DoS attack against Sedo's parking program

[Theo]

Ping is ok but try any parked domains. They used to be almost instant. Not now.

 

[namestrands]

Yeah I was showing Webservices as Offline.. but seem to be ok as of 01:12 BST

 

[hookah]

Hello from Sedo,

all parked domains are now back online and are operating as usual!

The URL forwarded domains (parked at http://www.sedoparking.com/domainname) have been working since 3pm (CET) today.
Now the DNS parked domains (DNS settings set to ns1.sedoparking.com and ns2.sedoparking.com) are back online. Please allow some minutes for the DNS settings to update.

If you have set your A record directly to our parking IP, you don't have to change it. We managed to pull the attack away from this IP. However, please bear in mind that we might need to quickly change an IP address in case of future attacks. If we do not control the DNS settings, we then can't move your domain. Therefore we do not recommend that you point your domain's A record to our parking server.

We have certainly gained a lot of experience during the attack which will help us to fight future problems.

We will discuss compensation tomorrow and keep you updated. Our goal is that you are fully compensated for any loss.
From what we know, the DDoS attack started yesterday afternoon, but we will even look at the stats of the days before yesterday.

Thank you again for your patience and your support.

Good luck with a battle against geeks :clown: and thanks

 

[Rikkers]

Hello from Sedo,

all parked domains are now back online and are operating as usual!

Many of my domains on Sedo dns are still not loading or are loading very slowly. As a result the conversion rate is about 50% down. Some pages are showing results in other languages also.

The low revenues - beyond the usual holiday blues - extend back to Thursday of last week.

When things are genuinely back to normal lets hope Sedo will look at loss of earnings over a longer period than the 36hrs they have hinted at in this forum.

 

[Leading Names]

Parking pages are loading very slowly for me.

- Rob

 

[namestrands]

This was an attack against SEDO, there offer of compensation is a great gesture of goodwill and something they do not have to do.

Sedo themselves would have lost revenue in the 10s of thousands over the last few days and not to mention the damage and recovery costs that will continue for some time. There reputation has been damaged and this will be the hardest thing for them to recover from.. so sit back and be patient.. and wait for an announcment.. I am confident that SEDO are aware of the current problems and are doing everything to correct them..

Whatever compensation SEDO offer would be a good gesture and one that most companies would never do.

 

[Leading Names]

This was an attack against SEDO, there offer of compensation is a great gesture of goodwill and something they do not have to do.

Sedo themselves would have lost revenue in the 10s of thousands over the last few days and not to mention the damage and recovery costs that will continue for some time. There reputation has been damaged and this will be the hardest thing for them to recover from.. so sit back and be patient.. and wait for an announcment.. I am confident that SEDO are aware of the current problems and are doing everything to correct them..

Whatever compensation SEDO offer would be a good gesture and one that most companies would never do.

Hello from Sedo,

all parked domains are now back online and are operating as usual!

This is obviously not the case, just letting them know as much – this is surely a beneficial for Sedo to know.

Whatever compensation SEDO offer would be a good gesture and one that most companies would never do.

I'm sure Sedo will compensate us, and rightly so. It's not unusual for PPC companies to compensate for lost revenue, DS do it all the time and GK did it recently when they had bandwidth problems.

- Rob

 

[namestrands]

Well I am not aware of any company compensating after a DDOS attack.. simply because no insurance company will cover this.

Insurance and SLA's only cover issues such as bandwidth problems caused by the provider and technical errors.. and of course companies will compensate if there systems were at fault.. clearly this was an act of Cyber Terrorism which under all SLAs and TOS no compensation will be made

 

[Leading Names]

Well I am not aware of any company compensating after a DDOS attack.. simply because no insurance company will cover this.

Insurance and SLA's only cover issues such as bandwidth problems caused by the provider and technical errors.. and of course companies will compensate if there systems were at fault.. clearly this was an act of Cyber Terrorism which under all SLAs and TOS no compensation will be made

Namestrands, they profit from our traffic 365 days a year.

These are just the downsides of offering such a service.

