Threat Bulletin 0087: ACK flood against a news publisher platform in the Middle East
ACK flood against a news publisher platform in the Middle East, peaking at 233.5 Gbps. Mitigated in 0.225 seconds.
Threat Bulletin 0079: HTTP GET flood against a electronics retail platform in Latin America
HTTP GET flood against a electronics retail platform in Latin America, peaking at 185.3 million requests per second. Mitigated in 0.256 seconds.
Threat Bulletin 0077: CLDAP reflection against a video streaming platform in North America
CLDAP reflection against a video streaming platform in North America, peaking at 353.7 Gbps. Mitigated in 0.904 seconds.
Threat Bulletin 0074: TLS handshake exhaustion against a healthcare portal platform in Southeast Asia
TLS handshake exhaustion against a healthcare portal platform in Southeast Asia, peaking at 599.4 million requests per second. Mitigated in 0.371 seconds.
Inside a Mirai variant that learned to speak HTTP/2
We get asked about inside a Mirai variant that learned to speak HTTP/2 more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time…
Threat Bulletin 0067: SYN flood against a fashion retail platform in the Middle East
SYN flood against a fashion retail platform in the Middle East, peaking at 244.1 Gbps. Mitigated in 0.648 seconds.
Scraper bots are getting better at pretending to be Chrome
Over the last few months we have spent a lot of time on scraper bots are getting better at pretending to be Chrome. This is what we learned.Latency budgetOur budget for the…
Threat Bulletin 0063: SYN flood against a online payments platform in Southeast Asia
SYN flood against a online payments platform in Southeast Asia, peaking at 163.0 Gbps. Mitigated in 0.458 seconds.
Building a per-route baseline without storing every request (part 2)
building a per-route baseline without storing every request sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Challenges beat blocksBlocking lists…
Threat Bulletin 0051: GRE flood against a online casino platform in Central Europe
GRE flood against a online casino platform in Central Europe, peaking at 24.2 Gbps. Mitigated in 0.496 seconds.
Threat Bulletin 0048: GRE flood against a B2B SaaS platform in Iberia
GRE flood against a B2B SaaS platform in Iberia, peaking at 46.5 Gbps. Mitigated in 0.119 seconds.
Threat Bulletin 0040: carpet-bombing UDP flood against a electronics retail platform in Central Europe
carpet-bombing UDP flood against a electronics retail platform in Central Europe, peaking at 72.0 Gbps. Mitigated in 0.073 seconds.