It would appear that a third party site that we were using to include some html on our main website was compromised and this resulted in the main Blacknight website being flagged by Google as containing malware. We have removed the included code from our website and we're currently awaiting review by the Google webmasters team and we hope to have an update and the problem resolved shortly.
Update: 08:10: this also affects the control panel, webmail etc. Anything service originating from the blacknight.com domain name is affected.
Update: 11:50: Google have removed the block and access to all services such as Webmail, Exchange Owa and our main site. It will probably take a bit more time for all browsers to pick up the change.
Our engineers are currently seeing issues with one of our older Direct Admin servers:
Ector.blacknight.ie - 81.17.252.50
The server was rebooted not long ago and there are some lingering issues that may affect the receiving of email and possibly cause downtime on your websites. We are working on this issue at the moment and our highest priority is to get this server back up and running as soon as possible.
We also hope to implement some changes on this server over the upcoming week to resolve the intermittant issues this server has been having over the last couple of weeks.
Update 12:50 - The server is back up now and our engineers are checking all services to ensure they are up and running. They are still working on the server to restore all back to a normal level of service.
Update 15:10 - I'm afraid the server has gone down again and our engineers are working on restoring service once more. We are still investigating the root cause of these issues today.
Update 15:26 - The server is still a little slow but services are back now. We will be contacting some of the busier sites on this server in order to alleviate the load issues.
Update Aug 5th 11:22 - This server has had some config changes, we've moved a few of the busier wordpress blog sites off it and also we've found a problem in the AntiSpam system that was causing lookups on dead realtime blacklists. All of these changes appear to have resolved the problems we were seeing on this server for the past couple of weeks. We'll be monitoring it closely for the next week and if there are no issues in that timeframe we'll consider this issue closed once and for all.
Our main website is currently under attack. We're working to mitigate this attack at the moment and hope to have our site back online shortly.
We'll post further updates when we have them.
Update: 20:30
This attack is on-going, our site may be available to some people and not to others. We're working on a resolution currently. We hope to resolve this issue in the next 24 hours.
Update: June 9th 08:15
This DDOS continued for 4 days solid. We did however keep our site online for the duration and I'll write up some notes on how we did this in the not too distant future.
