SonoSuite incident

DoS attack

Critical Resolved View vendor source →

SonoSuite experienced a critical incident on August 7, 2021 affecting Core, lasting 1d 21h. The incident has been resolved; the full update timeline is below.

Started
Aug 07, 2021, 01:07 PM UTC
Resolved
Aug 09, 2021, 10:36 AM UTC
Duration
1d 21h
Detected by Pingoru
Aug 07, 2021, 01:07 PM UTC

Affected components

Core

Update timeline

  1. identified Aug 07, 2021, 01:07 PM UTC

    Yesterday's Denial of Service attack has restarted a little less than two hours ago. Platform has had its performance degraded until it has had a short downtime. We are working to restore service and stop this attack.

  2. monitoring Aug 07, 2021, 01:44 PM UTC

    We are blocking the attack, and monitoring it. From what we've seen the attack is directed against a single client. It is not a general attack against the sonosuite platform. Platform is up, with a slightly degraded performance.

  3. monitoring Aug 07, 2021, 02:12 PM UTC

    Attack has seemingly been stopped. We'll keep monitoring in case there are new waves after this one. We've confirmed attack's target was a single client domain. It was also the same client targeted by yesterday's attack.

  4. resolved Aug 09, 2021, 10:36 AM UTC

    We've haven't had any unusual activity on the last 24h, so we are giving the incident as closed.