Originally Posted by
PaulC852
It's remarkable then that every other site I visit on the internet seems to be able to overcome this problem.
Is there something that the attackers are doing that is unique to IB?
Its not only an occasional DDOS attack but bots are systematically
- scraping/harvesting forums like FT for information for their AI models
- signing up spam accounts
- bruteforcing the ancient vb login to gain access to the member accounts
FT and other IB sites look at where most of their traffic comes from (one must presume US&UK) their first WAF rule on cloudflare is a strict Geo-block (block any country you or your users don't live or travel to) to instantly kill 90% of the garbage.
https://developers.cloudflare.com/wa...-access-rules/
https://developers.cloudflare.com/waf/