Threat Bulletin 1431: Slowloris against a video streaming platform in the UK
Slowloris against a video streaming platform in the UK, peaking at 916.1 million requests per second. Mitigated in 0.047 seconds.
black-friday
How AltoStack kept its online casino online through a credential-stuffing wave
AltoStack runs a online casino serving customers across Southeast Asia. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 1371: HTTP/2 rapid reset against a airline booking platform in Western Europe
HTTP/2 rapid reset against a airline booking platform in Western Europe, peaking at 627.6 million requests per second. Mitigated in 0.591 seconds.
Threat Bulletin 1368: HTTP POST flood against a video streaming platform in Iberia
HTTP POST flood against a video streaming platform in Iberia, peaking at 287.8 million requests per second. Mitigated in 0.042 seconds.
Threat Bulletin 1356: UDP reflection (NTP) against a education platform platform in the Nordics
UDP reflection (NTP) against a education platform platform in the Nordics, peaking at 360.9 Gbps. Mitigated in 0.459 seconds.
Threat Bulletin 1343: Slowloris against a video streaming platform in the Benelux
Slowloris against a video streaming platform in the Benelux, peaking at 727.5 million requests per second. Mitigated in 0.711 seconds.
Tuning challenge thresholds for mobile traffic behind CGNAT (part 2)
This post is about tuning challenge thresholds for mobile traffic behind CGNAT. It started, as most of our posts do, with an incident that did not go the way we expected.The economics…
Threat Bulletin 1332: search endpoint flood against a online casino platform in the Benelux
search endpoint flood against a online casino platform in the Benelux, peaking at 952.4 million requests per second. Mitigated in 0.701 seconds.
Why our logs are append-only and how we query them (part 3)
We get asked about why our logs are append-only and how we query them more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident:…
Threat Bulletin 1323: CLDAP reflection against a municipal services platform in the Nordics
CLDAP reflection against a municipal services platform in the Nordics, peaking at 262.4 Gbps. Mitigated in 0.146 seconds.
Threat Bulletin 1319: WebSocket connection flood against a developer platform platform in Iberia
WebSocket connection flood against a developer platform platform in Iberia, peaking at 876.7 million requests per second. Mitigated in 0.018 seconds.
Keeping our control plane alive when the data plane is on fire
keeping our control plane alive when the data plane is on fire sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under…