News for hackers. Stuff that matters.

A comment on Cloudflare mitigates a record of 26M request per second DDoS attack. Parent comment

Re:Cloudflare mitigates a record of 26M request per second D... by belter on Tuesday June 14, 2022 @04:36PM (#31745708)
Most of these attacks are reflection attacks, meaning they are just exploring normal protocol behaviors. Meaning these machines, are not necessarily infected but are just innocent participants in the attack.

For example somebody has a Memcached instance running on a public machine and does not realize they have UDP ports on 11211.

"Memcrashed - Major amplification attacks from UDP port 11211": https://blog.cloudflare.com/memcrashed-major-amplification-a...

Incompetent participants, but non notwithstanding still innocent.

[ Parent | on HN ]
Re:Cloudflare mitigates a record of 26M request per second D... by rowin on Wednesday June 15, 2022 @02:37AM (#31749812)
The attack discussed in the blog post was an HTTP attack, so reflection and amplification were not involved. The attacking machines are most likely infected, and can be labeled and tracked.
[ Parent | on HN ]
Re:Cloudflare mitigates a record of 26M request per second D... by belter on Saturday June 18, 2022 @11:31AM (#31790733)
Oops..for this instance yes, you are correct.
[ Parent | on HN ]