Intelligent Data Centres Issue 16 | Page 48

A10 Networks reveals DDoS weapons and a vendors which busine A10 Networks tracked nearly six million DDoS weapons in Q4 2019. Here’s what the vendor discovered about the threats targeting companies today. 10 Networks, a provider of intelligent and A automated cybersecurity solutions, has announced the release of its research carried out into DDoS weapons and attack vendors. The research revealed that SNMP and SSDP remain the top sources for DDoS attacks, but the company also tracked nearly 800,000 WS-Discovery sources for exposed reflection amplification. The report revealed 1,390,505 SNMP weapons and 1,196,798 SSDP weapons were tracked, while 781,147 WS-Discovery weapons, 661,810 TFTP weapons and 389,956 DNS Resolver weapons were tracked. DDoS-for-hire services and other attackers continually scan for fresh TCP and UDP services to exploit, while the top countries hosting DDoS weapons align closely with the top ASNs where they connect. The top countries were China with 739,223 DDoS weapons, the USA with 448,169, the Republic of Korea with 440,185, India with 268,864, Russia with 253,609 and Taiwan with 199,656 DDoS weapons. The research also revealed that China hosts nearly a quarter of observed DDoS botnet agents (24%), with Brazil next with 9%, Iran with 6%, Taiwan with 4% and Thailand with 4%. Attacking drones are most often seen in Brazil followed by Thailand, Hong Kong, India and Russia. A10 Networks says that sophisticated DDoS threat intelligence, real-time threat detection and automated signature extraction can help protect organisations against even the largest DDoS attacks. ◊ ATTACKING DRONES ARE MOST OFTEN SEEN IN BRAZIL FOLLOWED BY THAILAND, HONG KONG, INDIA AND RUSSIA. www.intelligentdatacentres.com