Unacknowledged SYNs by country, April 16 2024

To anyone who thinks that things haven’t become considerably worse here in the U.S. with respect to cloud computing… this chart shows a partial day of unacknowledged TCP SYNs sent to my gateway from the public Internet, for the top 25 countries. U.S. infrastructure is the worst offender by a decimal order of magnitude versus the 2nd place offender. Most of the TCP SYNs are directed at ports 80, 443 and 22. They’re unacknowledged because I’m blocking access from many of our cloud and hosting providers. Why? Because nearly all (more than 99.99%) of the traffic I see from them is nefarious (attempted logins, probing for vulnerabilities, etc.).

Leave a Reply