Attack seasonality: sports finals, sales and tax deadlines
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Latency budgetOur budget for the whole filtering…
layer-7
Threat Bulletin 0190: Slowloris against a fashion retail platform in North America
Slowloris against a fashion retail platform in North America, peaking at 549.6 million requests per second. Mitigated in 0.304 seconds.
Threat Bulletin 0189: WebSocket connection flood against a online casino platform in Western Europe
WebSocket connection flood against a online casino platform in Western Europe, peaking at 480.0 million requests per second. Mitigated in 0.533 seconds.
Threat Bulletin 0187: TLS handshake exhaustion against a B2B SaaS platform in the UK
TLS handshake exhaustion against a B2B SaaS platform in the UK, peaking at 612.0 million requests per second. Mitigated in 0.641 seconds.
Threat Bulletin 0186: WebSocket connection flood against a airline booking platform in Western Europe
WebSocket connection flood against a airline booking platform in Western Europe, peaking at 452.4 million requests per second. Mitigated in 0.485 seconds.
Threat Bulletin 0184: WebSocket connection flood against a online payments platform in the Benelux
WebSocket connection flood against a online payments platform in the Benelux, peaking at 361.1 million requests per second. Mitigated in 0.145 seconds.
Threat Bulletin 0183: search endpoint flood against a gaming community platform in the Nordics
search endpoint flood against a gaming community platform in the Nordics, peaking at 694.3 million requests per second. Mitigated in 0.828 seconds.
Threat Bulletin 0182: TLS handshake exhaustion against a video streaming platform in North America
TLS handshake exhaustion against a video streaming platform in North America, peaking at 457.5 million requests per second. Mitigated in 0.060 seconds.
Threat Bulletin 0180: HTTP/2 rapid reset against a healthcare portal platform in Latin America
HTTP/2 rapid reset against a healthcare portal platform in Latin America, peaking at 590.3 million requests per second. Mitigated in 0.405 seconds.
Threat Bulletin 0179: cache-busting query flood against a retail banking platform in Southeast Asia
cache-busting query flood against a retail banking platform in Southeast Asia, peaking at 153.6 million requests per second. Mitigated in 0.764 seconds.
Threat Bulletin 0178: HTTP GET flood against a developer platform platform in the Nordics
HTTP GET flood against a developer platform platform in the Nordics, peaking at 177.5 million requests per second. Mitigated in 0.640 seconds.
Threat Bulletin 0177: credential stuffing against a retail banking platform in Iberia
credential stuffing against a retail banking platform in Iberia, peaking at 67.7 million requests per second. Mitigated in 0.482 seconds.