ThreatSTOP WAFXtender New and Active HTTP Threats Managed Rules for AWS WAF protects against a variety of inbound HTTP threat types, including IPs known to initiate different types of SSH attacks, Brute forcers, Crackers, Shellshock, attacks on Apache servers, and more. Environments with exposed services should especially consider using these managed rules. Multiple HTTP threat intelligence feeds are aggregated and analyzed to provide continuously updated protection.