Olilo - Notice history

RFO – DDoS Incident

Date/Time: 8th October 2025

Impact: Intermittent connectivity and packet loss across parts of the network.

Duration: ~45 minutes

Status: Resolved

Summary:

At approximately 14:00, our network began experiencing a large-scale Distributed Denial of Service (DDoS) attack targeting our edge infrastructure. The attack caused intermittent packet loss and service degradation for some customers.

Actions Taken:

• Identified malicious traffic patterns.

• Temporarily withdrew our route servers via LINX and LONAP to isolate and contain the impact.

• Engaged automated DDoS filtering which successfully mitigated the attack and restored stability.

Preventative Measures:

We’ve implemented some changes to our DDoS defence system and filtering rules to mitigate this in the future.

Status:

All services are now stable and fully operational.

The DDoS attack has been fully mitigated. Services are now confirmed stable and performing as expected.

We’ve implemented some changes to our DDoS defence system to mitigate similar events in the future.

Thanks for your patience while we dealt with this one 💪

We’re now monitoring the issue closely, and the reduced peering will remain in place while we make sure everything stays stable.

We’re currently being targeted by a DDoS attack which is causing some disruption.

Our network team is actively mitigating and things should start stabilising soon.

Please bear with us while we get everything back to normal 💪

We’ve run checks on our side, and the increased latency only seems to be affecting certain CityFibre areas (Scotland).

Since there’s no actual downtime, this isn’t considered a fault on their end.

The best we can do for now is wait for CityFibre to resolve it, likely as part of ongoing upgrades or network improvements.

CityFibre is pleased to confirm that the service disruption has been fully resolved as of 03:08 on 07/08/2025.

The incident was caused by ongoing third-party civil works in the Glasgow area, which impacted multiple services across our network. We sincerely appreciate your patience and understanding during this time.

Major Incident Management has held an additional bridge call with our NOC, Planning team, and on-site personnel.

It has been confirmed that the issue was caused by third-party civil works taking place in the Glasgow area. The ground team is currently developing a restoration plan to reinstate services between Glasgow and Inverness. Updates to follow at the incident progresses.

Next update at: 22:00 06/08/2025

Engineers are currently on-site and actively investigating the issue, with all relevant support teams fully engaged.

To ensure the teams have the space to focus on resolution efforts, we are managing communications carefully and will provide an update as soon as further information becomes available.

Major Incident Management are closely monitoring the situation to ensure the issue is resolved as quickly as possible.

Next update at: 20:00 06/08/2025

CityFibre have got engineers on-site and our team will continue to triage the issue.

Next update at: 17:30 06/08/2025

CityFibre have now confirmed splicing has been completed.

Services are now back online.

CityFibre have identified the cause of the incident as a broken fibre, engineers are on-site repairing the fibre to restore the service. CityFibre apologise for any inconvenience. CityFibre are closely monitoring the situation to ensure the issue is fully resolved.

Next update at: 15:30 05/08/2025

The Major Incident Team are currently investigating an incident that is significantly impacting services in Glasgow and surrounding areas. We are working to identify the issue and resolve the issue as quickly as possible.

Next update at: 14:30 05/08/2025

CityFibre are aware of an ongoing incident affecting a number of services. Engineers are conducting preliminary investigations to determine the comprehensive Service Impact Analysis. CityFibre apologise for the inconvenience caused. Our main priority is to deliver the levels of service that our customers deserve and as such we have invoked our Major Incident Process. CityFibre are working to affect a full restoration as soon as possible. They will continue to issue regular updates until all services have been restored. Further details will be issued within 15 minutes.

As we have had no further reports we will be marking this has resolved.

We have had reports that members are now back online. We will keep monitoring this and resolve if we don’t hear anything further.

We have contacted CityFibre support again who have said they are unaware of any issues but have raised to the networks team.

We are aware of the rumour of damaged cable replacement but we are at liberty to CityFibre confirming this. If this is planned and not been communicated we will be raising a complaint.