{"id":6517,"date":"2026-11-06T08:09:47","date_gmt":"2026-11-06T07:09:47","guid":{"rendered":"https:\/\/enthec.com\/?p=6517"},"modified":"2026-11-06T08:09:47","modified_gmt":"2026-11-06T07:09:47","slug":"ddos-attack-a-printer-at-your-company-might-be-attacking-someone","status":"publish","type":"post","link":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/","title":{"rendered":"DDoS Attack: A Printer at Your Company Might Be Attacking Someone"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">A printer, a switch, or an industrial control system with the SNMP protocol exposed to the Internet may be participating in a DDoS attack without the company even knowing it. This is what <\/span><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\">data from Enthec\u2019s honeypot network shows\u2014a campaign that doesn&#8217;t seek to infiltrate any organization, but instead<strong> uses its<\/strong><\/span><b>\u00a0equipment against third parties.<\/b><\/p>\n<p><b>Since October 22\u201323, our sensors have been detecting a surge in malicious activity<\/b><span style=\"font-weight: 400;\">. Attacks on our decoys have risen from about 510,000 to about 825,000 per day\u2014an increase of more than 60%\u2014and the number of unique attacking IP addresses has grown by 40%. Several campaigns coincided in the same week behind this surge. This is the most revealing one.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2><b>What have Enthec&#8217;s honeypots detected?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">A sudden spike in SNMP queries that appear to originate from hundreds of residential connections. This is the hallmark of an ongoing DDoS attack that uses exposed third-party devices as weapons.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">One of our lures simulates an exposed piece of industrial equipment that responds to SNMP (Simple Network Management Protocol), the protocol printers, switches, routers, and industrial control systems use to report their status.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Until October 22, that decoy received a few dozen SNMP requests. Since October 23, it has been receiving <\/span><b>up to 30,000 every six hours<\/b><span style=\"font-weight: 400;\">. And almost all of them are of the GetBulk type\u2014the query that forces the device to return as much data as possible.<\/span><\/p>\n<h3><b>Who sends those requests?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">What&#8217;s most striking isn&#8217;t the volume, but who is listed as the sender:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>464 different IP addresses<\/b><span style=\"font-weight: 400;\">, mostly residential connections from major providers in the United States and Europe.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Each one \u201cattacks\u201d all the sensors on the network at once<\/b><span style=\"font-weight: 400;\">, in bursts lasting between twenty minutes and a few hours, and then disappears.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A large portion of the requests appear to originate from<\/span><b> ports 53 or 80,<\/b><span style=\"font-weight: 400;\"> which is not typical behavior for a home computer sending an SNMP query.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">A home user doesn&#8217;t send tens of thousands of queries to industrial servers worldwide.<\/span><b> Those IP addresses aren\u2019t attackers\u2014they\u2019re victims.<\/b><\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\" wp-image-6518 aligncenter\" src=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-602x1024.jpg\" alt=\"Infographic of DDoS Attack\" width=\"537\" height=\"913\" srcset=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-602x1024.jpg 602w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-176x300.jpg 176w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-768x1306.jpg 768w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-904x1536.jpg 904w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles-350x595.jpg 350w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/Ingles.jpg 1200w\" sizes=\"(max-width: 537px) 100vw, 537px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2><b>What is a DDoS attack?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">A DDoS attack\u2014short for Distributed Denial of Service\u2014is a<\/span><b> cyberattack that\u00a0<\/b><span style=\"font-weight: 400;\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\"><strong>tries to take down a website<\/strong>, server, or <\/span>connection by flooding it with more traffic or requests than it can handle. It is called \u201cdistributed\u201d because that traffic comes from many sources at once, making it difficult to block.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Depending on where they strike, DDoS attacks are typically grouped into three families:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Volumetric:<\/b><span style=\"font-weight: 400;\"> They flood the victim\u2019s bandwidth. The campaign we\u2019ve detected falls into this category.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Protocol-based: <\/b><span style=\"font-weight: 400;\">These attacks exhaust the resources of network equipment such as firewalls or load balancers.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Application-layer attacks: <\/b><span style=\"font-weight: 400;\">They mimic legitimate requests to crash a specific website or service.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><b>How does the DDoS attack we&#8217;ve detected work?