Dynamic blocking of suspicious electronic submissions

A method of dynamically blocking electronic submissions, comprising:

• receiving a plurality of electronic submissions over a first monitoring period to an entity providing a plurality of hosts, each of the plurality of hosts operable to process any of the electronic submissions;
• identifying configuration information for each of the plurality of hosts, the configuration information including a monitoring period length, at least one dimension to be monitored, and at least one threshold corresponding to the at least one dimension to be monitored;
• determining whether any subset of the received electronic submissions includes a number of submissions that at least meets a specified threshold for a determined dimension relating to the electronic submissions, each received electronic submission in a subset having a common value for the determined dimension;
• for any subset determined to at least meet the specified threshold for the determined dimension, blocking submissions having the common value for the determined dimension from being processed on a respective host for the subset over a second monitoring period, submissions from other subsets having the common value for the determined dimension capable of being processed by another host during the second monitoring period;
• and
• generating, for at least one blocked submission, a response indicating the specified threshold for the determined dimension that has been exceeded.

A system for dynamically blocking electronic submissions, comprising:

• a processor;
• and
• a memory device including instructions that, when executed by the processor, cause the processor to:
• receive a plurality of electronic submissions over a first monitoring period to an entity providing a plurality of hosts, each of the plurality of hosts operable to process any of the electronic submissions;
• determine whether any subset of the received electronic submissions includes a number of submissions that at least meets a specified threshold for a determined dimension relating to the electronic submissions, each received electronic submission in a subset having a common value for the determined dimension;
• for any subset determined to at least meet the specified threshold for the determined dimension, block submissions having the common value for the determined dimension from being processed on a respective host for the subset over a second monitoring period, submissions from other subsets having the common value for the determined dimension capable of being processed by another host during the second monitoring period;
• and
• generating, for at least one blocked request, a response indicating the at least one threshold for each determined dimension that has been exceeded.

A system for dynamically blocking requests at any of a plurality of hosts for an entity, comprising:

• a processor;
• and
• a memory device including instructions that, when executed by the processor, cause the processor to:
• determine configuration information for each of the plurality of hosts, the configuration information including a monitoring period length, at least one dimension to be monitored for each host, and at least one threshold for each determined dimension;
• receive a plurality of requests to the entity over a first monitoring period, each of the requests being directed to one of the hosts for the entity, each host operable to process any of the plurality of requests;
• for each host, determine whether any subset of the received electronic requests includes a number of requests that at least meets the threshold for a determined dimension for the host, each received electronic request in the subset having a common value for the determined dimension;
• and
• for any subset determined to at least meet the threshold for the determined dimension, block requests having the common value for the determined dimension over a second monitoring period for the respective host;
• and
• generating, for at least one blocked request, a response indicating the at least one threshold for each determined dimension that has been exceeded,
• wherein requests having the common value for the determined dimension are able to be processed on at least one other host for the entity during the second monitoring period unless requests having the common value are also blocked on that other host.

A computer program product embedded in a non-transitory computer-readable medium including processor-executable instructions for dynamically blocking electronic submissions, comprising:

• program code for receiving a plurality of electronic submissions over a first monitoring period to an entity providing a plurality of hosts, each of the plurality of hosts operable to process any of the electronic submissions;
• program code for determining configuration information for each of the plurality of hosts, the configuration information including a monitoring period length, at least one dimension to be monitored for each host, and at least one threshold for each determined dimension;
• program code for determining whether any subset of the received electronic submissions includes a number of submissions that at least meets a specified threshold for a determined dimension relating to the electronic submissions, each received electronic submission in a subset having a common value for the determined dimension;
• program code for, for any subset determined to at least meet the specified threshold for the determined dimension, blocking submissions having the common value for the determined dimension from being processed on a respective host for the subset over a second monitoring period, submissions from other subsets having the common value for the determined dimension capable of being processed by another host during the second monitoring period;
• and
• program code for, for at least one blocked submission, generating a response indicating the specified threshold for the determined dimension that has been exceeded.