Threat Bulletin 1452: credential stuffing against a airline booking platform in the UK
credential stuffing against a airline booking platform in the UK, peaking at 942.5 million requests per second. Mitigated in 0.639 seconds.
residential-proxies
Threat Bulletin 1434: TLS handshake exhaustion against a municipal services platform in Iberia
TLS handshake exhaustion against a municipal services platform in Iberia, peaking at 483.1 million requests per second. Mitigated in 0.537 seconds.
What DORA means for your DDoS resilience (part 2)
This post is about what DORA means for your DDoS resilience. It started, as most of our posts do, with an incident that did not go the way we expected.What we changedWe…
Threat Bulletin 1430: HTTP POST flood against a online payments platform in the Middle East
HTTP POST flood against a online payments platform in the Middle East, peaking at 233.5 million requests per second. Mitigated in 0.650 seconds.
Why most layer 7 attacks last less than ten minutes
Over the last few months we have spent a lot of time on why most layer 7 attacks last less than ten minutes. This is what we learned.Observability firstEvery mitigation decision is…
Threat Bulletin 1408: Slowloris against a video streaming platform in Latin America
Slowloris against a video streaming platform in Latin America, peaking at 297.9 million requests per second. Mitigated in 0.016 seconds.
Threat Bulletin 1399: carpet-bombing UDP flood against a municipal services platform in North America
carpet-bombing UDP flood against a municipal services platform in North America, peaking at 141.6 Gbps. Mitigated in 0.180 seconds.
Threat Bulletin 1385: HTTP/2 rapid reset against a sports betting platform in Central Europe
HTTP/2 rapid reset against a sports betting platform in Central Europe, peaking at 413.0 million requests per second. Mitigated in 0.757 seconds.
Threat Bulletin 1383: login endpoint flood against a gaming community platform in the UK
login endpoint flood against a gaming community platform in the UK, peaking at 739.0 million requests per second. Mitigated in 0.107 seconds.
Threat Bulletin 1362: search endpoint flood against a municipal services platform in the UK
search endpoint flood against a municipal services platform in the UK, peaking at 29.7 million requests per second. Mitigated in 0.151 seconds.
Why most layer 7 attacks last less than ten minutes (part 3)
We get asked about why most layer 7 attacks last less than ten minutes more than almost anything else, so here is the long answer.The economics behind itA booter service rents out…
Tuning challenge thresholds for mobile traffic behind CGNAT (part 2)
This post is about tuning challenge thresholds for mobile traffic behind CGNAT. It started, as most of our posts do, with an incident that did not go the way we expected.The economics…