BlackNurse Attack
Layer 3 · Network
Description
A low-bandwidth ICMP flood attack that targets firewalls and routers, causing high CPU usage.
Mitigation Capabilities
- Anycast: Yes, disperses ICMP traffic.
- NGINX Proxy: No, not effective for ICMP-level attacks.
- HAProxy: No, not designed for ICMP traffic.
- IDS Suricata: Yes, identifies and blocks ICMP traffic anomalies.
- WAF: No, WAFs operate at the HTTP layer.
- OWASP Rules: No, unrelated to ICMP traffic.
- Complex anycast solution – WEDOS Protection: Yes, absorbs and mitigates ICMP-based traffic.
Solutions
Rate limit ICMP traffic and configure firewalls to drop unwanted packets.
Why WEDOS Protection?
WEDOS Protection provides Anycast-powered edge protection that filters malicious traffic before it reaches your core systems. For DDoS types like BlackNurse Attack , WEDOS offers scalable global filtering combined with advanced detection strategies and 24/7 support.
Can WEDOS Protection help?
✅ WEDOS Protection is highly effective against this attack due to global Anycast and intelligent filtering.
WEDOS
Protection