Rolled out to all points of presence on 21 May 2023. No action is required.
- Added the legacy v0 API support to the rules engine.
- Faster rule propagation: median 27 seconds to all PoPs.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 29 seconds.
- Managed WAF: 30 new signatures for recently disclosed CVEs.
- New dashboard widget: challenged vs. dropped traffic by ASN.
- Deprecated JA4 fingerprint matching; removal scheduled for the next major release.
- Improved fingerprint consistency scoring for Safari 19 clients.
Great write-up. We saw almost the same pattern on our login endpoint last month.
Machine-readable ranges are at /ips.json and via the API.
Interesting that most attacks are under ten minutes. Our experience is similar.