4 ms·

Cyber attacks in the Israel-Hamas war - Cloudflare

21 points by RyeCombinator 3y ago

rightbyte 3y ago
"Nearly 1 out of every 100 requests towards Israeli websites using Cloudflare were part of an HTTP DDoS attack. ... over 46% of all traffic to Palestinian websites using Cloudflare were part of HTTP DDoS attacks." Can the internet even function when every other request is a malicious bot?
- cmeacham98 3y ago
  I operate a relatively small website that receives approx 200-300 unique (legitimate) visitors per month. As of the last time I measured, 97% of requests my web server received were malicious. I've seen empty domains that respond with a 404 on every page with all kinds of bot/scanner/crawler in the logs.
bluish29 3y ago
This is a genuine question not trying to take it politically. But if you have 1% malicious/bot activity from all your website traffic. Does this qualify to describe that you are under attack in the era of bots and web scrapers? And actually I think this is very small to have statistical significance. I wonder what is the error bars on these calculations from cloudflare. I might be wrong but I would be more interested into going into details on how this analysis is conducted and this would be more interesting than this marketing focus article that cloudflare is abusing the world events to use it as marketing tool.
- junon 3y ago
  When I worked with Guillermo Rauch of Vercel, back when it was ZEIT, he shared with me a viewpoint that I found refreshingly unique and insightful - one among many - that I still hold to this day. Every usage of your service is an attack. Corollary, you're only not under attack when nobody is using your system. By treating all usage as an attack in some way, you can better model and measure what is a malicious use of your system. Further (and I think the point he was more trying to make), you get out of this double sided coin of "acceptable" usage and "unacceptable" usage. In a sense, 1% is quite large. Especially when you've classified bot/malicious usage based on abnormal usage, globally, that's not negligible. Not at Cloudflare's scale. Just wanted to share.

21 points by RyeCombinator 3y ago

"Nearly 1 out of every 100 requests towards Israeli websites using Cloudflare were part of an HTTP DDoS attack. ... over 46% of all traffic to Palestinian websites using Cloudflare were part of HTTP DDoS attacks." Can the internet even function when every other request is a malicious bot?

cmeacham98 3y ago
I operate a relatively small website that receives approx 200-300 unique (legitimate) visitors per month. As of the last time I measured, 97% of requests my web server received were malicious. I've seen empty domains that respond with a 404 on every page with all kinds of bot/scanner/crawler in the logs.

bluish29 3y ago

This is a genuine question not trying to take it politically. But if you have 1% malicious/bot activity from all your website traffic. Does this qualify to describe that you are under attack in the era of bots and web scrapers? And actually I think this is very small to have statistical significance. I wonder what is the error bars on these calculations from cloudflare. I might be wrong but I would be more interested into going into details on how this analysis is conducted and this would be more interesting than this marketing focus article that cloudflare is abusing the world events to use it as marketing tool.

junon 3y ago
When I worked with Guillermo Rauch of Vercel, back when it was ZEIT, he shared with me a viewpoint that I found refreshingly unique and insightful - one among many - that I still hold to this day. Every usage of your service is an attack. Corollary, you're only not under attack when nobody is using your system. By treating all usage as an attack in some way, you can better model and measure what is a malicious use of your system. Further (and I think the point he was more trying to make), you get out of this double sided coin of "acceptable" usage and "unacceptable" usage. In a sense, 1% is quite large. Especially when you've classified bot/malicious usage based on abnormal usage, globally, that's not negligible. Not at Cloudflare's scale. Just wanted to share.