You are using an older browser version. Please use a supported version for the best MSN experience.

SAY Media-Owned Blogging Platform Typepad Enters Day 5 Of On-And-Off DDoS Attacks

TechCrunch TechCrunch 21/04/2014 Sarah Perez

You can now add , the blogging service owned by , to the growing list of technology companies that have undergone DDoS (distributed denial-of-service) attacks, which crash websites and other online services for what are now days a time. In Typepad’s case, the company is entering its fifth day under attack, after a series of on and off again hits began on Thursday night, just ahead of the long Easter holiday weekend.

The attack appears to be similar in nature to those which have hit several other high-profile tech companies in recent weeks, including , , Vimeo, and others. Though Typepad has not yet publicly shared much information about its attackers, the typical scenario involves an attacker knocking the victim’s site offline using a flood of traffic, then refusing to stop the barrage until the victim company pays a small amount of “ransom.” The initial amount is usually fairly insignificant, but once the victim agrees, it tends to go up, as they’ve now confirmed themselves as an easy mark.

While DDoS attacks have always been difficult to handle, many victims today are facing that exploit flaws in older Internet protocols which were never secured particularly well., for example, fell after by an NTP-based DDoS attack – meaning, an attack that leveraged NTP (), which is used to sync time clocks between multiple servers.

It’s not uncommon for NTP attacks to be in the 10 Gigabits range, which only a couple of years ago would have been a record-breaking size, said Matthew Prince, CEO at CloudFlare, a company which has been stepping in to help get victims’ sites back online. (Meetup’s attack was 8 Gigabits in size, and knocked the site offline for several days in March).

In Typepad’s case, the company confirms that its attack is similar to the one that , and they have now “put in place some roadblocks to mitigate the attack, but we are on high alert as attackers change their tactics regularly,” the post says.

Typepad blogs and its application were restored yesterday afternoon, the post also claimed, but noted that some slowness would remain. However, in the early morning on Monday, the company on Twitter that it was again experiencing issue with the app and blogs. Some seem to be coming back up now, but further indicate that trouble remains.

The company is also working with CloudFlare, which is powering the error pages that appear when the domain cannot load up properly – such as in the case of a network timeout (Error 522) errors still appearing this morning.

Additionally, the homepage for Typepad’s parent company SAY Media, the digital publisher and acquirers of Six Apart (Typepad makers), VideoEgg, (previously, and others, is also failing to load. According to and Google, the SAY Media domain is This website offered the usual company info, like an About page, Careers page, advertising details list of brands (including also xoJane, Fashionista, Cupcakes and Cashmere), and more.

However, now the domain comes up as a blank page, with text that reads only “unknown domain: ; perhaps indicating that changes to its DNS are underway.

We requested more information from Typepad and SAY Media and will update if either responds.

More from TechCrunch

image beaconimage beaconimage beacon