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">This is a variant known as reflection and amplification, which we explain in detail in our article on the <\/span><a href=\"https:\/\/enthec.com\/en\/drdos-main-features-and-operation\/\"><span style=\"font-weight: 400;\">DrDoS attack<\/span><\/a><span style=\"font-weight: 400;\">. In summary:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The attacker sends a small request to an exposed device but forges the source address by adding the victim&#8217;s address.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The compromised device, which has no way of knowing this, sends the victim a response that is much larger than the request.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If this is repeated with thousands of devices at once, the traffic reaching the victim is enough to bring down their connection.<\/span><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<h2><b>What is the purpose of a DDoS attack?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The immediate goal of a DDoS attack is always the same:<\/span><b> to disrupt a service<\/b><span style=\"font-weight: 400;\">, but the motivations behind it vary widely.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In the case we observed, short bursts targeting home internet connections are the hallmark of DDoS-for-hire services\u2014known as \u201cbooters\u201d or \u201cstressers\u201d\u2014which are contracted by the hour to take a specific person offline, such as a rival in an online game.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In the business world, the most common motive is <\/span><b>extortion<\/b><span style=\"font-weight: 400;\">: the attacker takes down a service\u2014or threatens to\u2014to demand payment in exchange for stopping the attack. Hacktivism is also common, with campaigns targeting organizations or companies for political or ideological reasons.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A less obvious but equally dangerous use is <\/span><b>distraction.<\/b><span style=\"font-weight: 400;\"> The attack keeps the security team occupied while another intrusion takes place in parallel\u2014the one the attacker really wants.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As INCIBE points out, <\/span><b>no organization is too small to be the target of a DDoS attack<\/b><span style=\"font-weight: 400;\">. And, as this campaign shows, no organization is too small to be part of one either.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" class=\"alignnone size-full wp-image-6514\" src=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos.jpg\" alt=\"DDoS Attack\" width=\"750\" height=\"500\" srcset=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos.jpg 750w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-300x200.jpg 300w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-350x233.jpg 350w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2><b>Why does this DDoS attack affect your company even though it isn&#8217;t the target?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Because the attack traffic originates from their devices and their connection. A device with SNMP exposed to the Internet\u2014whether it\u2019s a printer, a switch, a video surveillance camera, or an industrial control system\u2014is something someone can exploit. And the consequences aren\u2019t limited to the victim:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>The traffic originates from the company&#8217;s IP address. <\/b>Your connection appears in abuse reports, and it could end up on a blacklist, damaging<span style=\"font-weight: 400;\">\u00a0your IP reputation.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>It consumes your own bandwidth,<\/b><span style=\"font-weight: 400;\"> sometimes without anyone linking the slow performance to an attack.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>It reveals internal information: <\/b><span style=\"font-weight: 400;\">model, firmware version, device name, or network configuration. Attackers can use this data to prepare a subsequent attack against the company itself.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>It\u2019s an indicator of security hygiene: <\/b><span style=\"font-weight: 400;\">if a device like this is exposed, it\u2019s likely not the only one.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">A poorly secured device is no longer just a risk in and of itself; it becomes an unwitting accomplice in attacks against third parties.<\/span><\/p>\n<h2><b>What should you check to ensure your devices don\u2019t participate in a DDoS attack?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">This type of exposure is rarely the result of a specific oversight. Inventories change, vendors install equipment, and some services are published by default. These are the most effective checks:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Take inventory of the exposed surface: <\/b><span style=\"font-weight: 400;\">which devices are responding from the Internet and why. Often, devices appear that no one remembers having exposed outside the <\/span><a href=\"https:\/\/enthec.com\/en\/relevance-of-perimeter-cyber-security-for-your-business\/\"><span style=\"font-weight: 400;\">perimeter<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Do not expose SNMP to the Internet: <\/b><span style=\"font-weight: 400;\">filter UDP port 161 at the perimeter and restrict access to management networks.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Use SNMPv3 <\/b><span style=\"font-weight: 400;\">with authentication instead of versions 1 and 2c, especially if you retain default communities such\u00a0<\/span><span style=\"font-weight: 400;\">as\u00a0<em>public<\/em>.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Apply anti-spoofing filtering (BCP 38) <\/b><span style=\"font-weight: 400;\">on your own network to prevent packets with forged source addresses from leaving the network.