabanza Support Technician
"Jeff Coulam" wrote:
>We are still experiencing major down time on our sites example
>216.147.9.59, our customers are demanding refunds for the lost time.
>Can I get a little more detail than "our Netadmins are working as hard
>as possible to stop these problems"? This is going to start costing us
>some money, and I need to know something.
>
>Best regards,
>Jeff Coulam
>Web Site Source, Inc
>
>
>-----Original Message-----
>From: Alabanza Technical Support [****@******]
>Sent: Thursday, May 09, 2002 8:06 AM
>To: Jeff Coulam
>Subject: RE: [ALA-0509.295165] Sites down
>
>
>Dear Jeff,
> We are still currently investigating these issues. I apologize for
>this inconvenience as our Netadmins are working as hard as possible to
>stop these problems. Thank you for your patience.
>
>Steven Wise
>Alabanza Tech Support
>
>
>
>"Jeff Coulam" wrote:
>
>
>>This is a multi-part message in MIME format.
>>
>>------=_NextPart_000_0008_01C1F735.3628B790
>>Content-Type: text/plain;
>> charset="us-ascii"
>>Content-Transfer-Encoding: 7bit
>>
>>We currently are still experiencing slow response to some sites and no
>>response to others. Pwcwealth.com 65.108.145.222 will not come up at
>>all. We are getting many complaints, can you please look into this
and
>>let me know.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
David C. Canedo
Web Site Source Inc.
Technical Support
****@******
Thank you again for your patience,
Please accept my apologies for the inconvenience this has caused. It is out of my hands...but I am doing everything possible to get this issue corrected ASAP.
Here is a copy of an e-mail I received from our technician @ our hosting company explaining the issue. (e-mail addresses removed)
AJ,
Here is what I just got from our provider……
Below I will paste some information that has everything that you will need to know on this situation. This is the latest:
As you are aware, two nights ago, some of our clients started to experience connectivity issues when trying to reach their sites. After further investigation we determined that several IP blocks were under a distributed Denial of Service Attack (DoS). Our System Administrators were monitoring this at the server level and set up automated scripts to block IPs that established too many connections to a server. We began to block these IPs at the router. We are currently working with the service providers of the IPs in question in order to get the offenders shut out on their networks as well.
Below are definitions of a DoS Attack as well as a link that will explain the issue further.
"...A denial of service (DoS) attack occurs when an attacker or attackers cause degradation or loss of a service by overwhelming it with spurious data or requests for service so that the legitimate requests are lost, ignored, or serviced very slowly. An analogy in the pencil and paper world would be for a political action group to send an organization such a large number of letters and postcards that the organization's handling of all other mail suffers...."
"...a type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols....
http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2784023,00.h
tml
We are continuing to address this issue and hope to have it resolved soon. We appreciate your patience in this matter and apologize for any inconvenience this may have caused. If you have any further questions concerning this issue, please do not hesitate to contact us.
Sincerely,
Michelle Hillaert
Alabanza Support Technician
"Jeff Coulam" wrote:
>We are still experiencing major down time on our sites example
>216.147.9.59, our customers are demanding refunds for the lost time.
>Can I get a little more detail than "our Netadmins are working as hard
>as possible to stop these problems"? This is going to start costing us
>some money, and I need to know something.
>
>Best regards,
>Jeff Coulam
>Web Site Source, Inc
>
>
>-----Original Message-----
>From: Alabanza Technical Support [****@******]
>Sent: Thursday, May 09, 2002 8:06 AM
>To: Jeff Coulam
>Subject: RE: [ALA-0509.295165] Sites down
>
>
>Dear Jeff,
> We are still currently investigating these issues. I apologize for
>this inconvenience as our Netadmins are working as hard as possible to
>stop these problems. Thank you for your patience.
>
>Steven Wise
>Alabanza Tech Support
>
>
>
>"Jeff Coulam" wrote:
>
>
>>This is a multi-part message in MIME format.
>>
>>------=_NextPart_000_0008_01C1F735.3628B790
>>Content-Type: text/plain;
>> charset="us-ascii"
>>Content-Transfer-Encoding: 7bit
>>
>>We currently are still experiencing slow response to some sites and no
>>response to others. Pwcwealth.com 65.108.145.222 will not come up at
>>all. We are getting many complaints, can you please look into this
and
>>let me know.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
David C. Canedo
Web Site Source Inc.
Technical Support
****@******
Thank you again for your patience,