Threat Bulletin 0505: carpet-bombing UDP flood against a sports betting platform in Western Europe
carpet-bombing UDP flood against a sports betting platform in Western Europe, peaking at 298.1 Gbps. Mitigated in 0.561 seconds.
anycast
Threat Bulletin 0472: TLS handshake exhaustion against a fashion retail platform in the Middle East
TLS handshake exhaustion against a fashion retail platform in the Middle East, peaking at 462.3 million requests per second. Mitigated in 0.198 seconds.
Threat Bulletin 0442: login endpoint flood against a B2B SaaS platform in Southeast Asia
login endpoint flood against a B2B SaaS platform in Southeast Asia, peaking at 170.8 million requests per second. Mitigated in 0.709 seconds.
Threat Bulletin 0378: Slowloris against a airline booking platform in Iberia
Slowloris against a airline booking platform in Iberia, peaking at 165.1 million requests per second. Mitigated in 0.048 seconds.
What to put in your DDoS runbook
We get asked about what to put in your DDoS runbook more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and every…
Designing a risk score that analysts can explain
We get asked about designing a risk score that analysts can explain more than almost anything else, so here is the long answer.What we changedWe moved the decision from a single threshold…
Threat Bulletin 0312: WebSocket connection flood against a healthcare portal platform in the Benelux
WebSocket connection flood against a healthcare portal platform in the Benelux, peaking at 974.8 million requests per second. Mitigated in 0.558 seconds.
Hacktivist floods around elections: a field guide (part 2)
This post is about hacktivist floods around elections: a field guide. It started, as most of our posts do, with an incident that did not go the way we expected.Observability firstEvery mitigation…
Deflecto Edge 3.14.3 release notes
Rolled out to all points of presence on 24 January 2022. No action is required. New dashboard widget: OpenTelemetry. Improved […]
Threat Bulletin 0206: credential stuffing against a municipal services platform in North America
credential stuffing against a municipal services platform in North America, peaking at 627.6 million requests per second. Mitigated in 0.823 seconds.
How SableCloud kept its healthcare portal online through tax filing season
SableCloud runs a healthcare portal serving customers across Iberia. Before Deflecto, attacks meant diverting traffic to a scrubbing provider and […]
Threat Bulletin 0152: SYN flood against a B2B SaaS platform in the Benelux
SYN flood against a B2B SaaS platform in the Benelux, peaking at 106.1 Gbps. Mitigated in 0.755 seconds.