What Happened
A credential-stuffing attack was detected targeting the cargo service (40 req/s on one route from a single source).
Actions Taken
Executed defensive shutdown of cargo to cut the attack surface by calling the take_offline tool.
Verification Evidence
- Cloud Run configuration (
get_service_config):
{"app": "cargo", "ingress": "INGRESS_TRAFFIC_INTERNAL_ONLY", "max_instances": 3, "url": "https://cargo-obwidwaaya-ew.a.run.app"}
- Service availability (
get_app_detail):
{"app": "cargo", "http": 404, "body_snippet": "Error: Page not found"}
The service is confirmed publicly unreachable. Public ingress is disabled.
What Happened
A credential-stuffing attack was detected targeting the
cargoservice (40 req/s on one route from a single source).Actions Taken
Executed defensive shutdown of
cargoto cut the attack surface by calling thetake_offlinetool.Verification Evidence
get_service_config):{"app": "cargo", "ingress": "INGRESS_TRAFFIC_INTERNAL_ONLY", "max_instances": 3, "url": "https://cargo-obwidwaaya-ew.a.run.app"}get_app_detail):{"app": "cargo", "http": 404, "body_snippet": "Error: Page not found"}The service is confirmed publicly unreachable. Public ingress is disabled.