Why most layer 7 attacks last less than ten minutes
Over the last few months we have spent a lot of time on why most layer 7 attacks last less than ten minutes. This is what we learned.Observability firstEvery mitigation decision is…
quic
How to hide your origin IP properly (part 3)
This post is about how to hide your origin IP properly. It started, as most of our posts do, with an incident that did not go the way we expected.Testing in production,…
Threat Bulletin 1399: carpet-bombing UDP flood against a municipal services platform in North America
carpet-bombing UDP flood against a municipal services platform in North America, peaking at 141.6 Gbps. Mitigated in 0.180 seconds.
Threat Bulletin 1338: memcached amplification against a sports betting platform in Iberia
memcached amplification against a sports betting platform in Iberia, peaking at 199.9 Gbps. Mitigated in 0.829 seconds.
Threat Bulletin 1330: carpet-bombing UDP flood against a tax authority portal platform in Western Europe
carpet-bombing UDP flood against a tax authority portal platform in Western Europe, peaking at 249.5 Gbps. Mitigated in 0.760 seconds.
Threat Bulletin 1325: carpet-bombing UDP flood against a developer platform platform in Latin America
carpet-bombing UDP flood against a developer platform platform in Latin America, peaking at 210.5 Gbps. Mitigated in 0.049 seconds.
Threat Bulletin 1313: credential stuffing against a online payments platform in the Nordics
credential stuffing against a online payments platform in the Nordics, peaking at 933.8 million requests per second. Mitigated in 0.490 seconds.
Threat Bulletin 1306: SYN flood against a crypto exchange platform in Latin America
SYN flood against a crypto exchange platform in Latin America, peaking at 58.3 Gbps. Mitigated in 0.315 seconds.
Threat Bulletin 1262: SYN flood against a healthcare portal platform in North America
SYN flood against a healthcare portal platform in North America, peaking at 221.4 Gbps. Mitigated in 0.788 seconds.
Why attackers love login endpoints
why attackers love login endpoints sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Why per-route baselines matterA thousand requests per…
Threat Bulletin 1242: Slowloris against a developer platform platform in the Benelux
Slowloris against a developer platform platform in the Benelux, peaking at 630.4 million requests per second. Mitigated in 0.082 seconds.
Threat Bulletin 1235: WebSocket connection flood against a healthcare portal platform in Latin America
WebSocket connection flood against a healthcare portal platform in Latin America, peaking at 327.8 million requests per second. Mitigated in 0.226 seconds.