DDoS Telecom

Full Story On January 23, 2024, just before 8:00 p.m., many alerts began to be received regarding the detection of DDoS attacks on the Service Provider’s IP address space. The attacks included more than 1,500 different vectors of attacks, in the capacity of 600Gbps of traffic that were blocked by FlowSec’s system. The attacks lasted for more than 7 hours. The system detected the attacks and created signatures that were sent to the CSP’s routers. Examples of attack signature properties are source IP, Destination IP, port,  source port, destination port, protocol, packet length, UDP, ICMP, and TCP flag. In the…

Full Story On November 15, 2024, at 01:00 UTC, alerts were triggered indicating a series of DDoS attacks on the Service Provider’s IP address range. These attacks continued for more than 24 hours, and fininshed only on November 16, 2024, at 23:50 UTC. During this period, 541 attacks were recorded, with flags including PUSH, PSH, FIN, SYN, RST, and ACK. See below reports and diagrams of DDoS attacks. FlowSec’s ISP DDoS Protection system generated an automatic signature to mitigate the attack, which was then sent to the CSP’s routers to effectively block the incoming malicious traffic. During the incident, email…