BACK UP
OTB–and most of the other blogs on HostingMatters–was down starting early yesterday evening until some time this morning. All appears well now.
Update (0904): HM has the explanation:
On October 16 beginning at 1950 Eastern we suffered a denial of service attack. On October 17 at 0042 traffic was returned after work by the Peak10 security and abuse teams and assistance from AT&T network engineers.
The particulars of the attack:
The attack appears to have been directed at a site hosted on clotho. A graphical representation of the attack itself can be seen here:
http://www.hostmatters.com/images/dos_oct162003.jpg
This is just before the inbound traffic became severe enough that the data collector was unable to retrieve further data. Total saturation at the highest inbound rate was 150 Mps; sustained inbound saturation was 85 Mps.
At this time, and until further notice, ICMP has been filtered to our network. This means that pings to any site within our network will not receive a response. This is not indicative of a site or server being inaccessible.
As clotho was the target of the directed attack, we instructed the NOC team to filter all traffic bound for the clotho IP. At this time, we are changing the IPs on clotho and all sites on that server EXCEPT for the site we believe to have been the target of this attack. That site will be moved to another network entirely, away from our main presence at Peak10. Clients with sites on clotho will be notified to the best of our ability regarding the IP changes. Zone file changes will be done locally by us and no action is required on the part of any client unless self-managed DNS settings are in use.
Fun, fun, fun.
