CloudFaire

DECEMBER 23, 2024

63% of login attempts across our network on Black Friday were from bots. In addition to looking across our entire network, we also analyzed traffic patterns specifically on a cohort of e-commerce sites. This obfuscation makes these requests look like legitimate customers browsing from their homes rather than large cloud networks.

IP Address 96

IP Address Cookie Network Networking 96

Kentik

JANUARY 10, 2022

This includes all HTML, style sheets, cookies, any javascript that has to execute, etc. Domain lookup time : When a connection is made to a domain, the local operating system must first reach out to the DNS to resolve that hostname to an IP address. Is your PC using a DNS on the same local area network as your computer?

IP Address 98

IP Address DNS TCP Application 98

Kentik

DECEMBER 13, 2021

While you’re at the browser, clear cached files and cookies. If you “ain’t afraid of getting dirty,” use the Wireshark packet analyzer to see if your connection to the SaaS applications’ IP address is suffering from any packet loss. Check your local network. Just for testing, close them.

Application 95

Application DNS Routers Server 95

Slack Engineering

DECEMBER 9, 2024

Allowlisting CIDR Ranges and ASNs If an organization knows that certain IP addresses or network ranges are associated with legitimate activities, Slack provides a way for customers to allowlist these sources. This combination could indicate that an external party has obtained a user’s cookie and is using it to scrape data.

IP Address 54

IP Address Cookie VPN Engineering 54

CATO Networks

APRIL 21, 2024

On Friday, April 12, 2024, Palo Alto Networks PAN-OS was found to have an OS command injection vulnerability ( CVE-2024-3400 ). CVE-2024-3400 Palo Alto Networks GlobalProtect PAN-OS On Friday, April 12, Palo Alto Networks published an advisory on a zero-day vulnerability CVE-2024-3400. IoC list IPs 189[.]206[.]227[.]150

SASE 52

SASE DNS Firewall Access Point 52

CATO Networks

SEPTEMBER 28, 2016

Legitimate websites are hacked and recruited into a spam network During a periodic analysis of Cato Cloud traffic in the Cato Research Lab, we noticed that our security analytics engine was triggered by a request to a code sharing service, Pastebin. The request was originated from a preschool website in Singapore (Figure 1).

JavaScript 52

JavaScript Server Cookie IP Address 52