Threat Bulletin 0883: SYN flood against a crypto exchange platform in the Middle East
SYN flood against a crypto exchange platform in the Middle East, peaking at 50.3 Gbps. Mitigated in 0.547 seconds.
Threat Bulletin 0864: cache-busting query flood against a developer platform platform in Western Europe
cache-busting query flood against a developer platform platform in Western Europe, peaking at 941.1 million requests per second. Mitigated in 0.686 seconds.
Threat Bulletin 0854: memcached amplification against a airline booking platform in Southeast Asia
memcached amplification against a airline booking platform in Southeast Asia, peaking at 10.1 Gbps. Mitigated in 0.224 seconds.
Threat Bulletin 0849: CLDAP reflection against a airline booking platform in Central Europe
CLDAP reflection against a airline booking platform in Central Europe, peaking at 205.6 Gbps. Mitigated in 0.164 seconds.
Scraper bots are getting better at pretending to be Chrome (part 3)
We get asked about scraper bots are getting better at pretending to be Chrome more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its…
Threat Bulletin 0847: credential stuffing against a online payments platform in the UK
credential stuffing against a online payments platform in the UK, peaking at 932.3 million requests per second. Mitigated in 0.787 seconds.
Threat Bulletin 0846: HTTP/2 rapid reset against a municipal services platform in Iberia
HTTP/2 rapid reset against a municipal services platform in Iberia, peaking at 807.0 million requests per second. Mitigated in 0.451 seconds.
Threat Bulletin 0840: TLS handshake exhaustion against a video streaming platform in Central Europe
TLS handshake exhaustion against a video streaming platform in Central Europe, peaking at 585.2 million requests per second. Mitigated in 0.035 seconds.
Protecting WordPress login and XML-RPC from abuse (part 3)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay…
Threat Bulletin 0829: cache-busting query flood against a municipal services platform in the Benelux
cache-busting query flood against a municipal services platform in the Benelux, peaking at 927.7 million requests per second. Mitigated in 0.016 seconds.
Threat Bulletin 0827: carpet-bombing UDP flood against a video streaming platform in Western Europe
carpet-bombing UDP flood against a video streaming platform in Western Europe, peaking at 387.0 Gbps. Mitigated in 0.416 seconds.
Threat Bulletin 0823: Slowloris against a online casino platform in Southeast Asia
Slowloris against a online casino platform in Southeast Asia, peaking at 585.0 million requests per second. Mitigated in 0.635 seconds.