Shieldify Research Measurements of real DDoS and bot attacks from Shieldify's edge: their size, sources and shape, and what they mean for defenders. https://shieldify.ee/research/ 2026-10-24T00:00:00Z Shieldify Researchhttps://shieldify.ee/research/ Why blocking countries, networks and IPs fails against floods https://shieldify.ee/research/why-ip-and-country-blocking-fails/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z Modern floods come from home connections in dozens of countries. Every blocklist, from addresses to whole countries, hits customers first. The numbers from two floods, and what works instead. What is a Layer 7 DDoS attack, and why your host doesn't stop it https://shieldify.ee/research/what-is-a-layer-7-ddos-attack/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z Floods of requests that look like real visitors: how they differ from network floods, why network filters miss them, what fails against them and what works. Under attack right now? What to do in the first 15 minutes https://shieldify.ee/research/under-ddos-attack-what-to-do/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z A checklist for the worst quarter of an hour: confirm it is an attack, get protection in front, lock down your server, keep customers informed, and avoid the mistakes that make it worse. php2shell: what happened and what to do now https://shieldify.ee/research/php2shell/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z Two critical PHP flaws leaked a day before their fix. The timeline, who is affected, how to check and fix your servers, and what a WAF can and cannot do about it. Your origin IP is showing: how attackers walk around DDoS protection https://shieldify.ee/research/origin-ip-leaks/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z Eight ways a server's real address leaks, from DNS history to password reset emails, how to check yours, and how to close the door for good. The flood came back for a login page https://shieldify.ee/research/http2-flood-2026-10-23/ 2026-10-24T00:00:00Z 2026-10-24T00:00:00Z Two days after our 20 October flood, the same tool sent 96.8 million HTTP/2 requests to one login page in 12 minutes. About half of its addresses had flooded us before. Anatomy of a one-million-request-a-second flood https://shieldify.ee/research/http2-flood-2026-10-20/ 2026-10-22T00:00:00Z 2026-10-22T00:00:00Z 118 million HTTP/2 requests in 3 minutes 29 seconds from about 889,000 home connections in 52 countries: minute by minute, where it came from, and what it says about common defences.