Threat Bulletin 0446: memcached amplification against a education platform platform in the UK
memcached amplification against a education platform platform in the UK, peaking at 244.6 Gbps. Mitigated in 0.719 seconds.
hacktivism
Introducing adaptive proof-of-work difficulty (part 4)
introducing adaptive proof-of-work difficulty sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Latency budgetOur budget for the whole filtering pipeline…
Protecting WordPress login and XML-RPC from abuse (part 2)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to…
Threat Bulletin 0421: GRE flood against a ticketing platform in Latin America
GRE flood against a ticketing platform in Latin America, peaking at 31.2 Gbps. Mitigated in 0.648 seconds.
Threat Bulletin 0416: memcached amplification against a tax authority portal platform in the Middle East
memcached amplification against a tax authority portal platform in the Middle East, peaking at 383.8 Gbps. Mitigated in 0.404 seconds.
Threat Bulletin 0400: carpet-bombing UDP flood against a municipal services platform in Iberia
carpet-bombing UDP flood against a municipal services platform in Iberia, peaking at 123.6 Gbps. Mitigated in 0.189 seconds.
Threat Bulletin 0395: HTTP GET flood against a B2B SaaS platform in North America
HTTP GET flood against a B2B SaaS platform in North America, peaking at 190.8 million requests per second. Mitigated in 0.419 seconds.
Threat Bulletin 0393: CLDAP reflection against a electronics retail platform in Latin America
CLDAP reflection against a electronics retail platform in Latin America, peaking at 139.3 Gbps. Mitigated in 0.454 seconds.
What to put in your DDoS runbook
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every…
Threat Bulletin 0369: SYN flood against a developer platform platform in the Benelux
SYN flood against a developer platform platform in the Benelux, peaking at 281.4 Gbps. Mitigated in 0.430 seconds.
Threat Bulletin 0366: cache-busting query flood against a tax authority portal platform in North America
cache-busting query flood against a tax authority portal platform in North America, peaking at 689.1 million requests per second. Mitigated in 0.427 seconds.
Threat Bulletin 0362: memcached amplification against a retail banking platform in Iberia
memcached amplification against a retail banking platform in Iberia, peaking at 43.8 Gbps. Mitigated in 0.529 seconds.