AUTODESK EVENT ANALYSIS
Incident Number: #COE-INC116313-c4r
Incident Date: March 10, 2025
Summary
Beginning March 10, 2025, at 8:42 AM GMT until March 11, 2025, at 4:24 PM GMT, availability of Autodesk Revit Cloud Worksharing / Cloud Models was intermittent in the European Union region. During this time, customers may have periodically encountered a Windows Security warning stating, "This content is blocked as C2 detection. For your protection, your IT admin is not allowing you to access content from skyscraper.eu.autodesk.com." As a result, they may have been unable to access or browse Revit Cloud Models.
Impacted Services
- Revit Cloud Worksharing / Cloud Models (European Union region)
Root Cause
- Unrelated to any Autodesk product, an IP address was previously reported to Microsoft as malicious.
- In response, Microsoft updated Windows Defender to block the IP address.
- Consequently, the blocked IP address was dynamically (re)assigned to Revit Cloud Worksharing / Cloud Models in the EU Region, causing intermittent disruptions to the service.
Autodesk Actions
Autodesk has completed a post-incident analysis of the event and identified actions to be taken. These include the following:
- Implementing process improvements to ensure the Autodesk Health Dashboard is updated as soon as possible when availability of service has been disrupted, regardless of the root cause.
- Reviewing solutions for faster recovery from scenarios such as this.
- Updating troubleshooting and recovery playbooks to reflect learnings from this incident.
- Implementing infrastructure improvements to reduce the risk of inheriting a blocked IP address.
- Review third-party engagement model to improve incident recovery times.
Thank you for your patience and understanding.