- Rob

 

[namestrands]

We all profit from this. Put it another way.. if someone hacked your enom account and redirected all your domains.. would you be expected to pay SEDO compensation for loss of revenue to them because your domain were not parked? lol... ok that is taking it to extremes but you get what I mean.. I appreciate that SEDO will do what needs to be done and I will be happy if they do compensate.. however I dont expect it from them now I know what has happened..

I think its great that SEDO are even talking about compensation.. personally I would not of mentioned it and then once the dust was settled I would have then offered Compensation.. looks better for them.

Parking is a risky business.. and parking programs take there share of risk.. agreed.. but I think the problem is being diluited by shouts for compensation and how it should be more than the downtime.. All I am saying is wait for SEDO to respond.. I am sure they have some serious issues to resolve here..

 

[Leading Names]

We all profit from this. Put it another way.. if someone hacked your enom account and redirected all your domains.. would you be expected to pay SEDO compensation for loss of revenue to them because your domain were not parked?

Well, no because I'm not offering a service to Sedo, Sedo are offering a service to me, a service that that have not fulfilled.

BTW, don't get me wrong, I think Sedo has handled this situation well so far and have every confidence that they will continue to do so

- Rob

 

[namestrands]

lol... well I guess we will have to agree to disagree on this one.. que sera sera.

 

[Theo]

Personally I am sceptical. The attack occurred during a so-called scheduled server upgrade/transition. Also, archived/historical data such as the monthly reports are off limits. I am not suggesting that the DDoS is a euphemism for "catastrophic data failure" but I am not seeing much improvement either. Most DDoS issues are nowadays easily tackled with specific routing filters. I don't think Sedo has a huge server farm spread across multiple networks to require a multiple intervention.

 

[namestrands]

You are not the only one to think like that.. it was what went through my mind.. but I am forever Cynical.. However DDOS are not filtered out that easily.. and that is from experience of operating an online casino and working as IT Security Manager for one of the UK's largest Finance/Pension companies. DDOS are getting sophisticated, whereas you have thousands of users being used as zombies and hosts to launch the attack this is done in the form of spyware and viri and trojans.. what happens is these trojans request updates from the zombie servers.. once they have the launch codes.. the attack happens on such a HUGE scale that and from tens of thousands of IPs, real ones ,proxied and spoofs.. it can send standard HTTP or DNS request at the rate of hundreds of thousands per second causing servers processes to spiral out of control..

But yes. . if this was a case of a Serious Balls up.. hmm well these things do tend to get out..

 

[SedoCoUk]

Hi Everyone,

What a weekend! Our tech team has gotten all parking pages up and running as of last night at 10:30 PM. We've recovered from the DOS attack and new measures are in place to prevent future problems.

Stats reporting pages should be working without issue and compensation for the downtime over the weekend is coming.

A notice will be sent tonight with full details.

Thank you for your patience here.

Jay
[email protected]

 

[namestrands]

Thanks Jay... good to see you back.

 

[hookah]

Just to let you know: some monthly stats are still disrupted, i.e. 32 days stat shows 3,508 Views collectively
2 Views per day on the average

Looks like miscalculation. The same with revenue calc.
Hookah

 

[brassneck]

Just to let you know: some monthly stats are still disrupted, i.e. 32 days stat shows 3,508 Views collectively
2 Views per day on the average

Looks like miscalculation. The same with revenue calc.
Hookah

Yes -my stats also similar. I am very grateful for what looks to be generous compensation, however I am still concerned that my stats are light today. Good level of views but low click thru ratio which seems to have started last week before the weekend (i.e. used to be about 14% consistently but all last week and now around 10% or less).

Anybody else observe something similar?

 

[timm]

brassneck, please recheck your stats, mine have just been updated for todays revenue...and it is back up on average monday level.

 

[greggish]

I wish I could check my stats. I've been trying for 2 hours now to login. It will let me log in but will not connect to Domain Management. I've been having this problem off and on since I've joined Sedo a little over a month ago. Its very frustrating and the problems just seem to be getting worse.