Threat Bulletin 0999: HTTP POST flood against a education platform platform in the Middle East
HTTP POST flood against a education platform platform in the Middle East, peaking at 399.1 million requests per second. Mitigated in 0.397 seconds.
incident-response
Threat Bulletin 0975: UDP reflection (NTP) against a ticketing platform in the UK
UDP reflection (NTP) against a ticketing platform in the UK, peaking at 218.5 Gbps. Mitigated in 0.182 seconds.
Threat Bulletin 0972: cache-busting query flood against a online payments platform in the Middle East
cache-busting query flood against a online payments platform in the Middle East, peaking at 154.9 million requests per second. Mitigated in 0.139 seconds.
Threat Bulletin 0971: WebSocket connection flood against a airline booking platform in Southeast Asia
WebSocket connection flood against a airline booking platform in Southeast Asia, peaking at 386.6 million requests per second. Mitigated in 0.937 seconds.
Threat Bulletin 0933: GRE flood against a developer platform platform in the Nordics
GRE flood against a developer platform platform in the Nordics, peaking at 221.9 Gbps. Mitigated in 0.323 seconds.
Threat Bulletin 0927: carpet-bombing UDP flood against a developer platform platform in the UK
carpet-bombing UDP flood against a developer platform platform in the UK, peaking at 122.2 Gbps. Mitigated in 0.215 seconds.
The new incident timeline, explained
We get asked about the new incident timeline, explained more than almost anything else, so here is the long answer.Protecting the originNone of this matters if the attacker can reach your origin…
Threat Bulletin 0900: WebSocket connection flood against a ticketing platform in the UK
WebSocket connection flood against a ticketing platform in the UK, peaking at 424.0 million requests per second. Mitigated in 0.350 seconds.
Rules engine 2.0: priorities, dry runs and rollbacks (part 2)
We get asked about rules engine 2.0: priorities, dry runs and rollbacks more than almost anything else, so here is the long answer.Why per-route baselines matterA thousand requests per second to your…
Threat Bulletin 0858: search endpoint flood against a fashion retail platform in North America
search endpoint flood against a fashion retail platform in North America, peaking at 779.0 million requests per second. Mitigated in 0.256 seconds.
Threat Bulletin 0851: memcached amplification against a retail banking platform in Latin America
memcached amplification against a retail banking platform in Latin America, peaking at 136.7 Gbps. Mitigated in 0.306 seconds.
Keeping search engine bots happy while blocking scrapers (part 2)
Here is a question we could not answer well a year ago: what really happens with keeping search engine bots happy while blocking scrapers? We can answer it now.Protecting the originNone of…