Peakhour.IO - DNS

Cloudflare outage proves Plan B depends on controlling DNS

Dan — Tue, 18 Nov 2025 21:00:00 +1100

Tuesday’s Cloudflare incident reminded everyone that you can’t execute a Plan B if your DNS knobs are trapped behind the provider that’s failing. Here’s how Peakhour runs a detect-decide-divert playbook without touching your existing third-party DNS vendors.

Anatomy of a Credential Stuffing Attack

AC — Mon, 01 Sep 2025 00:00:00 +1000

A deep dive into how credential stuffing attacks work, the tools used, and how to build a multi-layered defense.

Why We Can't Trust IP Addresses

AC — Tue, 11 Mar 2025 14:00:00 +1100

The proliferation of residential proxy networks has undermined traditional IP-based security, enabling attackers to bypass protection measures while appearing as legitimate users.

Your Anti-Fraud Residential Proxy Detection Sucks

Dan — Fri, 04 Oct 2024 13:00:00 +1000

Your anti fraud IP Intelligence service is no longer fit for purpose. Learn about the challenges in detecting residential proxies and why traditional methods don't work.

The Australian epidemic of Account Takeover attacks

AC — Mon, 29 Jul 2024 10:00:00 +1000

An in-depth look at the growing threat of credential stuffing attacks on Australian businesses, including recent case studies, defense challenges, and practical recommendations.

The Cost of Credential Stuffing

AC — Wed, 17 Jul 2024 00:00:00 +1000

Explore how credential stuffing attacks and account takeovers affect business reputation and customer trust.

How To Exclude Query String Parameters from Search Engine crawling

Dan — Tue, 21 May 2024 13:00:00 +1000

Double crawling of pages by search engines due to filtering options and query strings can be a massive drain on server resources. Learn how to control it using robots.txt.

HTTP/2 Rapid Reset Attack Deepdive

AC — Thu, 12 Oct 2023 00:00:00 +1100

The technicalities of the HTTP/2 Rapid Reset vulnerability and steps to fortify against DDoS threats.

Understanding the HTTP/2 Rapid Reset Attack

AC — Wed, 11 Oct 2023 00:00:00 +1100

A comprehensive breakdown of the HTTP/2 Rapid Reset flaw and guidance on bolstering defences against potential DDoS attacks.

ZDNS - scan the entire internet

AC — Tue, 20 Jun 2023 13:00:00 +1000

Details the use of ZDNS, a high-performance DNS toolkit, to create a comprehensive Reverse DNS (rDNS) lookup database by scanning the entire internet, and how randomizing the IP space overcomes UDP timeout issues.

When Bots Break Bad

Dan — Tue, 16 May 2023 13:00:00 +1000

Even 'good' bots can end up abusing your site and impacting performance, learn why and how to stop it.

Layer 7 DDoS Protection

AC — Tue, 07 Feb 2023 13:00:00 +1100

Comprehensive guide to Layer 7 DDoS protection using strategic caching within application security platforms. Learn how intelligent caching strategies provide robust defence against sophisticated application-layer attacks.

Origin shield

AC — Fri, 10 Jun 2022 13:00:00 +1000

Origin shield is a CDN must have feature that increases your Cache Hit Rate by consolidating requests from POPs.

Fastly Outage

Dan — Wed, 09 Jun 2021 13:00:00 +1000

Fastly, a major CDN provider, had a global outage last night which affected some of the world's largest websites and internet services. Why didn't they have a backup plan?

Instant Alerts

Dan — Fri, 31 May 2019 13:00:00 +1000

Introducing Instant Alerts, a new feature for receiving emails or SMS alerts when events happen on your site.