123-reg.co.uk/ having a bad day

phoneguy

It looks like https://www.123-reg.co.uk are having a bit of a bad day. They appear to have hosed their nameservers, meaning anyone who has bought a domain with them, and using their dns servers, is unlikely to find the resolution service working.

Luckily, they have a system status page to keep customers informed...

http://www.123-support.co.uk/SystemStatus.aspx

but currently that is down too.

Just mentioning it in case anyone who hosts dns with them is having weird website or email issues this afternoon.

chunter

Me too. emails not forwarding. Websites not forwarding.
Quite a disaster really.

They seemed to have changed their login procedure and the secure server seems bucked.

A little more information and complaints on their facebook page
https://www.facebook.com/123regfans

steve1980

If you have a business website then make sure you make a claim when the systems are up and running again.

GoPD

steve1980 wrote: »

If you have a business website then make sure you make a claim when the systems are up and running again.

Claim for downtime you mean? Can you/have you done that?

chunter

rumoured to be a dos attack

http://techfleece.com/2012/05/23/123-reg-currently-under-a-massive-ddos-attack/

rhythmsoup

Seems ok to me, I just checked my website, i only have a Domain which has a cname ref to a google site.

I do find their site generally to be quite slow to login to the control panel etc. Tried a few different browsers and no difference.

chunter

Yeh, most of my stuff starting to resolve now.

zee_2

still cannot log on to domains
http://www.theregister.co.uk/2012/05/23/123reg_ddos_attack/

Figment

I've managed to log into my account to renew some domains.

Former_MSE_Andrea

Hi 123-reg has asked us to post a response. MSE doesn't endorse anything a company says on the forum.

At around 11am today (23/05/12) 123-reg was included on a large scale DDoS (Distributed Denial of Service) with the result of a traffic surge through to our DNS systems. This attack was identified by our network team who made immediate changes to remove the DDOS traffic from within our core network, and within 15 minutes key work was completed routing traffic through our redundant connections and blocking the incoming traffic on our core network.

Being the largest domain provider we are a prime target for this type of activity, and we know this type of activity is on the increase – particularly in Europe – as recent press coverage has shown.

With that in mind, 123-reg takes the protection and monitoring of our core infrastructure very seriously. To support that we have built in redundancy within the core network and a team in place to support this. Through that team we were able to quickly respond and start making changes immediately.

Our customers are our core focus, and keeping their sites and services online, and keeping them informed, is our top priority.

Generally our status page is updated with information of any work that is on-going, however in a DDoS situation like this customers may not be able to get to that page. Our first port of call is to update our phone status message, Tweet and post on FaceBook, which we did. During this period of time we had an influx of calls coming through to us where our phone system and team were able to inform customers of the current status.

chunter

Thanks Andrea,
but 123reg saying they were down for only 15 minutes is just simply untrue.

I work with other hosts and they generally have a plan b, a secondary server somewhere where they can post regular updates of the current situation - or use their facebook page. 123reg were incapable of doing either.