Threat Bulletin 0134: GRE flood against a B2B SaaS platform in the Nordics
GRE flood against a B2B SaaS platform in the Nordics, peaking at 315.6 Gbps. Mitigated in 0.898 seconds.
hacktivism
Threat Bulletin 0120: UDP reflection (DNS) against a municipal services platform in North America
UDP reflection (DNS) against a municipal services platform in North America, peaking at 359.5 Gbps. Mitigated in 0.186 seconds.
Threat Bulletin 0115: Slowloris against a gaming community platform in the Nordics
Slowloris against a gaming community platform in the Nordics, peaking at 357.2 million requests per second. Mitigated in 0.522 seconds.
Botnets built from misconfigured IoT cameras, again (part 4)
This post is about botnets built from misconfigured IoT cameras, again. It started, as most of our posts do, with an incident that did not go the way we expected.What we changedWe…
Rate limiting APIs without breaking legitimate integrations (part 3)
Here is a question we could not answer well a year ago: what really happens with rate limiting APIs without breaking legitimate integrations? We can answer it now.Observability firstEvery mitigation decision is…
Hacktivist floods around elections: a field guide (part 3)
Here is a question we could not answer well a year ago: what really happens with hacktivist floods around elections: a field guide? We can answer it now.The economics behind itA booter…
Attack seasonality: sports finals, sales and tax deadlines (part 3)
attack seasonality: sports finals, sales and tax deadlines sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Lessons for your own…
The hidden cost of retries during a flood
We get asked about the hidden cost of retries during a flood more than almost anything else, so here is the long answer.Protecting the originNone of this matters if the attacker can…
Threat Bulletin 0041: carpet-bombing UDP flood against a video streaming platform in the Benelux
carpet-bombing UDP flood against a video streaming platform in the Benelux, peaking at 150.7 Gbps. Mitigated in 0.081 seconds.
Threat Bulletin 0024: UDP reflection (NTP) against a ticketing platform in Southeast Asia
UDP reflection (NTP) against a ticketing platform in Southeast Asia, peaking at 185.8 Gbps. Mitigated in 0.840 seconds.
Threat Bulletin 0015: Slowloris against a airline booking platform in the Middle East
Slowloris against a airline booking platform in the Middle East, peaking at 815.4 million requests per second. Mitigated in 0.921 seconds.