Threat Bulletin 0017: UDP reflection (DNS) against a sports betting platform in the UK
UDP reflection (DNS) against a sports betting platform in the UK, peaking at 350.2 Gbps. Mitigated in 0.424 seconds.
A practical checklist for surviving Black Friday traffic (part 2)
We get asked about a practical checklist for surviving Black Friday traffic more than almost anything else, so here is the long answer.Lessons for your own runbookKnow who can change DNS at…
Threat Bulletin 0016: HTTP GET flood against a developer platform platform in Central Europe
HTTP GET flood against a developer platform platform in Central Europe, peaking at 943.7 million requests per second. Mitigated in 0.018 seconds.
Threat Bulletin 0015: Slowloris against a airline booking platform in the Middle East
Slowloris against a airline booking platform in the Middle East, peaking at 815.4 million requests per second. Mitigated in 0.921 seconds.
Protecting WordPress login and XML-RPC from abuse
This post is about protecting WordPress login and XML-RPC from abuse. It started, as most of our posts do, with an incident that did not go the way we expected.Challenges beat blocksBlocking…
Threat Bulletin 0014: CLDAP reflection against a retail banking platform in the Middle East
CLDAP reflection against a retail banking platform in the Middle East, peaking at 177.7 Gbps. Mitigated in 0.069 seconds.
Threat Bulletin 0013: HTTP POST flood against a retail banking platform in Southeast Asia
HTTP POST flood against a retail banking platform in Southeast Asia, peaking at 238.9 million requests per second. Mitigated in 0.391 seconds.
Threat Bulletin 0012: ACK flood against a gaming community platform in Latin America
ACK flood against a gaming community platform in Latin America, peaking at 211.0 Gbps. Mitigated in 0.946 seconds.
How we test WAF rules against seven days of real traffic
Here is a question we could not answer well a year ago: what really happens with how we test WAF rules against seven days of real traffic? We can answer it now.What…
Threat Bulletin 0011: credential stuffing against a education platform platform in Southeast Asia
credential stuffing against a education platform platform in Southeast Asia, peaking at 319.9 million requests per second. Mitigated in 0.455 seconds.
Deflecto Edge 3.1.1 release notes
Rolled out to all points of presence on 15 March 2021. No action is required. Fixed a race in origin […]
Threat Bulletin 0010: CLDAP reflection against a municipal services platform in Western Europe
CLDAP reflection against a municipal services platform in Western Europe, peaking at 123.1 Gbps. Mitigated in 0.132 seconds.