Threat Bulletin 1140: HTTP/2 rapid reset against a ticketing platform in Central Europe
HTTP/2 rapid reset against a ticketing platform in Central Europe, peaking at 147.5 million requests per second. Mitigated in 0.670 seconds.
credential-stuffing
Threat Bulletin 1132: Slowloris against a crypto exchange platform in Latin America
Slowloris against a crypto exchange platform in Latin America, peaking at 110.8 million requests per second. Mitigated in 0.045 seconds.
How we test WAF rules against seven days of real traffic (part 4)
how we test WAF rules against seven days of real traffic sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Latency…
Threat Bulletin 1087: HTTP GET flood against a retail banking platform in North America
HTTP GET flood against a retail banking platform in North America, peaking at 84.6 million requests per second. Mitigated in 0.717 seconds.
Bot management without CAPTCHAs
bot management without CAPTCHAs sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What actually happens during a floodThe first thing…
Threat Bulletin 1062: UDP reflection (DNS) against a developer platform platform in Iberia
UDP reflection (DNS) against a developer platform platform in Iberia, peaking at 264.8 Gbps. Mitigated in 0.525 seconds.
Preparing evidence for an ISO 27001 audit after an incident (part 2)
Over the last few months we have spent a lot of time on preparing evidence for an ISO 27001 audit after an incident. This is what we learned.Observability firstEvery mitigation decision is…
Threat Bulletin 1030: cache-busting query flood against a airline booking platform in the Nordics
cache-busting query flood against a airline booking platform in the Nordics, peaking at 960.9 million requests per second. Mitigated in 0.509 seconds.
How KestHealth kept its gaming community online through the cup final
KestHealth runs a gaming community serving customers across the Benelux. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
How to hide your origin IP properly (part 2)
how to hide your origin IP properly sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Protecting the originNone of this…
Threat Bulletin 0913: SYN flood against a crypto exchange platform in the Benelux
SYN flood against a crypto exchange platform in the Benelux, peaking at 212.8 Gbps. Mitigated in 0.092 seconds.
Threat Bulletin 0890: login endpoint flood against a online casino platform in Latin America
login endpoint flood against a online casino platform in Latin America, peaking at 154.8 million requests per second. Mitigated in 0.715 seconds.