Home · Wiki · Incidents & Campaigns
type: incident · created: 2026-11-02 · updated: 2026-11-02 · tags: [incident, global] · confidence: medium · severity: critical · affected_sectors: [global] · au_impact: true
🎯 IOCs · Aisuru +2
Indicators of compromise · Aisuru +1 — 8 shown
  • 89[.]19[.]220[.]21:8080ip:port · ThreatFox · first seen 2026-10-20
  • 89[.]19[.]220[.]21:8443ip:port · ThreatFox · first seen 2026-10-20
  • 178[.]16[.]53[.]68:34567ip:port · ThreatFox · first seen 2026-10-20
  • 159[.]223[.]27[.]220:9035ip:port · ThreatFox · first seen 2026-10-19
  • 152[.]42[.]212[.]170:443ip:port · ThreatFox · first seen 2026-10-17
  • 157[.]230[.]241[.]185:443ip:port · ThreatFox · first seen 2026-10-17
  • 157[.]245[.]241[.]230:443ip:port · ThreatFox · first seen 2026-10-17
  • 174[.]138[.]41[.]23:443ip:port · ThreatFox · first seen 2026-10-17

Defanged third-party indicators (abuse.ch). The defanging is deliberate: never click, resolve or fetch these values. An indicator corroborates a report — it never proves one, and its presence here does not mean this story's hosts are listed.

Cloudflare said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026 — about 197,400 attacks a day, or one every 0.44 seconds. The network-layer total rose from 13.2 million in Q2 and 10.0 million in Q1, a 38% quarter-over-quarter increase that Cloudflare attributes largely to DDoS-for-hire booter and stresser services responsible for hundreds of thousands of attacks. Short-burst, low-bandwidth attacks lasting under 10 minutes and under 1 Gbps surged 208%, while hyper-volumetric attacks exceeding 1 Tbps fell 69%, from 805 in Q2 to 251 in Q3 — a decline Cloudforce One credits to law-enforcement action against AISURU, KimWolf, JackSkid and Mossad earlier this year. The threat is far from neutralised, with new variants such as Dysphoria and Evooo1Bot emerging, and the shift toward many small attacks matters because short, cheap floods are harder to distinguish from legitimate traffic and often escape volumetric thresholds.

Attribute Detail
Sector Global (Macro)
Date 2026-11-02
Source The Hacker News
Reliability Tier 2