Threat Bulletin 0417: TLS handshake exhaustion against a electronics retail platform in the UK
TLS handshake exhaustion against a electronics retail platform in the UK, peaking at 917.2 million requests per second. Mitigated in 0.528 seconds.
credential-stuffing
eBPF maps, hash collisions and a very long night (part 2)
Over the last few months we have spent a lot of time on eBPF maps, hash collisions and a very long night. This is what we learned.The numbersAcross the last quarter, 71%…
Threat Bulletin 0338: search endpoint flood against a fashion retail platform in North America
search endpoint flood against a fashion retail platform in North America, peaking at 257.0 million requests per second. Mitigated in 0.862 seconds.
What we learned from load-testing our own edge to failure
Over the last few months we have spent a lot of time on what we learned from load-testing our own edge to failure. This is what we learned.Challenges beat blocksBlocking lists go…
Threat Bulletin 0272: carpet-bombing UDP flood against a online payments platform in the Benelux
carpet-bombing UDP flood against a online payments platform in the Benelux, peaking at 112.8 Gbps. Mitigated in 0.564 seconds.
Deflecto Edge 3.14.1 release notes
Rolled out to all points of presence on 1 January 2022. No action is required. Improved fingerprint consistency scoring for […]
Threat Bulletin 0188: UDP reflection (NTP) against a education platform platform in the Nordics
UDP reflection (NTP) against a education platform platform in the Nordics, peaking at 58.2 Gbps. Mitigated in 0.696 seconds.
Threat Bulletin 0164: CLDAP reflection against a fashion retail platform in Iberia
CLDAP reflection against a fashion retail platform in Iberia, peaking at 351.2 Gbps. Mitigated in 0.040 seconds.
Threat Bulletin 0162: HTTP POST flood against a municipal services platform in North America
HTTP POST flood against a municipal services platform in North America, peaking at 172.4 million requests per second. Mitigated in 0.391 seconds.
Bot management without CAPTCHAs (part 3)
Here is a question we could not answer well a year ago: what really happens with bot management without CAPTCHAs? We can answer it now.Challenges beat blocksBlocking lists go stale within minutes…
Threat Bulletin 0124: memcached amplification against a retail banking platform in Iberia
memcached amplification against a retail banking platform in Iberia, peaking at 293.3 Gbps. Mitigated in 0.428 seconds.
Threat Bulletin 0108: login endpoint flood against a fashion retail platform in the UK
login endpoint flood against a fashion retail platform in the UK, peaking at 607.2 million requests per second. Mitigated in 0.572 seconds.