Threat Bulletin 0998: TLS handshake exhaustion against a online casino platform in Southeast Asia
TLS handshake exhaustion against a online casino platform in Southeast Asia, peaking at 434.6 million requests per second. Mitigated in 0.633 seconds.
TLS handshake exhaustion against a online casino platform in Southeast Asia, peaking at 434.6 million requests per second. Mitigated in 0.633 seconds.
search endpoint flood against a retail banking platform in the Middle East, peaking at 929.9 million requests per second. Mitigated in 0.653 seconds.
login endpoint flood against a electronics retail platform in the Nordics, peaking at 767.6 million requests per second. Mitigated in 0.532 seconds.
TLS handshake exhaustion against a video streaming platform in Western Europe, peaking at 704.1 million requests per second. Mitigated in 0.584 seconds.
Slowloris against a sports betting platform in Southeast Asia, peaking at 372.5 million requests per second. Mitigated in 0.769 seconds.
GRE flood against a sports betting platform in Central Europe, peaking at 47.2 Gbps. Mitigated in 0.441 seconds.
cache-busting query flood against a gaming community platform in Central Europe, peaking at 22.1 million requests per second. Mitigated in 0.430 seconds.
search endpoint flood against a municipal services platform in Central Europe, peaking at 314.5 million requests per second. Mitigated in 0.717 seconds.
ACK flood against a retail banking platform in Central Europe, peaking at 180.3 Gbps. Mitigated in 0.587 seconds.
HTTP/2 rapid reset against a crypto exchange platform in the UK, peaking at 301.0 million requests per second. Mitigated in 0.467 seconds.
UDP reflection (DNS) against a gaming community platform in Iberia, peaking at 216.8 Gbps. Mitigated in 0.641 seconds.
We get asked about the economics of DDoS-for-hire in 2026 more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every log…