Happy IPv6 Day: Usage On the Rise, Attacks Too
June 06, 2013 6:00 AM
June 6th is known as World IPv6 Day so we thought it was a good time to look at the trends in IPv6 usage across CloudFlare's network. ...
Patching the Internet in Realtime: Fixing the Current WordPress Brute Force Attack
April 11, 2013 9:23 PM
There is currently a significant attack being launched at a large number of WordPress blogs across the Internet. The attacker is brute force attacking the WordPress administrative portals, using the username "admin" and trying thousands of passwords. ...
How the CloudFlare Team Got Into Bondage (It's Not What You Think)
April 08, 2013 7:18 AM
At CloudFlare, we're always looking for ways to eliminate bottlenecks. We're only able to deal with the very large amount of traffic that we handle because we've built a network that can efficiently handle an extremely high volume of network requests. ...
The DDoS That Almost Broke the Internet
March 27, 2013 4:35 PM
The New York Times this morning published a story about the Spamhaus DDoS attack and how CloudFlare helped mitigate it and keep the site online. The Times calls the attack the largest known DDoS attack ever on the Internet....
The DDoS That Knocked Spamhaus Offline (And How We Mitigated It)
March 20, 2013 6:26 PM
At CloudFlare, we deal with large DDoS attacks every day. Usually, these attacks are directed at large companies or organizations that are reluctant to talk about their details. Sometimes a customer is willing to let us tell their story....
MORE POSTS
December 21, 2012 3:41 AM
Hackers love the holidays
Looking at the latest DDoS attack statistics from CloudFlare's network, it seems that hackers love the holidays....
- By
November 27, 2012 11:49 PM
Ceasefires Don't End Cyberwars
There is a significant conflict in the Middle East. As has been widely reported, along with the physical confrontation between the Israelis and Palestinians, there have been widespread cyber attacks....
- By
October 30, 2012 7:54 AM
Deep Inside a DNS Amplification DDoS Attack
A few weeks ago I wrote about DNS Amplification Attacks. These attacks are some of the largest, as measured by the number of Gigabits per second (Gbps), that we see directed toward our network....
- By
September 17, 2012 8:17 PM
How to Launch a 65Gbps DDoS, and How to Stop One
Yesterday I posted a post mortem on an outage we had Saturday. The outage was caused when we applied an overly aggressive rate limit to traffic on our network while battling a determined DDoS attacker. ...
- By
August 28, 2012 5:44 PM
Turning "I'm Under Attack" into "I'm Doing Some Good"
CloudFlare's I'm Under Attack mode allows our customers to, at the click of a button, tell us that they are experiencing an attack and enable automatic protection. It works by slowing down visits to the web site that's under attack and performing extra work to identify malicious ...
- By
August 16, 2012 8:58 AM
Saturday Night Fever: Layer 7 attacks against CloudFlare sites
Recently, I've taken a look at DDoS attacks against CloudFlare sites at the IP level and the source of those attacks. The worst time for those DDoS attacks is the Wednesday Witching Hour and because of source IP address forgery most of the attacks seem to come from Mars. ...
- By
August 06, 2012 2:06 PM
Mars Attacks!
Following on from my recent post about when attacks hit CloudFlare, here's a follow up looking at where they come from. Or at least where they say they come from. Looking at attack statistics for the month of July 2012 the largest source of attacks is Mars....
- By
August 03, 2012 3:06 PM
The Wednesday Witching Hour: CloudFlare DoS Statistics
Data from inside CloudFlare's network shows that over 40% of the time there's a denial of service attack happening and directed at us. And that's just up to network layer 4 (i.e. it doesn't include more sophisticated attacks targeting applications themselves at layer 7)....
- By
June 04, 2012 10:02 PM
The Four Critical Security Flaws that Resulted in Last Friday's Hack
A core value CloudFlare is that security information should be shared between organizations to make the entire Internet safer. That is how CloudFlare's systems work: if one site is attacked, data about that attack is immediately shared with the rest of the network so other sites ...
- By
June 01, 2012 10:22 PM
Post Mortem: Today's Attack; Apparent Google Apps/Gmail Vulnerability; and How to Protect Yourself
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures....
- By
December 21, 2011 11:04 PM
2011: The Year of the DDoS
As the year comes to a close, we've been assembling trend data for 2011. One of the most interesting has been the rise of denial of service (DDoS) attacks. Controlling for CloudFlare's growth, we've seen a 700% increase in DDoS attacks over the course of the year....
- By
December 15, 2011 12:28 AM
Do Hackers Take the Holidays Off?
I was talking last week with Shawn Graham, a reporter at Fast Company, and he asked a simple but interesting question: do hackers take the holidays off?...
- By
November 16, 2011 6:59 PM
SOPA Could Create New Denial of Service Attack, Powered by Law not Botnets
The United States House of Representatives is considering the Stop Online Piracy Act, known as SOPA. Companies including Google, Zynga, Facebook, Yahoo, AOL, and Mozilla, along with organizations like the Electronic Frontier Foundation (EFF) have been sharply critical of the law....
- By
August 24, 2011 11:54 PM
Apache Killer Terminated: Zero Day Exploit, Zero Day Fix
Early this morning word spread that there was a zero day exploit dubbed the "Apache Killer." The exploit uses malformed Apache byte-range headers to crash the web server. The exploit is effective against the latest versions of Apache as well as versions back to v1.3. ...
- By