A huge 30Gbps distributed denial-of-service (DDoS) has hit hosting firm 123-reg, disrupting services and causing problems on its own website.
"At about 10:10 this morning we received a huge scale DDoS attack of +30Gbps into our data centre," the firm said, noting that only 10 per cent of DDoS attacks involve such a high volume of traffic.
123-reg's DDoS protection systems kicked in after half an hour, the firm said, at which point things slowly began to return to normal.
"Our protection systems kicked in and were able to curtail the majority of the attack. Our system teams jumped on board and reconfigured the network routing to assist. By 10:40 the attack was contained and started to subdue."
Things appear to be back up and running now, but 123-reg explained that customers were unable to access services such as email and the company's website before the attack was stopped.
"During this time some customers may have had intermittent connection issues to our services, such as our website, control panel, email or their websites," 123-reg said.
Dave Larson, chief operating officer at Corero Network Security, suggested that 123-reg should have had better preventative measures in place.
"While most attacks in a hosting provider environment are typically lower in bandwidth and possibly more sophisticated in nature, a 30Gbps attack is not uncommon and can be mitigated in real time with automated DDoS protection solutions," he said.
"In a time where 100 per cent service availability for hosted customers is critical, any downtime or latency due to DDoS is simply unacceptable when there are solutions available today that can easily solve this problem instantaneously."
123-reg hosts 1.7 million websites in the UK, but doesn't have the best of luck when it comes to technology. The company suffered a catastrophic glitch in April that "effectively deleted" some of its customers' sites.
The firm blamed the problem on a maintenance error that affected 67 of its 115,000 European servers, subsequently wiping websites belonging to some VPS customers.
123-reg was later forced to admit that a "small number" of customers' sites may have been permanently deleted.
As if that wasn't bad enough, the firm suffered major email borkage the following month that left a number of 123-reg users unable to access their emails for days.
Users are told that their non-existent 'iPhoneID' is expiring soon
Expansion of SDK intended to expand Amazon Alexa ecosystem
Locky returns from a prolonged rest with two new variants
AMD lambasted over Radeon RX Vega pricing that will add an extra £100 to RX Vega 56 and 64 graphics cards
Company accused of failing to tell anyone that the launch prices were only introductory offers