Carpet bombing: spreading an attack across a whole /22 (part 2)
Here is a question we could not answer well a year ago: what really happens with carpet bombing: spreading an attack across a whole /22? We can answer it now.Protecting the originNone…
ddos-for-hire
How MarloBet kept its developer platform online through a 40-day extortion campaign
MarloBet runs a developer platform serving customers across Latin America. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Threat Bulletin 0824: TLS handshake exhaustion against a sports betting platform in the UK
TLS handshake exhaustion against a sports betting platform in the UK, peaking at 105.9 million requests per second. Mitigated in 0.404 seconds.
Threat Bulletin 0815: search endpoint flood against a ticketing platform in North America
search endpoint flood against a ticketing platform in North America, peaking at 957.7 million requests per second. Mitigated in 0.083 seconds.
Threat Bulletin 0779: UDP reflection (DNS) against a healthcare portal platform in Western Europe
UDP reflection (DNS) against a healthcare portal platform in Western Europe, peaking at 28.2 Gbps. Mitigated in 0.111 seconds.
Threat Bulletin 0734: search endpoint flood against a online casino platform in North America
search endpoint flood against a online casino platform in North America, peaking at 960.3 million requests per second. Mitigated in 0.053 seconds.
How KestPress kept its online casino online through the cup final
KestPress runs a online casino serving customers across Iberia. Before Deflecto, attacks meant diverting traffic to a scrubbing provider and […]
Threat Bulletin 0707: HTTP GET flood against a sports betting platform in Central Europe
HTTP GET flood against a sports betting platform in Central Europe, peaking at 972.9 million requests per second. Mitigated in 0.735 seconds.
Threat Bulletin 0700: TLS handshake exhaustion against a online payments platform in Central Europe
TLS handshake exhaustion against a online payments platform in Central Europe, peaking at 30.1 million requests per second. Mitigated in 0.361 seconds.
Deflecto Edge 11.2.1 release notes
Rolled out to all points of presence on 5 September 2023. No action is required. Deprecated per-tenant rate limits; removal […]
Protecting WordPress login and XML-RPC from abuse (part 4)
We get asked about protecting WordPress login and XML-RPC from abuse more than almost anything else, so here is the long answer.Challenges beat blocksBlocking lists go stale within minutes when attackers rotate…
Threat Bulletin 0647: HTTP/2 rapid reset against a sports betting platform in the Middle East
HTTP/2 rapid reset against a sports betting platform in the Middle East, peaking at 696.0 million requests per second. Mitigated in 0.794 seconds.