Threat Bulletin 1012: Slowloris against a online payments platform in the Benelux
Slowloris against a online payments platform in the Benelux, peaking at 844.1 million requests per second. Mitigated in 0.018 seconds.
anycast
Deflecto Edge 18.1.0 release notes
Rolled out to all points of presence on 7 January 2025. No action is required. Improved fingerprint consistency scoring for […]
Threat Bulletin 1004: ACK flood against a retail banking platform in the Benelux
ACK flood against a retail banking platform in the Benelux, peaking at 80.2 Gbps. Mitigated in 0.035 seconds.
Threat Bulletin 0953: search endpoint flood against a gaming community platform in North America
search endpoint flood against a gaming community platform in North America, peaking at 130.1 million requests per second. Mitigated in 0.423 seconds.
Threat Bulletin 0923: HTTP GET flood against a tax authority portal platform in the UK
HTTP GET flood against a tax authority portal platform in the UK, peaking at 403.0 million requests per second. Mitigated in 0.104 seconds.
How to hide your origin IP properly (part 2)
how to hide your origin IP properly sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Protecting the originNone of this…
Threat Bulletin 0905: SYN flood against a retail banking platform in Central Europe
SYN flood against a retail banking platform in Central Europe, peaking at 96.8 Gbps. Mitigated in 0.777 seconds.
Rules engine 2.0: priorities, dry runs and rollbacks (part 2)
We get asked about rules engine 2.0: priorities, dry runs and rollbacks more than almost anything else, so here is the long answer.Why per-route baselines matterA thousand requests per second to your…
Threat Bulletin 0864: cache-busting query flood against a developer platform platform in Western Europe
cache-busting query flood against a developer platform platform in Western Europe, peaking at 941.1 million requests per second. Mitigated in 0.686 seconds.
Extortion DDoS campaigns target payment providers again
extortion DDoS campaigns target payment providers again sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.The economics behind itA booter…
Threat Bulletin 0844: credential stuffing against a electronics retail platform in the Benelux
credential stuffing against a electronics retail platform in the Benelux, peaking at 79.6 million requests per second. Mitigated in 0.648 seconds.
Attack seasonality: sports finals, sales and tax deadlines (part 4)
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Challenges beat blocksBlocking lists go stale within…