WebSocket connection flood against a airline booking platform in Western Europe, peaking at 452.4 million requests per second. Mitigated in 0.485 seconds.
GRE flood against a video streaming platform in Latin America, peaking at 348.6 Gbps. Mitigated in 0.191 seconds.
WebSocket connection flood against a online payments platform in the Benelux, peaking at 361.1 million requests per second. Mitigated in 0.145 seconds.
search endpoint flood against a gaming community platform in the Nordics, peaking at 694.3 million requests per second. Mitigated in 0.828 seconds.
TLS handshake exhaustion against a video streaming platform in North America, peaking at 457.5 million requests per second. Mitigated in 0.060 seconds.
UDP reflection (DNS) against a tax authority portal platform in Iberia, peaking at 368.4 Gbps. Mitigated in 0.807 seconds.
This post is about credential stuffing volumes after the latest combo-list leak. It started, as most of our posts do, with an incident that did not go the way we expected.Observability firstEvery…
HTTP/2 rapid reset against a healthcare portal platform in Latin America, peaking at 590.3 million requests per second. Mitigated in 0.405 seconds.
cache-busting query flood against a retail banking platform in Southeast Asia, peaking at 153.6 million requests per second. Mitigated in 0.764 seconds.
HTTP GET flood against a developer platform platform in the Nordics, peaking at 177.5 million requests per second. Mitigated in 0.640 seconds.
credential stuffing against a retail banking platform in Iberia, peaking at 67.7 million requests per second. Mitigated in 0.482 seconds.
Over the last few months we have spent a lot of time on the new incident timeline, explained. This is what we learned.Lessons for your own runbookKnow who can change DNS at…