Threat Bulletin 0835: login endpoint flood against a crypto exchange platform in Latin America
login endpoint flood against a crypto exchange platform in Latin America, peaking at 20.1 million requests per second. Mitigated in 0.135 seconds.
Deflecto Edge 15.3.5 release notes
Rolled out to all points of presence on 12 May 2024. No action is required. Faster rule propagation: median 27 […]
Connection pooling to the origin: the numbers that surprised us
This post is about connection pooling to the origin: the numbers that surprised us. It started, as most of our posts do, with an incident that did not go the way we…
Threat Bulletin 0834: Slowloris against a video streaming platform in Western Europe
Slowloris against a video streaming platform in Western Europe, peaking at 978.0 million requests per second. Mitigated in 0.456 seconds.
Threat Bulletin 0833: ACK flood against a airline booking platform in Latin America
ACK flood against a airline booking platform in Latin America, peaking at 354.8 Gbps. Mitigated in 0.629 seconds.
Challenge instead of block: fewer false positives, same protection (part 2)
challenge instead of block: fewer false positives, same protection sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.The numbersAcross the…
Log streaming to your SIEM, now in near real time (part 2)
We get asked about log streaming to your SIEM, now in near real time more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing…
Threat Bulletin 0832: HTTP POST flood against a retail banking platform in the Middle East
HTTP POST flood against a retail banking platform in the Middle East, peaking at 790.8 million requests per second. Mitigated in 0.634 seconds.
Threat Bulletin 0831: SYN flood against a healthcare portal platform in the Benelux
SYN flood against a healthcare portal platform in the Benelux, peaking at 109.6 Gbps. Mitigated in 0.448 seconds.
Threat Bulletin 0830: WebSocket connection flood against a news publisher platform in North America
WebSocket connection flood against a news publisher platform in North America, peaking at 589.3 million requests per second. Mitigated in 0.817 seconds.
Protecting WordPress login and XML-RPC from abuse (part 3)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay…
Threat Bulletin 0829: cache-busting query flood against a municipal services platform in the Benelux
cache-busting query flood against a municipal services platform in the Benelux, peaking at 927.7 million requests per second. Mitigated in 0.016 seconds.