{"id":467607,"date":"2022-11-04T13:07:34","date_gmt":"2022-11-04T11:07:34","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=467607"},"modified":"2022-11-05T01:19:39","modified_gmt":"2022-11-04T23:19:39","slug":"dstv-self-service-portal-taken-down-by-dimension-data-security-response","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/cloud-hosting\/467607-dstv-self-service-portal-taken-down-by-dimension-data-security-response.html","title":{"rendered":"DStv self-service portal taken offline by Dimension Data security response"},"content":{"rendered":"<p>The MyDStv self-service portal is back online after an almost nine-hour outage on Wednesday evening and Thursday morning after Dimension Data null-routed its Internet Protocol (IP) address.<\/p>\n<p>Based on feedback from Dimension Data, it blackholed the server\u2019s IP address after receiving a complaint about a phishing attack originating from the same network.<\/p>\n<p>Absolute Hosting provides upstream services to the company that handles DStv\u2019s web hosting, and confirmed that one offending IP address was null-routed, then later its whole network.<\/p>\n<p>However, it wasn\u2019t clear why Dimension Data blocked Absolute Hosting\u2019s entire range of IP addresses.<\/p>\n<p>Furthermore, Absolute Hosting said it had resolved the issue and was informed that the client whose IP address was null-routed would be re-opened, only for Dimension Data to bring their whole network offline.<\/p>\n<p>The outage that brought down MyDStv began at around 22:30 on Wednesday and lasted until 07:18 on Thursday.<\/p>\n<p>In a notice posted on the <strong><a href=\"https:\/\/mybroadband.co.za\/forum\/threads\/thank-you-for-all-the-support-from-all-of-us-at-absolute-hosting.1205892\/post-30215019\" target=\"_blank\" rel=\"noopener\">MyBroadband forum<\/a><\/strong> to customers impacted by the outage, Absolute Hosting provided its side of the story.<\/p>\n<p>\u201c[The Dimension Data] abuse team null-routed a single IP on our network after a client\u2019s site was used to launch an attack against [Microsoft],\u201d it said.<\/p>\n<p>\u201cThey subsequently sent an email to us requesting us to take action, but the email was quarantined on [Microsoft 365], so the notice was never received. They apparently tried to call us and then 30 minutes later null-routed that IP.\u201d<\/p>\n<p>Absolute Hosting spent around four hours diagnosing the issue with the client, only to discover that traffic inbound and outbound for that IP was being dropped.<\/p>\n<p>\u201cAfter numerous calls and escalations, we were told that the \u2018port would be opened,\u2019\u201d the company stated.<\/p>\n<p>On Thursday morning, when they found their whole network offline and scrambled for a solution and explanation, Absolute Hosting searched for the original email notice from Dimension Data.<\/p>\n<p>They found that the takedown notice was only sent at around 21:00 on Wednesday, while the IP was null-routed at 16:35.<\/p>\n<div id=\"attachment_467661\" style=\"width: 1349px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-467661\" class=\"wp-image-467661 size-full\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02.jpg\" alt=\"\" width=\"1339\" height=\"832\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02.jpg 1339w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02-600x373.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02-800x497.jpg 800w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02-768x477.jpg 768w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/11\/MyDStv-outage-2022-11Nov-02-1200x746.jpg 1200w\" sizes=\"(max-width: 1339px) 100vw, 1339px\" \/><\/a><p id=\"caption-attachment-467661\" class=\"wp-caption-text\">The DStv self-service portal was broken on Wednesday, telling users they weren&#8217;t signed in even after going through the login flow<\/p><\/div>\n<h2 class=\"my-4\">Dimension Data responds to MyDStv outage<\/h2>\n<p>MyBroadband asked Dimension Data about the incident, and it provided the following response to our questions.<\/p>\n<p>\u201cStrict security protocols are a critical element of Dimension Data\u2019s overall security guidelines,\u201d a spokesperson for the company said.<\/p>\n<p>Dimension Data said it acts in the interest of the whole system, as the consequences of not doing so are often far more significant.<\/p>\n<p>\u201cAs such, Dimension Data was alerted to a potential phishing attack on 2 November 2022, within the Absolute Hosting environment,\u201d it said.<\/p>\n<p>\u201cOur services team alerted the client, who was unavailable. As a precautionary measure, we went ahead and suspended the services.\u201d<\/p>\n<p>Dimension Data said services were restored after working through the issue with the client on the morning of 3 November.<\/p>\n<p>MyBroadband asked for clarity on why Absolute Hosting\u2019s entire network was null-routed rather than just the offending IP address. It provided the following response:<\/p>\n<p>\u201cDimension Data worked with the client to restore the services. Services could not be restored earlier as testing only took place this morning, due to the client\u2019s availability.\u201d<\/p>\n<h2 class=\"my-4\">Absolute Hosting comments on MyDStv outage<\/h2>\n<div id=\"attachment_447098\" style=\"width: 810px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Jade-Benson-Absolute-Hosting-managing-director-scaled-1.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-447098\" class=\"size-full wp-image-447098\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Jade-Benson-Absolute-Hosting-managing-director-scaled-1.jpg\" alt=\"Jade Benson, Absolute Hosting managing director scaled\" width=\"800\" height=\"533\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Jade-Benson-Absolute-Hosting-managing-director-scaled-1.jpg 800w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Jade-Benson-Absolute-Hosting-managing-director-scaled-1-600x400.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Jade-Benson-Absolute-Hosting-managing-director-scaled-1-768x512.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><p id=\"caption-attachment-447098\" class=\"wp-caption-text\">Jade Benson, Absolute Hosting managing director<\/p><\/div>\n<p>MyBroadband asked Absolute Hosting founder Jade Benson for comment.<\/p>\n<p>\u201cAbsolute Hosting was only made aware of the abuse complaint hours after the affected client\u2019s IP was null routed,\u201d Benson stated.<\/p>\n<p>\u201cThis information was provided to Absolute Hosting during a call with the managed services team, and shortly after being provided with this information, we were able to notify the affected client and have them remove the content responsible for the abuse complaint.\u201d<\/p>\n<p>Benson said they relayed this to Dimension Data, which agreed to remove the null routing.<\/p>\n<p>\u201cHowever, this was unsuccessful and resulted in complete loss of connectivity to our ranges,\u201d he said.<\/p>\n<p>\u201cDimension Data was notified of the issues and only restored routing hours later after a misconfiguration of [virtual LANs] was resolved.\u201d<\/p>\n<hr \/>\n<h2 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/cloud-hosting\/466177-ntt-launches-first-phase-of-load-shedding-immune-johannesburg-1-data-centre.html\">NTT launches first phase of load-shedding immune Johannesburg 1 data centre<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"<p>The MyDStv self-service portal is back online after Dimension Data blackholed its IP address.<\/p>\n","protected":false},"author":15,"featured_media":441744,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[25],"tags":[77930,1691,85,35,77910,475],"class_list":["post-467607","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-hosting","tag-absolute-hosting","tag-dimension-data","tag-dstv","tag-headline","tag-jade-benson","tag-multichoice"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/467607"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=467607"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/467607\/revisions"}],"predecessor-version":[{"id":467665,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/467607\/revisions\/467665"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/441744"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=467607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=467607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=467607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}