TSUBAME Report Overflow (Oct-Dec 2024)

JPCERT/CC’s TSUBAME report for Oct–Dec 2024 summarizes increased reflection DDoS activity observed from Japanese websites (including hosting providers and some major companies) responding to spoofed IP traffic, with overseas sensors receiving more packets than domestic ones. The report highlights widespread scanning across common services and protocols—especially 23/TCP, 8728/TCP, 22/TCP, 80/8080/TCP, and ICMP—and advises proactive DDoS preparedness (e.g., CDN use, contingency planning, user notification), while noting no special alerts were issued this quarter.