Coveralls experienced a notice incident on August 11, 2026 affecting Coveralls.io Web and Coveralls.io API, lasting 2h 7m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Aug 11, 2026, 07:02 PM UTC
We are currently experiencing occasional "Website under heavy load" warnings. We believe this is associated with an army of scraper bots we experienced and successfully mitigated this weekend. We believe those bots may have gotten around an initial phase of defense involving managed challenges at our edge provider. Separate from a DDoS attack, these are millions of individual requests coming from over 200K different IP addresses across 10 different countries, so our standard DDoS defense of IP quarantines at our firewall do not apply. We are implementing a second phase of defense and will report updates here.
- monitoring Aug 11, 2026, 07:55 PM UTC
This was the second wave of the attack we experienced this weekend, broadened and tripled in volume. We implemented a second phase of defense which appear to be working and will continue monitoring for the next hour.
- resolved Aug 11, 2026, 09:09 PM UTC
This incident has been resolved.