Threat Bulletin 0521: WebSocket connection flood against a online casino platform in the UK
WebSocket connection flood against a online casino platform in the UK, peaking at 329.6 million requests per second. Mitigated in 0.229 seconds.
WebSocket connection flood against a online casino platform in the UK, peaking at 329.6 million requests per second. Mitigated in 0.229 seconds.
UDP reflection (DNS) against a online payments platform in the UK, peaking at 386.3 Gbps. Mitigated in 0.301 seconds.
GRE flood against a ticketing platform in Latin America, peaking at 31.2 Gbps. Mitigated in 0.648 seconds.
Over the last few months we have spent a lot of time on attacks are never metered: why we changed how we bill. This is what we learned.Why per-route baselines matterA thousand…
HTTP/2 rapid reset against a ticketing platform in the Benelux, peaking at 541.2 million requests per second. Mitigated in 0.902 seconds.
Rolled out to all points of presence on 13 August 2022. No action is required. Deprecated /v1/incidents/{id}/export; removal scheduled for […]
HTTP POST flood against a video streaming platform in the UK, peaking at 812.0 million requests per second. Mitigated in 0.636 seconds.
Slowloris against a sports betting platform in the Middle East, peaking at 510.0 million requests per second. Mitigated in 0.811 seconds.
Over the last few months we have spent a lot of time on eBPF maps, hash collisions and a very long night. This is what we learned.The numbersAcross the last quarter, 71%…
SYN flood against a airline booking platform in North America, peaking at 101.8 Gbps. Mitigated in 0.351 seconds.
Over the last few months we have spent a lot of time on how we deploy rule changes to every edge in under 30 seconds. This is what we learned.Observability firstEvery mitigation…
This post is about hacktivist floods around elections: a field guide. It started, as most of our posts do, with an incident that did not go the way we expected.Observability firstEvery mitigation…