The majority of sites on the server are resolving again after an IP change. Sites using the A records or remote DNS will need to change their IP to 82.145.60.173.
Update 1:30pm
The DDOS attack directed against our IP address has started again. In order to protect the network the data centre have null routed the IP address again.
We are working now to have this issue resolved in as timely manner as posisble.
We apologise for the inconvenience.
=============================================
Update: 11.10am
We were able to determine that the inbound attack appears to have subsided so we have lifted the null route. The server is accessible again.
If anyone wants to learn a little more about DDOs watch this video:
The data centre just confirmed that this was an inbound DDOS directed against the IP. We are making a decision now as to when we lift the null route. If we lift the null route now and if the attack is still happening the data centre will auto block for 4 hours minimum and possibly 8 hours depending on how agressive the attack is. If that happened we would be needing to change the server IP to get sites back on line today. We want to try to avoid that situation.
Our gut feeling as a team is to wait 60-90 minutes more before lifting the null route. We appreciate this is inconvenience but we believe it is just a little too early to lift the null route.
=============================================
Update: 10.40am
We have requested a KVM session for this server so we can access the server remotely. This request has been sent to our data centre partners and it will be connected by 11.09am they have informed us. Until that time there is little we can do in terms of troubleshooting and we thank you for your extended patience.
============================================= Unfortunately Shared Server 14 is the subject of a rather agressive denial of service attack and our data centre have had to null route the IP temporarily for an hour initially to see if the attack has subsided. This null route is absolutely necessary to ensure the DDOS does not affect the entire network and other servers connected to the same switch. The switch was being saturated with data packets during this widely spread attack which came from a very wide range of IP addresses.
It is unfortunate but DDOS attacks are common place across the industry and they do happen from time to time. We will work with our partners to ensure the downtime on this server is kept to an absolute minimum.
