+1 (866) 366-3640
support@sagonet.com
Sago Logo
Banner



JoomlaWatch Stats 1.2.5 by Matej Koval

2008.03.04: DDoS Attack Causing Connectivity Issues

UPDATE 12:30 PM: This morning, we noticed a denial of service attack, that had decent volume, going towards one of our customers. The impact initially of this attack was not that severe, and we were trying to work with the customer to get the attack under control without impacting our customer via our IDS system. After a short time, the attack grew in intensity, and did start to impact other customers on the same network segment. At approximately 9:30AM Eastern, the attack grew again, however started to include our core routers in the attack, which was not seen previously. The attack directed at our core routers caused BGP to begin to flap with our peers to the Internet, as well as with other core routers. Due to the volume of traffic directed to our routers, especially here in Tampa, we had slow responses when consoled in working on the issue. We were able to get some additional blocks and ACLs in place to stop the attack against our core routers. This took time obviously working with slow console response. At approximately 11:00AM Eastern, we were able to restore all BGP sessions and traffic did return to normal. 

9:47PM: There is currently a DDoS attack that is affecting traffic and connectivity for some customers on Sago's Network. Servers are still powered up and running but some may be receiving alerts that the servers are down due to network connectivity. We are full-staffed and our Network Engineering Department is working to resolve the Distributed Denial of Service attack as quickly as possible and we appreciate your patience while we deal with this network affecting issue.

-Sago Management