Threat Bulletin 1300: HTTP POST flood against a ticketing platform in the UK
HTTP POST flood against a ticketing platform in the UK, peaking at 806.0 million requests per second. Mitigated in 0.798 seconds.
xdp
Threat Bulletin 1298: Slowloris against a ticketing platform in the UK
Slowloris against a ticketing platform in the UK, peaking at 135.4 million requests per second. Mitigated in 0.125 seconds.
Threat Bulletin 1291: ACK flood against a online casino platform in Western Europe
ACK flood against a online casino platform in Western Europe, peaking at 75.6 Gbps. Mitigated in 0.285 seconds.
Threat Bulletin 1257: ACK flood against a ticketing platform in the Nordics
ACK flood against a ticketing platform in the Nordics, peaking at 352.3 Gbps. Mitigated in 0.450 seconds.
Threat Bulletin 1244: credential stuffing against a healthcare portal platform in Western Europe
credential stuffing against a healthcare portal platform in Western Europe, peaking at 735.4 million requests per second. Mitigated in 0.208 seconds.
Threat Bulletin 1228: carpet-bombing UDP flood against a airline booking platform in the Benelux
carpet-bombing UDP flood against a airline booking platform in the Benelux, peaking at 332.6 Gbps. Mitigated in 0.801 seconds.
Threat Bulletin 1219: TLS handshake exhaustion against a education platform platform in the Middle East
TLS handshake exhaustion against a education platform platform in the Middle East, peaking at 697.0 million requests per second. Mitigated in 0.182 seconds.
Threat Bulletin 1212: memcached amplification against a developer platform platform in the UK
memcached amplification against a developer platform platform in the UK, peaking at 130.0 Gbps. Mitigated in 0.615 seconds.
Threat Bulletin 1193: UDP reflection (NTP) against a airline booking platform in Iberia
UDP reflection (NTP) against a airline booking platform in Iberia, peaking at 206.9 Gbps. Mitigated in 0.463 seconds.
How TesselLearn kept its news publisher online through a credential-stuffing wave
TesselLearn runs a news publisher serving customers across the Nordics. Before Deflecto, attacks meant diverting traffic to a scrubbing provider […]
Rate limiting APIs without breaking legitimate integrations (part 2)
Here is a question we could not answer well a year ago: what really happens with rate limiting APIs without breaking legitimate integrations? We can answer it now.Protecting the originNone of this…
Deflecto Edge 19.1.3 release notes
Rolled out to all points of presence on 2 June 2025. No action is required. Deprecated JA4 fingerprint matching; removal […]