1

I have received an email from the Data Center that we might have been under an MCO attack, we didn't know what that meant and all they could tell is that MCO stands for "Multiple Client Outage" and asked us to review our servers.

What is that and what should we do to check on the servers?

  • 3
    Sounds like the Data Centre does not know what is happening but lots of their customers are experiencing issues. They are blaming it on big bad hackers. – David Waters Oct 3 '17 at 21:53
  • 2
    Really, it's their term. They need to define it for you. – schroeder Oct 4 '17 at 9:16
  • 1. They really should give more information than what you wrote in your mail. 2. If they did give you more information, you should quote it in your question (properly anonymized, of course) – Jan Doggen Oct 4 '17 at 9:48
1

It sounds like one or more of the sites your data center is hosting may be under attack. What's wrong depends on the nature of the attack. If it's a "Distributed Denial of Service" (DDoS) attack against one site, it's a flood of data generated by a network of zombies; those levels of traffic can block access to any other servers hosted on the same machine or network segments. Other than a period of downtime, such attacks usually do not allow the attackers to enter the victim's computers, though, so there would be little risk that they hacked into yours.

Other attacks might be specific hacking attempts to break into some of their other client's hosting servers. So they might be warning you that the attackers are indiscriminately attacking other sites in their network, checking for holes that might lead them to their intended victim; and that you might want to examine your server logs to look for evidence of hacking attempts.

Finally, be aware that this could be a phishing email you received. If it also contains a link that reads something like: "Click here to access your server management system", it's indeed suspicious.

  • Thanks for the detailed reply, it wasn't phishing as we got it from IBM Softlayer team. it was very confusing and they didn't specify even after when we asked for details they said we should check our servers. they didn't even specify for what. – Ramzy Oct 7 '17 at 12:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.