logo

DDoS backscatter の長期変化

ID: 2d20d651-e764-585e-a80d-1ea77d2e183c

STIX ID: report--2d20d651-e764-585e-a80d-1ea77d2e183c

Feed Name: IIJ Security Diary

Threat Score
50/100

Date Published: 2020-02-14

Date Updated: 2026-07-15

Author: Tadaaki Nagao

...
...

This report analyzes DDoS backscatter observations from 2015–2020, finding a substantial rise in observed packet volumes while the number of unique targeted IPs did not increase, indicating larger per-incident traffic; it highlights a shift toward attacks using high ephemeral ports and notes that DNS flood backscatter (53/UDP) largely ceased after May 2017, concluding that DDoS activity patterns and TTPs have changed and urging continued DDoS preparedness.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.