All alarms
HighDenial of serviceINVESTIGATING
Volumetric DoS against auth gateway
botnet · 3.2k sources → auth-gw · cluster-a · updated 2h ago
Summary
Connection-attempt rate is 8.4x baseline from a distributed botnet, threatening availability of the authentication gateway.
Incident timeline
- Detected12:30:03Sentinel-Net
Sentinel-Net observed SYN rate crossing the 5x availability threshold.
- Mitigating12:30:21Warden
SYN-cookie protection engaged and top 200 source prefixes throttled.
Triage
Set the incident status:
Detection
- Detected by
- Sentinel-Net
- Category
- Denial of service
- Opened
- 2h ago
Volumetric or protocol resource exhaustion.