Q4 of 2015 has been an interesting one. It started out very typical with a few thousand events per day then skyrocketed to over thirty thousand events per day with attacks targeting Turkey with DNS attacks. This can be seen with Turkcell and Turkish Telecom both the number 1 and number 2 top targets of the quarter. In these attacks it appears that statements were being made. Not only were Turkish IPs being targeted with DDoS attacks, Turkish domains were used as the records begin reflected at the target. These domains had very low amplification factors. The top domain used was nic.tr, not an excellent choice with about a 2x amplification factor. The second highest count of domains used in these attacks was Turkey.com, which only has a 3.9x amplification factor. In theory, these attacks typically yield about 50x amplification factor.
Download Threat Report
The report is on its way to your email.