[duxup]

> It's a standard test and would have caught this.

There's nothing to indicate that. You could have the service behind any given DOS mitigation system and it would never even touch the back end...