topic Anyone having issues with Threat ID 40059 (HTTP Brute Force)? in General Topics

Anyone having issues with Threat ID 40059 (HTTP Brute Force)?

BPry — Fri, 17 Jun 2016 13:36:04 GMT

Palo Alto pushed out an update to the HTTP Request Brute Force Attack signature (40059) on 06-15. Since then I've seen a rash of threats being identified from Akamai Technologies IP addresses (about 8 different addresses). I'm wondering if anybody else is having this issue and it's a problem with the threat signature or if someone is using Akamai hosting and figured out our IP range. The only reason that I'm hesitant to block them is because I know that Microsoft using Akamai and I don't want to interrupt our server ops.

Re: Anyone having issues with Threat ID 40059 (HTTP Brute Force)?

Wald — Fri, 17 Jun 2016 14:29:39 GMT

https://live.paloaltonetworks.com/t5/General-Topics/PA-identifying-traffic-from-AKAMAI-as-BruteForce/m-p/88281#U88281

Re: Anyone having issues with Threat ID 40059 (HTTP Brute Force)?

BPry — Fri, 17 Jun 2016 14:32:10 GMT

Thanks! I didn't see that one.