Runbox under attack

Geir · 25 Jan 2013, 08:01 AM

We are currently under a DDoS attack (Distributed Denial of Service) attack, flooding our servers with requests and preventing legitimate logins to our services.

We're working to block the attackers now, so stay tuned.

- Geir

b_ariela · 25 Jan 2013, 08:09 AM

thank you, geir. and OUCH!

Geir · 25 Jan 2013, 09:09 AM

We're still working to block the attackers on several levels of our network and we expect to be back up soon.

- Geir

Geir · 25 Jan 2013, 09:17 AM

We're back up now and intend to keep it that way.

- Geir

kservik · 25 Jan 2013, 10:25 AM

We still have problems, but working hard on fixing this.

Kim

h45wt · 25 Jan 2013, 10:26 AM

Quote:

Originally Posted by Geir

We're back up now and intend to keep it that way.

- Geir

I don't know the time dff between Alaska and there but I can't get pop access or response from fast.runbox.com or runbox.com.

Geir · 25 Jan 2013, 10:48 AM

Please try again now, we're gaining control again.

- Geir

amamea96 · 25 Jan 2013, 10:56 AM

Yeah -- Just as I sent this... I can now get in!! :-)

Hi, I haven't been able to get in for about an hour. US East Coast time .. 9:55pm. Any ideas when it will be back up? Thanks!

h45wt · 25 Jan 2013, 01:28 PM

Quote:

Originally Posted by Geir

Please try again now, we're gaining control again.

- Geir

Started working a short while back.

bipbop · 25 Jan 2013, 04:13 PM

I still can't send/download mail via Thunderbird. "smtp server secure.runbox.com timed out". It's been like that for 7-8 hours.

https://secure.runbox.com/ times out too.

I'm in Norway. I see that the web page works via a US proxy.

dbowdley · 25 Jan 2013, 05:10 PM

We had to block certain IP address ranges as part of our efforts to regain control for the majority of customers. It could be your IP is in one of those ranges. Please bear with us, the blocks will be removed as soon as possible.

Dave

tomhab · 25 Jan 2013, 06:38 PM

Any clue why they'd target Runbox? Seems a bit bizarre...

kijinbear · 25 Jan 2013, 07:33 PM

Quote:

Originally Posted by tomhab

Any clue why they'd target Runbox? Seems a bit bizarre...

Maybe someone got caught spamming and banned from Runbox and wanted to take revenge. Hiring a botnet to attack a website has become so cheap and easy these days, virtually anybody can attack anyone for any reason whatoever.

bipbop · 25 Jan 2013, 08:22 PM

It works here again.

As for why Runbox; could it be a case of collateral damage? Maybe they had bigger fish to fry, and Runbox just got caught up in it?

Liz · 25 Jan 2013, 10:25 PM

Actually, we know who did it (roughly) and why, but for security reasons, we would rather not publish the details. We are needless to say taking steps to hopefully prevent this from happening again!

Liz

25 Jan 2013, 08:01 AM	#1
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,938 Representative of: Runbox.com	Runbox under attack We are currently under a DDoS attack (Distributed Denial of Service) attack, flooding our servers with requests and preventing legitimate logins to our services. We're working to block the attackers now, so stay tuned. - Geir

25 Jan 2013, 10:56 AM	#8
amamea96 Junior Member Join Date: Jan 2013 Posts: 1	runbox down for me Yeah -- Just as I sent this... I can now get in!! :-) Hi, I haven't been able to get in for about an hour. US East Coast time .. 9:55pm. Any ideas when it will be back up? Thanks!

25 Jan 2013, 04:13 PM	#10
bipbop Senior Member Join Date: Dec 2009 Posts: 197	I still can't send/download mail via Thunderbird. "smtp server secure.runbox.com timed out". It's been like that for 7-8 hours. https://secure.runbox.com/ times out too. I'm in Norway. I see that the web page works via a US proxy. Last edited by bipbop : 25 Jan 2013 at 04:48 PM.

25 Jan 2013, 08:09 AM	#2
b_ariela Member Join Date: Sep 2002 Location: new york city Posts: 66	thank you, geir. and OUCH!

25 Jan 2013, 09:09 AM	#3
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,938 Representative of: Runbox.com	We're still working to block the attackers on several levels of our network and we expect to be back up soon. - Geir

25 Jan 2013, 09:17 AM	#4
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,938 Representative of: Runbox.com	We're back up now and intend to keep it that way. - Geir

25 Jan 2013, 10:25 AM	#5
kservik Cornerstone of the Community Join Date: Sep 2005 Location: Oslo, Norway Posts: 555 Representative of: Runbox.com	We still have problems, but working hard on fixing this. Kim

25 Jan 2013, 10:48 AM	#7
Geir The "e" in e-mail Join Date: Sep 2001 Location: Oslo, Norway Posts: 2,938 Representative of: Runbox.com	Please try again now, we're gaining control again. - Geir

25 Jan 2013, 05:10 PM	#11
dbowdley Cornerstone of the Community Join Date: Nov 2008 Location: UK Posts: 549 Representative of: Runbox.com	We had to block certain IP address ranges as part of our efforts to regain control for the majority of customers. It could be your IP is in one of those ranges. Please bear with us, the blocks will be removed as soon as possible. Dave

25 Jan 2013, 06:38 PM	#12
tomhab Essential Contributor Join Date: Nov 2007 Posts: 236	Any clue why they'd target Runbox? Seems a bit bizarre...

25 Jan 2013, 08:22 PM	#14
bipbop Senior Member Join Date: Dec 2009 Posts: 197	It works here again. As for why Runbox; could it be a case of collateral damage? Maybe they had bigger fish to fry, and Runbox just got caught up in it?

25 Jan 2013, 10:25 PM	#15
Liz The "e" in e-mail Join Date: Jul 2001 Location: Los Angeles,CA Posts: 4,652 Representative of: Runbox.com	Actually, we know who did it (roughly) and why, but for security reasons, we would rather not publish the details. We are needless to say taking steps to hopefully prevent this from happening again! Liz