Threat Bulletin 0391: HTTP GET flood against a fashion retail platform in Iberia
HTTP GET flood against a fashion retail platform in Iberia, peaking at 895.0 million requests per second. Mitigated in 0.685 seconds.
http2
How to hide your origin IP properly
Here is a question we could not answer well a year ago: what really happens with how to hide your origin IP properly? We can answer it now.Lessons for your own runbookKnow…
Threat Bulletin 0349: Slowloris against a ticketing platform in Southeast Asia
Slowloris against a ticketing platform in Southeast Asia, peaking at 475.5 million requests per second. Mitigated in 0.767 seconds.
Credential stuffing volumes after the latest combo-list leak
We get asked about credential stuffing volumes after the latest combo-list leak more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing to fail…
Positive security for APIs from your OpenAPI spec (part 2)
We get asked about positive security for APIs from your OpenAPI spec more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time to…
Threat Bulletin 0287: ACK flood against a gaming community platform in the Middle East
ACK flood against a gaming community platform in the Middle East, peaking at 258.2 Gbps. Mitigated in 0.670 seconds.
Threat Bulletin 0281: HTTP POST flood against a retail banking platform in the Nordics
HTTP POST flood against a retail banking platform in the Nordics, peaking at 530.4 million requests per second. Mitigated in 0.833 seconds.
Threat Bulletin 0274: WebSocket connection flood against a education platform platform in Central Europe
WebSocket connection flood against a education platform platform in Central Europe, peaking at 682.8 million requests per second. Mitigated in 0.082 seconds.
Threat Bulletin 0236: GRE flood against a sports betting platform in North America
GRE flood against a sports betting platform in North America, peaking at 384.1 Gbps. Mitigated in 0.148 seconds.
Bot management without CAPTCHAs (part 2)
bot management without CAPTCHAs sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Compliance is a side effectRegulators increasingly ask for…
How SableCloud kept its healthcare portal online through tax filing season
SableCloud runs a healthcare portal serving customers across Iberia. Before Deflecto, attacks meant diverting traffic to a scrubbing provider and […]
Threat Bulletin 0197: UDP reflection (DNS) against a B2B SaaS platform in North America
UDP reflection (DNS) against a B2B SaaS platform in North America, peaking at 228.8 Gbps. Mitigated in 0.896 seconds.