Threat Bulletin 1215: UDP reflection (NTP) against a fashion retail platform in the Nordics
UDP reflection (NTP) against a fashion retail platform in the Nordics, peaking at 345.5 Gbps. Mitigated in 0.785 seconds.
UDP reflection (NTP) against a fashion retail platform in the Nordics, peaking at 345.5 Gbps. Mitigated in 0.785 seconds.
WebSocket connection flood against a crypto exchange platform in the Benelux, peaking at 488.2 million requests per second. Mitigated in 0.777 seconds.
TLS handshake exhaustion against a gaming community platform in Iberia, peaking at 140.2 million requests per second. Mitigated in 0.044 seconds.
memcached amplification against a developer platform platform in the UK, peaking at 130.0 Gbps. Mitigated in 0.615 seconds.
search endpoint flood against a retail banking platform in Central Europe, peaking at 227.3 million requests per second. Mitigated in 0.430 seconds.
SYN flood against a electronics retail platform in the Middle East, peaking at 203.8 Gbps. Mitigated in 0.463 seconds.
Rolled out to all points of presence on 11 October 2025. No action is required. Proof-of-work challenge payload reduced by […]
CLDAP reflection against a electronics retail platform in the Benelux, peaking at 194.9 Gbps. Mitigated in 0.036 seconds.
Slowloris against a tax authority portal platform in the Benelux, peaking at 555.2 million requests per second. Mitigated in 0.009 seconds.
SYN flood against a sports betting platform in Southeast Asia, peaking at 190.9 Gbps. Mitigated in 0.391 seconds.
CLDAP reflection against a ticketing platform in the UK, peaking at 264.4 Gbps. Mitigated in 0.300 seconds.
This post is about rate limiting APIs without breaking legitimate integrations. It started, as most of our posts do, with an incident that did not go the way we expected.Latency budgetOur budget…