2022 US midterm elections attack analysis
Nov 11, 2022David Belson

Summary
This post provides a detailed analysis of WAF-mitigated attack traffic targeting election-related websites during the 2022 US midterm elections. It breaks down attack types (SQLi, HTTP Anomaly, Software Specific, File Inclusion, XSS, Directory Traversal, Command Injection) and their prevalence for both the Athenian Project and Cloudflare for Campaigns. It also analyzes the geographical origin of attacks, noting that over 95% of attacks targeting Athenian Project participants originated from the US, while 55% of attacks targeting Cloudflare for Campaigns participants originated from the US, with other countries like Germany, Canada, and the UK also contributing.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack