Threat Bulletin 1451: login endpoint flood against a municipal services platform in North America
login endpoint flood against a municipal services platform in North America, peaking at 921.5 million requests per second. Mitigated in 0.391 seconds.
Zero-downtime certificate rotation at the edge (part 2)
Over the last few months we have spent a lot of time on zero-downtime certificate rotation at the edge. This is what we learned.What actually happens during a floodThe first thing to…
Threat Bulletin 1441: login endpoint flood against a education platform platform in North America
login endpoint flood against a education platform platform in North America, peaking at 846.2 million requests per second. Mitigated in 0.107 seconds.
What DORA means for your DDoS resilience (part 2)
This post is about what DORA means for your DDoS resilience. It started, as most of our posts do, with an incident that did not go the way we expected.What we changedWe…
Threat Bulletin 1427: Slowloris against a fashion retail platform in the Nordics
Slowloris against a fashion retail platform in the Nordics, peaking at 561.6 million requests per second. Mitigated in 0.075 seconds.
Threat Bulletin 1425: carpet-bombing UDP flood against a B2B SaaS platform in North America
carpet-bombing UDP flood against a B2B SaaS platform in North America, peaking at 310.0 Gbps. Mitigated in 0.755 seconds.
Threat Bulletin 1422: CLDAP reflection against a video streaming platform in Latin America
CLDAP reflection against a video streaming platform in Latin America, peaking at 253.3 Gbps. Mitigated in 0.407 seconds.
Anycast is not magic: how we route attacks across 40 PoPs
Here is a question we could not answer well a year ago: what really happens with anycast is not magic: how we route attacks across 40 PoPs? We can answer it now.Measuring…
Threat Bulletin 1414: HTTP POST flood against a online payments platform in Iberia
HTTP POST flood against a online payments platform in Iberia, peaking at 742.4 million requests per second. Mitigated in 0.060 seconds.
GDPR and request logs: what we store and why
Here is a question we could not answer well a year ago: what really happens with gDPR and request logs: what we store and why? We can answer it now.What actually happens…
Threat Bulletin 1412: HTTP GET flood against a municipal services platform in Iberia
HTTP GET flood against a municipal services platform in Iberia, peaking at 635.9 million requests per second. Mitigated in 0.823 seconds.
Threat Bulletin 1410: HTTP POST flood against a video streaming platform in the UK
HTTP POST flood against a video streaming platform in the UK, peaking at 136.9 million requests per second. Mitigated in 0.395 seconds.