{"title":"Figures behind 'How Project Galileo Protects TEEI’s Platforms'","publisher":"The Educational Equality Institute (TEEI)","read_utc":"2026-10-17T09:41:00Z","period":{"start_inclusive_utc":"2026-09-17T00:00:00Z","end_exclusive_utc":"2026-10-17T00:00:00Z"},"notes":["Security and Workers traffic counts come from Cloudflare's sampled analytics. They are Cloudflare's estimates, not complete tallies. Programme totals come from TEEI's public programme statistics (see programme.source).","Blocked requests are not attacks, attackers or prevented breaches. A signature match does not mean TEEI runs the software it targets.","Rule expressions, thresholds, IP addresses and internal hostnames are deliberately left out."],"galileo":{"plan_on_main_zone":"Business","price_usd":0,"scope":"The main zone, which carries the website and the hostnames of TEEI's learning platforms and internal tools."},"managed_ruleset":{"enabled_utc":"2026-09-22T10:28:53Z","ruleset_version":"latest (Cloudflare library updated 2026-10-15)","blocked_requests_total":99082,"blocked_by_day_utc":[{"date_utc":"2026-09-22","count":3569},{"date_utc":"2026-09-23","count":3645},{"date_utc":"2026-09-24","count":8106},{"date_utc":"2026-09-25","count":4675},{"date_utc":"2026-09-26","count":4383},{"date_utc":"2026-09-27","count":3002},{"date_utc":"2026-09-28","count":1402},{"date_utc":"2026-09-29","count":5376},{"date_utc":"2026-09-30","count":3713},{"date_utc":"2026-10-01","count":4993},{"date_utc":"2026-10-02","count":2339},{"date_utc":"2026-10-03","count":327},{"date_utc":"2026-10-04","count":1601},{"date_utc":"2026-10-05","count":4040},{"date_utc":"2026-10-06","count":2379},{"date_utc":"2026-10-07","count":5921},{"date_utc":"2026-10-08","count":4604},{"date_utc":"2026-10-09","count":5372},{"date_utc":"2026-10-10","count":4097},{"date_utc":"2026-10-11","count":4489},{"date_utc":"2026-10-12","count":5153},{"date_utc":"2026-10-13","count":5831},{"date_utc":"2026-10-14","count":3975},{"date_utc":"2026-10-15","count":3062},{"date_utc":"2026-10-16","count":3028}],"what_the_requests_looked_for":[{"category":"Version-control files, such as .git","cloudflare_rule_family":"Version Control - Information Disclosure","blocked":72531,"share_pct":73.2},{"category":"Common files that could leak information (configuration, backups)","cloudflare_rule_family":"Information Disclosure - Common Files","blocked":7855,"share_pct":7.9},{"category":"File extensions that could leak information","cloudflare_rule_family":"Information Disclosure - File Extension","blocked":4624,"share_pct":4.7},{"category":"Fake search-engine bot","cloudflare_rule_family":"Fake Baidu Bot user-agent rule","blocked":4223,"share_pct":4.3},{"category":"Known code-injection signature (JavaScript template library)","cloudflare_rule_family":"Code Injection - CVE-2022-29078 rule","blocked":3373,"share_pct":3.4},{"category":"Other managed rules","cloudflare_rule_family":"Other managed rule matches (calculated remainder)","blocked":6476,"share_pct":6.5}],"by_platform_hostname":{"values":[{"platform":"Website","blocked":29270},{"platform":"Evenhall","blocked":1899},{"platform":"Skills Academy","blocked":1771},{"platform":"TEEI Language","blocked":1770},{"platform":"TEEI Mentorship","blocked":1119}],"note":"Exact hostnames without an explicit port. Internal tools and other host variants are not itemised, so these do not sum to the total. Evenhall's count is for its earlier hostname, which now redirects to the current one; both are served by the same Worker."}},"custom_rules":[{"purpose":"Known spam sources on public enquiry and partner forms","action":"block","count":433,"observed":"17-25 September 2026; no matches after"},{"purpose":"One automated multi-parameter crawl pattern on the impact page; Cloudflare-verified bots excluded","action":"managed challenge","count":885,"observed":"from 11 October 2026"}],"ddos":"No traffic classified as DDoS appeared in the firewall data for the period. This is not proof that none has ever occurred.","workers":{"scope":"Five core production Workers (website; TEEI Language; TEEI Mentorship and Skills Academy; Evenhall; staff admin). Smaller production Workers are not included.","requests":5225860,"runtime_errors":70,"runtime_errors_definition":"Cloudflare's Workers runtime errors (uncaught exceptions, exceeded limits). Not the same as HTTP error responses, and not an uptime measure.","by_platform":[{"platform":"Website","requests":3127040,"runtime_errors":0},{"platform":"TEEI Language","requests":1412860,"runtime_errors":50},{"platform":"Evenhall","requests":332040,"runtime_errors":20},{"platform":"TEEI Mentorship and Skills Academy","requests":239070,"runtime_errors":0},{"platform":"Staff admin","requests":114850,"runtime_errors":0}]},"programme":{"source":"TEEI public statistics, answered by the Language Worker","read_utc":"2026-10-14T13:38:00Z","completed_sessions":12517,"conversation_hours":9435.5,"member_countries":148,"scope":"TEEI Language and TEEI Mentorship, all time. Not outcomes attributable to Galileo."},"browser_integrity_check":{"blocked_requests":406,"observed":"within the period","most_in_window":{"start_inclusive_utc":"2026-09-20T00:00:00Z","end_exclusive_utc":"2026-09-23T00:00:00Z","blocked_requests":299}},"zone_settings":{"read_utc":"2026-10-17","always_use_https":"on","ssl_tls_mode":"strict","minimum_tls_version":"1.2","hsts":"on, including subdomains; responses carry max-age=15768000","http3":"on","teei_language_sign_in_rate_limit":"configured; no rate-limit events in the period","note":"Read from the zone configuration on 17 October 2026. The HSTS header and the HTTP/3 offer were also seen in responses captured on 18 October 2026."}}