What is an Account Takeover?
An overview of Account Takeover Attacks
Peakhour sits between each visitor and your origin, so your origin sees a Peakhour address by default. To record the original visitor address in your access logs, configure your web server to log the X-Peakhour-IP header.
The exact configuration depends on your web server. If your application expects X-Forwarded-For, contact support and we will help you configure it.
Related Articles
Anatomy of a Credential Stuffing Attack
A step-by-step breakdown of how credential stuffing attacks are carried out, from obtaining stolen credentials to bypassing defenses and taking over accounts.
2024 Australian Account Take Over Security Survey
Download our comprehensive 2024 Australian Account Takeover Security Survey for insights on account protection strategies and emerging threats.
What type of attacks do bots carry out?
Learn about the types of attacks malicious bots carry out.
How much Bot traffic is there?
Just how much of the internet's traffic is generated by bots?
Can You Block Residential Proxies?
When residential proxy blocking works, when it creates false positives, and how defenders should use detection signals for proportionate decisions.