DDoS Attacks Soar 53% To 21.3 Million, Cloudflare Reports 21
Cloudflare blocked 21.3 million DDoS attacks in 2024, including a record-breaking 5.6 terabit-per-second strike that targeted an Asian internet service provider last October. The yearly total marked a 53% increase from 2023.
The 80-second October attack, which originated from over 13,000 compromised Internet of Things devices running Mirai malware variant, highlighted an alarming trend: hyper-volumetric attacks exceeding 1 terabit per second grew by 1,885% in the fourth quarter compared to the previous quarter. Ransom DDoS attacks, where criminals threatened organizations with service disruptions unless paid, rose 78% in the same period.
The 80-second October attack, which originated from over 13,000 compromised Internet of Things devices running Mirai malware variant, highlighted an alarming trend: hyper-volumetric attacks exceeding 1 terabit per second grew by 1,885% in the fourth quarter compared to the previous quarter. Ransom DDoS attacks, where criminals threatened organizations with service disruptions unless paid, rose 78% in the same period.
When the first AI backtrace tools come online... (Score:2)
Need new laws (Score:2)
Providers who have a significant number of compromised systems in their IP blocks should be threatened with being blocked unless they block those IPs.
Re: (Score:2)
The new administration should focus on laws punishing sloppy IOT companies instead of renaming geography and harassing transgenders.
Re: Need new laws (Score:2)
Trump can't even talk and think at the same time. When the teleprompter stops he either gabbles randomly, rants incoherently, or in the best case just stands there and complains about it not working.
Re: (Score:2)
Re: (Score:1)
Once when his teleprompter was glitching, he said something about George Washington's army "ramping the ramparts at his beautiful airport". If I'm going wing-it and guess what it's supposed to say, I wouldn't use "airport" for a story about the 1700's. Maybe "ship ports"? WTF.
Re: (Score:2)
The prompter probably just said "ports" and since he doesn't read anything but Mein Kampf (which he uses to make himself feel warm and fuzzy so he can sleep) he didn't know that word. But he knows "airport" because AIRPLANE! WHHOOOOOOOSSHHHHH!
Re: (Score:2)
Re: (Score:2)
The new administration should focus on laws punishing sloppy IOT companies instead of renaming geography and harassing transgenders.
You forgot about being racist, saluting hitler, pardoning 1500 criminals, attempting to invalidate a constitutional amendment...
How is the price of eggs again?Tariffs will help that, right? [theguardian.com] Surely he did something to help the non-oligarchs? [cnn.com]
Re: (Score:1)
ug, don't remind me.
'Murica, wtf were you thinking?
Re: (Score:2)
A lot of ISPs especially in developing countries are forced to use CGNAT due to lack of legacy address space. It was first come first served, and the countries which developed fastest got the lions share.
These countries tend not to (yet) have legislation requiring ISPs to identify users in the event of illegal activity, so they don't log the traffic going through the CGNAT gateways as this becomes extremely expensive.
As such, traffic which originates on an end user line and passes through a CGNAT gateway be
Re: (Score:2)
As such, traffic which originates on an end user line and passes through a CGNAT gateway becomes extremely difficult to trace when its happening, and almost impossible after the fact.
Many ISPs in developing countries ignore abuse reports because they can't do anything about them with the current setup, and configuring the necessary logging to be able to track activity would be prohibitively expensive. These costs would need to be recovered from the paying customers, which would make the service even more expensive - and remember this is mostly in developing countries where the cost of CGNAT gateways has already made the service more expensive while the customers themselves generally have less disposable income to pay for it.
ISPs use port range mapping to disambiguate multiple users behind a CGN.
Re: (Score:2)
That only works if you have a sufficiently small number of users that you can allocate each of them a sensible range of ports. In a lot of developing countries there might be several thousand users behind a single gateway.
That also assumes that wherever the traffic is going is logging the source ports.
Plus limiting the source port range make DNS spoofing much easier, see CVE-2008-1447
Changing the ports can break certain nat traversal mechanisms.
The implementation of the ISP here does not do this (one of the
MICROS~1 Windows strikes again :o (Score:1)
Re: (Score:1)
Nah, Gates bribed Xi's hackers to break into Linux instead to make Windows look better in comparison. My brainworm has the proof.
AI scraping? (Score:3)
Re: (Score:2)
Re: (Score:2)
Net neutrality needs an adjustment to allow human prioritization. All bot or automated traffic including ads should be de-prioritized, call me a botist all you want just don't confuse me with a botanist.
Newsflash: Cloudflare hype makes them money (Score:2)