How KestHealth kept its gaming community online through the cup final
KestHealth runs a gaming community serving customers across the Benelux. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
siem
Threat Bulletin 0987: login endpoint flood against a video streaming platform in Western Europe
login endpoint flood against a video streaming platform in Western Europe, peaking at 675.9 million requests per second. Mitigated in 0.425 seconds.
Threat Bulletin 0959: UDP reflection (NTP) against a tax authority portal platform in Iberia
UDP reflection (NTP) against a tax authority portal platform in Iberia, peaking at 385.3 Gbps. Mitigated in 0.074 seconds.
Per-tenant rate limits for SaaS platforms (part 3)
Over the last few months we have spent a lot of time on per-tenant rate limits for SaaS platforms. This is what we learned.Observability firstEvery mitigation decision is logged with its reasons,…
Threat Bulletin 0921: CLDAP reflection against a airline booking platform in the Benelux
CLDAP reflection against a airline booking platform in the Benelux, peaking at 338.1 Gbps. Mitigated in 0.053 seconds.
Threat Bulletin 0901: HTTP POST flood against a education platform platform in Southeast Asia
HTTP POST flood against a education platform platform in Southeast Asia, peaking at 183.0 million requests per second. Mitigated in 0.187 seconds.
Threat Bulletin 0884: ACK flood against a video streaming platform in North America
ACK flood against a video streaming platform in North America, peaking at 326.2 Gbps. Mitigated in 0.920 seconds.
Threat Bulletin 0881: Slowloris against a news publisher platform in the UK
Slowloris against a news publisher platform in the UK, peaking at 200.4 million requests per second. Mitigated in 0.372 seconds.
Threat Bulletin 0873: SYN flood against a crypto exchange platform in North America
SYN flood against a crypto exchange platform in North America, peaking at 155.4 Gbps. Mitigated in 0.121 seconds.
Connection pooling to the origin: the numbers that surprised us
This post is about connection pooling to the origin: the numbers that surprised us. It started, as most of our posts do, with an incident that did not go the way we…
Threat Bulletin 0832: HTTP POST flood against a retail banking platform in the Middle East
HTTP POST flood against a retail banking platform in the Middle East, peaking at 790.8 million requests per second. Mitigated in 0.634 seconds.
Extortion DDoS campaigns target payment providers again (part 2)
We get asked about extortion DDoS campaigns target payment providers again more than almost anything else, so here is the long answer.What actually happens during a floodThe first thing to fail during…