SonoSuite experienced a major incident on November 18, 2020 affecting Core, lasting 1d 19h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring Nov 18, 2020, 01:03 PM UTC
We have detected a brute force attack on logins that is affecting the performance of the application. We have already applied measures and are now monitoring the results.
- monitoring Nov 18, 2020, 02:26 PM UTC
We've blocked some IP sets behind most of the login attempts. We'll add more IP sets to the blacklist until attack stops. In case some legitimate users try to login and get blocked, ask them to use https://whatismyipaddress.com/es/mi-ip (or any other similar tool) and report their IP to add it to the whitelist of allowed addresses.
- monitoring Nov 18, 2020, 03:05 PM UTC
We are continuing to monitor for any further issues.
- resolved Nov 20, 2020, 08:29 AM UTC
Attack was slowed down as Thursday progressed, and was stopped early night. Everything is normal now.