cpanel53/cpanel54 servers affected by DDoS
Wednesday, January 4th, 201204/01/2012 Wednesday
11:45 The cpanel53 and cpanel54 servers are currently receiving an inbound DDOS (Distributed Denial of Service) attack which can affect network speed and latency, which means some sites may load slower than normal or time out.
12:20 We’re working to block this attack. We have blacklisted a large number of offending IP addresses (mostly in Poland and China) and we are continuing to monitor the network traffic to ensure that we are blocking them all. Unfortunately access to the servers currently remains intermittent and slow.
13:20 This attack is on-going. At this time customers should be able to access their website/email but service may still be slow and intermittent.
15:00 Unfortunately this problem is on-going. Both servers are running a lot slower than we would like and we’re working to block the attack and stabilise the servers. The attack is still large and the offending IP addresses are constantly changing which makes it difficult to mitigate.
16:00 The DDoS attack is still on-going but it has significantly decreased in the last 20 minutes (we’re blocking a very large number of offending IP addresses). Services on both cpanel53 and cpanel54 are beginning to stabilise. We have temporarily disabled the MySQL servers while other services (HTTP and email) are brought back online and stabilised. This will mean websites using MySQL will remain inaccessible (displaying a database error message) but we hope to enable MySQL access again shortly. There is a large backlog of email and all other services are extremely busy after being intermittently unavailable during the attack, and our priority is to keep the servers stable. At an appropriate time we will enable MySQL access and post an update here.
16:40 We have re-enabled MySQL access on cpanel54 server. We are monitoring the server closely.
17:20 We are enabling access to MySQL on cpanel53 server. Please note it will be slow for a while because of high demand.
17:30 We believe this issue is now resolved and we will continue to monitor the servers closely. We are very sorry for any disruption this has caused.



