Threat Bulletin 0865: memcached amplification against a sports betting platform in Central Europe
memcached amplification against a sports betting platform in Central Europe, peaking at 336.0 Gbps. Mitigated in 0.662 seconds.
nis2
Carpet bombing: spreading an attack across a whole /22 (part 2)
Here is a question we could not answer well a year ago: what really happens with carpet bombing: spreading an attack across a whole /22? We can answer it now.Protecting the originNone…
Extortion DDoS campaigns target payment providers again
extortion DDoS campaigns target payment providers again sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.The economics behind itA booter…
Threat Bulletin 0849: CLDAP reflection against a airline booking platform in Central Europe
CLDAP reflection against a airline booking platform in Central Europe, peaking at 205.6 Gbps. Mitigated in 0.164 seconds.
Threat Bulletin 0839: CLDAP reflection against a healthcare portal platform in Central Europe
CLDAP reflection against a healthcare portal platform in Central Europe, peaking at 381.8 Gbps. Mitigated in 0.568 seconds.
Threat Bulletin 0836: Slowloris against a crypto exchange platform in the Benelux
Slowloris against a crypto exchange platform in the Benelux, peaking at 834.4 million requests per second. Mitigated in 0.415 seconds.
Log streaming to your SIEM, now in near real time (part 2)
We get asked about log streaming to your SIEM, now in near real time more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing…
Protecting WordPress login and XML-RPC from abuse (part 3)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay…
Threat Bulletin 0829: cache-busting query flood against a municipal services platform in the Benelux
cache-busting query flood against a municipal services platform in the Benelux, peaking at 927.7 million requests per second. Mitigated in 0.016 seconds.
Per-tenant rate limits for SaaS platforms (part 4)
We get asked about per-tenant rate limits for SaaS platforms more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold to a…
Threat Bulletin 0819: UDP reflection (NTP) against a ticketing platform in Iberia
UDP reflection (NTP) against a ticketing platform in Iberia, peaking at 115.7 Gbps. Mitigated in 0.616 seconds.
Threat Bulletin 0811: search endpoint flood against a sports betting platform in Southeast Asia
search endpoint flood against a sports betting platform in Southeast Asia, peaking at 269.4 million requests per second. Mitigated in 0.848 seconds.