Threat Bulletin 1408: Slowloris against a video streaming platform in Latin America
Slowloris against a video streaming platform in Latin America, peaking at 297.9 million requests per second. Mitigated in 0.016 seconds.
credential-stuffing
Threat Bulletin 1395: Slowloris against a crypto exchange platform in North America
Slowloris against a crypto exchange platform in North America, peaking at 788.2 million requests per second. Mitigated in 0.182 seconds.
Threat Bulletin 1392: WebSocket connection flood against a video streaming platform in Southeast Asia
WebSocket connection flood against a video streaming platform in Southeast Asia, peaking at 868.5 million requests per second. Mitigated in 0.566 seconds.
Threat Bulletin 1386: CLDAP reflection against a news publisher platform in Latin America
CLDAP reflection against a news publisher platform in Latin America, peaking at 323.8 Gbps. Mitigated in 0.124 seconds.
Building a per-route baseline without storing every request
Over the last few months we have spent a lot of time on building a per-route baseline without storing every request. This is what we learned.Observability firstEvery mitigation decision is logged with…
Tuning challenge thresholds for mobile traffic behind CGNAT (part 2)
This post is about tuning challenge thresholds for mobile traffic behind CGNAT. It started, as most of our posts do, with an incident that did not go the way we expected.The economics…
Tuning challenge thresholds for mobile traffic behind CGNAT
tuning challenge thresholds for mobile traffic behind CGNAT sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What actually happens during…
Threat Bulletin 1297: UDP reflection (DNS) against a news publisher platform in the Middle East
UDP reflection (DNS) against a news publisher platform in the Middle East, peaking at 204.8 Gbps. Mitigated in 0.780 seconds.
Threat Bulletin 1237: ACK flood against a healthcare portal platform in the Nordics
ACK flood against a healthcare portal platform in the Nordics, peaking at 317.5 Gbps. Mitigated in 0.776 seconds.
Threat Bulletin 1205: credential stuffing against a news publisher platform in Western Europe
credential stuffing against a news publisher platform in Western Europe, peaking at 386.7 million requests per second. Mitigated in 0.895 seconds.
Threat Bulletin 1195: cache-busting query flood against a gaming community platform in North America
cache-busting query flood against a gaming community platform in North America, peaking at 227.2 million requests per second. Mitigated in 0.408 seconds.
Threat Bulletin 1166: TLS handshake exhaustion against a healthcare portal platform in the UK
TLS handshake exhaustion against a healthcare portal platform in the UK, peaking at 894.3 million requests per second. Mitigated in 0.653 seconds.