Mitigação DDoS

Firmware Analysis: Extraction of ASP Files in the GoAhead Architecture

maio 15, 2020 | NSFOCUS

GoAhead is an open-source web architecture that is widely used in embedded systems thanks to its high performance and high availability. Traditional servers built on the GoAhead architecture usually see a large number of dynamic pages written in the Active Server Pages (ASP) scripting language and functions written in C/C++ that are registered to the […]

IP Reputation Report-05102020

maio 14, 2020 | NSFOCUS

1. Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at May 10, 2020. 2. Top 10 countries in attack percentage: The Belarus is in first place. The Cape Verde is in the second place. The country China […]

DDoS Attack Landscape 7

maio 13, 2020 | NSFOCUS

Attack Gang Size Gang Size Figure 3-27 shows the distribution of our identified IP gangs by size. Two gangs consist of over 10,000 members and the largest gang has 88,000 members.

IP Reputation Report-05032020

maio 7, 2020 | NSFOCUS

Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at May 3, 2020. Top 10 countries in attack percentage: The Belarus is in first place. The Cape Verde is in the second place. The country China (CN) is […]

DDoS Attack Landscape 6

maio 6, 2020 | NSFOCUS

Activity of Attack Sources Ongoing monitoring of attack sources reveals that 90% of them were active for no longer than 10 days. There were two reasons behind this. For one thing, in order to keep attack sources freshand prevent them from being blacklisted by defenders, attackers tended to use the hit-and-run strategy. For the other, […]

A Look Into WS-Discovery Reflection Attacks for 2020 Q1

maio 5, 2020 | NSFOCUS

Executive Summary Web Services Dynamic Discovery (WSD) is a multicast discovery protocol to locate services on a local area network (LAN). However, due to device vendors’ design flaw in the implementation, when a normal IP address sends a service discovery packet, devices will also respond to the request. If exposed on the Internet, these devices […]

IP Reputation Report-04262020

abril 30, 2020 | NSFOCUS

1.Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at April 26, 2020. 2.Top 10 countries in attack percentage: The Belarus is in first place. The Cape Verde is in the second place. The country China (CN) is […]

How Does WannaRen Ransomware Spread?

abril 27, 2020 | NSFOCUS

Background Recently, a new strain of ransomware WannaRen came to the surface and began to spread between PCs. This ransomware encrypts files in the Windows system and uses .WannaRen as the extension of encrypted files. The attacker leaves a Bitcoin wallet address and demands 0.05 Bitcoin as ransom. Through tracking and analysis, NSFOCUS’s emergency response […]

IP Reputation Report-04192020

abril 23, 2020 | NSFOCUS

Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at April 19, 2020.

DDoS Attack Landscape 5

abril 22, 2020 | NSFOCUS

Controlled DDoS Attack Sources According to statistics, China was still home to the largest number of controlled DDoS attack sources (36.19%) in 2019, followed by the USA and UK. Although China’s ranking remained unchanged in terms of the number, the proportion decreased compared with 2018. This indicates that China’s DDoS governance and defenses have yielded […]