This incident has been resolved.
We disabled the DDoS protection and keep monitoring how the server will react.
We see a drop in traffic, it seems that the DDoS protection is doing its thing. We will continue the protection for some time while we monitor.
We see an increased level of traffic into our server. We activated DDoS-protection to see if it resolves the high traffic level.
We are currently investigating this issue.