Threat Bulletin 0183: search endpoint flood against a gaming community platform in the Nordics
search endpoint flood against a gaming community platform in the Nordics, peaking at 694.3 million requests per second. Mitigated in 0.828 seconds.
proof-of-work
Bot management without CAPTCHAs (part 3)
Here is a question we could not answer well a year ago: what really happens with bot management without CAPTCHAs? We can answer it now.Challenges beat blocksBlocking lists go stale within minutes…
Threat Bulletin 0154: UDP reflection (NTP) against a B2B SaaS platform in Western Europe
UDP reflection (NTP) against a B2B SaaS platform in Western Europe, peaking at 228.7 Gbps. Mitigated in 0.167 seconds.
Threat Bulletin 0128: CLDAP reflection against a municipal services platform in the Middle East
CLDAP reflection against a municipal services platform in the Middle East, peaking at 328.4 Gbps. Mitigated in 0.012 seconds.
Threat Bulletin 0122: TLS handshake exhaustion against a municipal services platform in North America
TLS handshake exhaustion against a municipal services platform in North America, peaking at 186.6 million requests per second. Mitigated in 0.556 seconds.
Threat Bulletin 0093: cache-busting query flood against a electronics retail platform in the UK
cache-busting query flood against a electronics retail platform in the UK, peaking at 198.8 million requests per second. Mitigated in 0.199 seconds.
Threat Bulletin 0078: CLDAP reflection against a online payments platform in the Middle East
CLDAP reflection against a online payments platform in the Middle East, peaking at 52.9 Gbps. Mitigated in 0.664 seconds.
Threat Bulletin 0072: UDP reflection (DNS) against a tax authority portal platform in Southeast Asia
UDP reflection (DNS) against a tax authority portal platform in Southeast Asia, peaking at 32.3 Gbps. Mitigated in 0.079 seconds.
Threat Bulletin 0062: HTTP/2 rapid reset against a developer platform platform in North America
HTTP/2 rapid reset against a developer platform platform in North America, peaking at 199.1 million requests per second. Mitigated in 0.195 seconds.
Building a per-route baseline without storing every request (part 2)
building a per-route baseline without storing every request sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Challenges beat blocksBlocking lists…
Keeping search engine bots happy while blocking scrapers (part 4)
Here is a question we could not answer well a year ago: what really happens with keeping search engine bots happy while blocking scrapers? We can answer it now.Measuring successWe track three…
Threat Bulletin 0023: HTTP GET flood against a gaming community platform in Southeast Asia
HTTP GET flood against a gaming community platform in Southeast Asia, peaking at 695.3 million requests per second. Mitigated in 0.628 seconds.