Mars Attacks!
Aug 6, 2012John Graham-Cumming
Summary
This post analyzes attack statistics from July 2012, highlighting that a significant portion of attacks originate from 'Martian IP addresses' (invalid on the public internet, often due to spoofing or internal network usage). It details the mechanics of IP spoofing and explains how reflection attacks, particularly DNS amplification, are used to amplify attack bandwidth and obscure the true source. The post emphasizes that source IP addresses in Layer 3/4 attacks are often unreliable, contributing to Cloudflare's understanding of threat landscapes.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack