Reading a Deflecto incident report (part 3)
We get asked about reading a Deflecto incident report more than almost anything else, so here is the long answer.Testing in production, safelyEvery rule starts in log mode. We replay the previous…
black-friday
Threat Bulletin 1269: WebSocket connection flood against a healthcare portal platform in the UK
WebSocket connection flood against a healthcare portal platform in the UK, peaking at 660.8 million requests per second. Mitigated in 0.872 seconds.
Threat Bulletin 1236: SYN flood against a ticketing platform in Southeast Asia
SYN flood against a ticketing platform in Southeast Asia, peaking at 32.8 Gbps. Mitigated in 0.534 seconds.
How SableHealth kept its news publisher online through a credential-stuffing wave
SableHealth runs a news publisher serving customers across the UK. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 1173: ACK flood against a developer platform platform in Southeast Asia
ACK flood against a developer platform platform in Southeast Asia, peaking at 192.0 Gbps. Mitigated in 0.929 seconds.
Threat Bulletin 1168: carpet-bombing UDP flood against a education platform platform in Central Europe
carpet-bombing UDP flood against a education platform platform in Central Europe, peaking at 294.4 Gbps. Mitigated in 0.443 seconds.
Threat Bulletin 1149: HTTP POST flood against a B2B SaaS platform in the UK
HTTP POST flood against a B2B SaaS platform in the UK, peaking at 460.4 million requests per second. Mitigated in 0.523 seconds.
Threat Bulletin 1148: search endpoint flood against a online casino platform in Central Europe
search endpoint flood against a online casino platform in Central Europe, peaking at 923.9 million requests per second. Mitigated in 0.081 seconds.
Threat Bulletin 1117: HTTP POST flood against a healthcare portal platform in the Middle East
HTTP POST flood against a healthcare portal platform in the Middle East, peaking at 973.3 million requests per second. Mitigated in 0.789 seconds.
Deflecto Edge 19.1.3 release notes
Rolled out to all points of presence on 2 June 2025. No action is required. Deprecated JA4 fingerprint matching; removal […]
Threat Bulletin 1109: credential stuffing against a B2B SaaS platform in the Nordics
credential stuffing against a B2B SaaS platform in the Nordics, peaking at 305.5 million requests per second. Mitigated in 0.840 seconds.
Threat Bulletin 1054: credential stuffing against a developer platform platform in Latin America
credential stuffing against a developer platform platform in Latin America, peaking at 248.1 million requests per second. Mitigated in 0.913 seconds.