Peakhour.IO - DDoS

Beyond the IP Address

AC — Mon, 01 Sep 2025 00:00:00 +1000

Discover why traditional IP-based rate limiting is obsolete and how advanced techniques provide robust protection against modern distributed attacks.

The Bot Spectrum

AC — Mon, 01 Sep 2025 00:00:00 +1000

Learn to classify bots into good, bad, and grey categories and apply the right management strategy for each.

Protecting Against a Share Point Zero Day Vulnerability with Network Fingerprinting

Dan — Wed, 23 Jul 2025 13:00:00 +1000

Analysis of attempts to exploit a recent Share Point zero day vulnerability reveal network fingerprinting and classification is a robust defense.

A Complete Guide to SMS Pumping Fraud

AC — Thu, 13 Mar 2025 14:00:00 +1100

SMS pumping fraud cost businesses $6.7 billion in 2021. Learn how these sophisticated attacks work, which companies face the highest risk, and the most effective protection strategies.

Why We Can't Trust IP Addresses

AC — Tue, 11 Mar 2025 14:00:00 +1100

The proliferation of residential proxy networks has undermined traditional IP-based security, enabling attackers to bypass protection measures while appearing as legitimate users.

How AI Agents Are Writing Custom Exploits

AC — Mon, 17 Feb 2025 14:00:00 +1100

AI agents with reasoning capabilities like DeepSeek are revolutionizing exploit development, marking the end of traditional security approaches based on static rules and patterns.

How MTU Fingerprinting Identifies VPNs and Mobile Users

AC — Wed, 15 Jan 2025 14:00:00 +1100

Learn how MTU fingerprinting reveals VPN usage, mobile connections, and network technologies through TCP handshake analysis. Discover practical SQL techniques for dynamic network intelligence.

Residential Proxies - The Growing Threat to Ad Campaigns

AC — Mon, 30 Dec 2024 00:00:00 +1100

Learn how distributed bot networks using residential IPs are evolving to evade traditional fraud detection

Next-Generation Application Security Defence Strategies

AC — Fri, 15 Nov 2024 14:00:00 +1100

Comprehensive analysis of AI-powered cyber threats and how modern application security platforms defend against machine learning-driven attacks. Learn advanced defence strategies for the AI cybersecurity arms race.

Quantifying The Residential Proxy Threat

AC — Thu, 18 Jul 2024 10:00:00 +1000

Explore the complexities of residential proxy detection and its impact on organisational risk, with a focus on quantifying the threat and reframing security approaches.

Rate Limiting for API Security

AC — Wed, 24 Jan 2024 13:00:00 +1100

How advanced rate limiting protects modern applications and APIs from sophisticated threats including proxy networks, distributed attacks, and automated abuse in enterprise security environments.

HTTP Security Headers

AC — Tue, 28 Nov 2023 14:00:00 +1100

Comprehensive guide to HTTP security headers for protecting web applications from client-side attacks. Learn essential browser security configurations for modern application security platforms and DevSecOps workflows.

RFC 9460

AC — Thu, 16 Nov 2023 00:00:00 +1100

Introducing SVCB and HTTPS records in DNS and their impact on web connectivity.

A Risk Based Approach To Vulnerability Scoring

AC — Fri, 10 Nov 2023 00:00:00 +1100

An in-depth exploration of EPSS, its data-driven approach to assessing cybersecurity threats, and how it complements CVSS.

Navigating CDN Consolidation

AC — Wed, 01 Nov 2023 00:00:00 +1100

Explore the complexities of switching CDN providers amid industry consolidation and how Peakhour can assist in the transition

Google Chrome's "IP Protection" and Online Privacy

AC — Tue, 24 Oct 2023 13:00:00 +1100

An exploration of Google Chrome's new "IP Protection" feature, its promise of enhanced privacy.

ModSecurity’s End-of-Life

AC — Mon, 16 Oct 2023 13:00:00 +1100

ModSecurity's end-of-life marks a pivotal moment in application security evolution. Discover how modern Application Security Platforms are advancing beyond traditional WAF approaches to provide comprehensive protection for web applications and APIs at the edge.

HTTP/2 Rapid Reset Attack Deepdive

AC — Thu, 12 Oct 2023 00:00:00 +1100

The technicalities of the HTTP/2 Rapid Reset vulnerability and steps to fortify against DDoS threats.

Understanding the HTTP/2 Rapid Reset Attack

AC — Wed, 11 Oct 2023 00:00:00 +1100

A comprehensive breakdown of the HTTP/2 Rapid Reset flaw and guidance on bolstering defences against potential DDoS attacks.

