A distributed denial of service (DDoS) attack targeting one customer has been blamed for a 78 minute degradation of service at hosting firm UberGlobal yesterday.
The incident was first reported at 11am (AEST) as a “high impact” incident affecting all services, according to UberGlobal’s status advisory.
“For a period of about an hour this morning, corresponding to that service status message, one of our clients was the target of a distributed denial of service attack,” Uber's CEO Michael McGoogan told iTnews.
“Inside of that response window we were able to mitigate the attack by blackholing that individual client and working with our upstream providers to block it at our border and all the way back out of the network.”
McGoogan said the company believes none of its 110,000 customers lost 100 percent connectivity, but the attack, - which happened over Internode transit - caused degraded service provision to less than 50 percent of clients.
Those affected were predominantly hosted on infrastructure located in Global Switch in the inner-Sydney suburb of Ultimo and on the same Internode link; the company also has Pipe and Vocus transit.
Uber’s clients located in TransAct’s Canberra data centre were only briefly affected, McGoogan said.
“We seem to have been very, very quiet for a number of months,” he said. “We’ve been noticing that the number of attacks for the last six months is down so it is unfortunate that this has happened today in the middle of business hours.”
DDoS attacks are increasingly common experiences for all service providers across Australia and can range from multi-day attacks to short disruptions. Uber clients on Twitter credited the company with a swift resolution to the issues this morning.
A full incident report will be publically available on the Uber blog in a week.