Carpet bombing: spreading an attack across a whole /22 (part 2)
Here is a question we could not answer well a year ago: what really happens with carpet bombing: spreading an attack across a whole /22? We can answer it now.Protecting the originNone…
virtual-patching
Log streaming to your SIEM, now in near real time (part 2)
We get asked about log streaming to your SIEM, now in near real time more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing…
Protecting WordPress login and XML-RPC from abuse (part 3)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay…
Threat Bulletin 0828: SYN flood against a developer platform platform in Iberia
SYN flood against a developer platform platform in Iberia, peaking at 340.3 Gbps. Mitigated in 0.082 seconds.
Threat Bulletin 0825: ACK flood against a retail banking platform in North America
ACK flood against a retail banking platform in North America, peaking at 137.6 Gbps. Mitigated in 0.141 seconds.
Threat Bulletin 0823: Slowloris against a online casino platform in Southeast Asia
Slowloris against a online casino platform in Southeast Asia, peaking at 585.0 million requests per second. Mitigated in 0.635 seconds.
Threat Bulletin 0801: memcached amplification against a online payments platform in the UK
memcached amplification against a online payments platform in the UK, peaking at 80.9 Gbps. Mitigated in 0.218 seconds.
Threat Bulletin 0756: HTTP GET flood against a fashion retail platform in North America
HTTP GET flood against a fashion retail platform in North America, peaking at 161.5 million requests per second. Mitigated in 0.267 seconds.
Threat Bulletin 0737: TLS handshake exhaustion against a online payments platform in Southeast Asia
TLS handshake exhaustion against a online payments platform in Southeast Asia, peaking at 692.8 million requests per second. Mitigated in 0.224 seconds.
Threat Bulletin 0704: WebSocket connection flood against a municipal services platform in Southeast Asia
WebSocket connection flood against a municipal services platform in Southeast Asia, peaking at 23.5 million requests per second. Mitigated in 0.692 seconds.
Threat Bulletin 0684: carpet-bombing UDP flood against a education platform platform in Latin America
carpet-bombing UDP flood against a education platform platform in Latin America, peaking at 361.7 Gbps. Mitigated in 0.470 seconds.
Threat Bulletin 0669: ACK flood against a news publisher platform in the Nordics
ACK flood against a news publisher platform in the Nordics, peaking at 261.3 Gbps. Mitigated in 0.477 seconds.