ZDNS - scan the entire internet

AC — Tue, 20 Jun 2023 13:00:00 +1000

Details the use of ZDNS, a high-performance DNS toolkit, to create a comprehensive Reverse DNS (rDNS) lookup database by scanning the entire internet, and how randomizing the IP space overcomes UDP timeout issues.

Enterprise DDoS Protection

AC — Mon, 19 Jun 2023 00:00:00 +1000

Analysis of the Microsoft 365 DDoS attack by Storm-1359 reveals critical lessons for enterprise application security platforms. Learn advanced Layer 7 DDoS protection strategies and rate limiting techniques for modern applications.

The Rise of the Dragon

AC — Wed, 17 May 2023 13:00:00 +1000

Residential proxy malware, and its implications for traditional cybersecurity measures, emphasising the need for evolving threat detection and mitigation strategies.

Residential Proxies and MITRE Framework

AC — Wed, 17 May 2023 13:00:00 +1000

Explore residential proxies within the context of the MITRE ATT&CK framework, highlighting the security implications and ethical considerations.

Residential Proxy Detection

AC — Wed, 17 May 2023 13:00:00 +1000

Comprehensive analysis of residential proxy threats and detection strategies for modern application security platforms. Learn how sophisticated threat actors use residential proxies to bypass traditional security measures.

Advanced Anomaly Detection

AC — Mon, 15 May 2023 13:00:00 +1000

Deep dive into Robust Random Cut Forest (RRCF) implementation for real-time anomaly detection in Application Security Platforms. Learn how advanced machine learning algorithms enhance threat detection and automated response capabilities.

Double MAD?

AC — Mon, 15 May 2023 13:00:00 +1000

This article explores the use of Double Median Absolute Deviation (Double MAD) for anomaly detection in time series data, particularly in skewed or non-symmetric distributions.

Efficiently Generating and Printing All IPv4 Addresses in a Random Order

AC — Mon, 15 May 2023 13:00:00 +1000

Explains how to efficiently generate all IPv4 addresses in a random order using a Linear Congruential Generator (LCG), a memory-efficient method for tasks like security testing and network simulation.

Layer 7 DDoS Protection

AC — Tue, 07 Feb 2023 13:00:00 +1100

Comprehensive guide to Layer 7 DDoS protection using strategic caching within application security platforms. Learn how intelligent caching strategies provide robust defence against sophisticated application-layer attacks.

TLS Fingerprinting

AC — Thu, 02 Feb 2023 13:00:00 +1100

What is fingerprinting, and in particular TLS fingerprinting?

IP Threat Intelligence

AC — Fri, 15 Jul 2022 13:00:00 +1000

Comprehensive guide to IP threat intelligence for modern application security platforms. Learn how managed IP reputation lists and threat intelligence feeds protect applications from known malicious sources and emerging threats.

Origin shield

AC — Fri, 10 Jun 2022 13:00:00 +1000

Origin shield is a CDN must have feature that increases your Cache Hit Rate by consolidating requests from POPs.

CVE-2022-26134

AC — Thu, 02 Jun 2022 00:00:00 +1000

Peakhour clients are protected against CVF-2022-26134 Atlassian Confluence RCE

Intelligent Rate Limiting

AC — Mon, 16 May 2022 13:00:00 +1000

Comprehensive guide to intelligent rate limiting for modern application security platforms. Learn how sophisticated rate limiting protects APIs and web applications from abuse, DDoS attacks, and automated threats whilst maintaining optimal user experience.

Rate limiting

AC — Mon, 16 May 2022 13:00:00 +1000

How can rate limiting protect your web application and the key items to consider when enabling.

Fastly Outage

Dan — Wed, 09 Jun 2021 13:00:00 +1000

Fastly, a major CDN provider, had a global outage last night which affected some of the world's largest websites and internet services. Why didn't they have a backup plan?

Why Manage Bots?

AC — Mon, 30 Nov 2020 13:00:00 +1100

Comprehensive guide to enterprise bot management and advanced countermeasures for protecting applications against sophisticated malicious bot threats. Learn proven strategies for bot detection, mitigation, and automated defence systems.

Application Performance Optimisation

Dan — Sat, 12 Sep 2020 13:00:00 +1000

A practical primer for finding where website requests lose time, from cache state and origin work to browser rendering.

Instant Alerts

Dan — Fri, 31 May 2019 13:00:00 +1000

Introducing Instant Alerts, a new feature for receiving emails or SMS alerts when events happen on your site.