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Review\u00a0<\/b><span style=\"font-weight: 400;\"><strong>other exposed UDP services <\/strong>used for the same purpose (DNS, NTP, SSDP, or Memcached, among others) and include them in the <\/span><a href=\"https:\/\/enthec.com\/en\/systems-hardening-what-it-is-phases-and-why-it-should-be-combined-with-attack-surface-surveillance\/\"><span style=\"font-weight: 400;\">hardening<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><b>What is a honeypot, and why does it allow us to detect these campaigns early?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">A honeypot is a decoy that simulates a real system exposed on the Internet without having any legitimate use. Since no one should connect to it,<\/span><span style=\"font-weight: 400;\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\"><strong>\u00a0all the traffic it receives is, by definition, suspicious,<\/strong> and that makes it a\u00a0<\/span>reliable sensor for detecting malicious activity.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Enthec\u2019s sensor network allows you to see these campaigns as they happen, not weeks later in a report. It\u2019s the difference between <a href=\"https:\/\/enthec.com\/en\/reactive-vs-proactive-cybersecurity-whats-the-real-difference-and-why-does-it-matter-to-business\/\">reactive <\/a><\/span><span style=\"font-weight: 400;\"><a href=\"https:\/\/enthec.com\/en\/reactive-vs-proactive-cybersecurity-whats-the-real-difference-and-why-does-it-matter-to-business\/\">cybersecurity and proactive cybersecurity<\/a>\u2014understanding how attacks are <\/span><span style=\"font-weight: 400;\">carried out today so you can close the door before anyone uses it.<\/span><\/p>\n<h2><b>How to detect exposed devices before the attacker does with Kartos<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">This type of exposure isn&#8217;t visible from within the network; it&#8217;s visible from the outside, which is where the attacker is looking. <\/span><a href=\"https:\/\/enthec.com\/en\/kartos\/\"><span style=\"font-weight: 400;\">Kartos<\/span><\/a><span style=\"font-weight: 400;\">, Enthec\u2019s platform for managing the external attack surface, <\/span><b>continuously identifies the assets and services that an organization has exposed on the Internet<\/b><span style=\"font-weight: 400;\">\u2014including those that have been overlooked\u2014so they can be shut down before anyone exploits them.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It is part of\u00a0<\/span><span style=\"font-weight: 400;\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\">a\u00a0<a href=\"https:\/\/enthec.com\/en\/ctem-continuous-threat-exposure-management-as-a-prominent-cybersecurity-approach\/\" target=\"_blank\" rel=\"noopener\">continuous threat exposure management (CTEM)<\/a> approach\u00a0<\/span>and was developed in Spain in accordance with European regulations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Our honeypot network detects these campaigns as they unfold. Kartos lets you check whether your organization is part of the problem. <\/span><a href=\"https:\/\/enthec.com\/en\/contact\/\"><span style=\"font-weight: 400;\">Contact us<\/span><\/a><span style=\"font-weight: 400;\"> to see what an attacker sees when looking at your company from the outside.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A printer, a switch, or an industrial control system with the SNMP protocol exposed to the Internet may be participating [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":6519,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44],"tags":[],"class_list":["post-6517","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u25b7 DDoS Attack: What Our Honeypots See<\/title>\n<meta name=\"description\" content=\"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u25b7 DDoS Attack: What Our Honeypots See\" \/>\n<meta property=\"og:description\" content=\"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company\" \/>\n<meta property=\"og:url\" content=\"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/\" \/>\n<meta property=\"og:site_name\" content=\"ENTHEC \u00b7 Kartos \u00b7 Qondar\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-06T07:09:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Enthec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Enthec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/\"},\"author\":{\"name\":\"Enthec\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/person\\\/ca39e450d4d09a7a39995a9b0a27bfe2\"},\"headline\":\"DDoS Attack: A Printer at Your Company Might Be Attacking Someone\",\"datePublished\":\"2026-11-06T07:09:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/\"},\"wordCount\":1311,\"publisher\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ataque-ddos-impresora-scaled.jpg\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/\",\"url\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/\",\"name\":\"\u25b7 DDoS Attack: What Our Honeypots See\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ataque-ddos-impresora-scaled.jpg\",\"datePublished\":\"2026-11-06T07:09:47+00:00\",\"description\":\"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#primaryimage\",\"url\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ataque-ddos-impresora-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ataque-ddos-impresora-scaled.jpg\",\"width\":2560,\"height\":1440,\"caption\":\"DDoS Attack via Printer\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/enthec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DDoS Attack: A Printer at Your Company Might Be Attacking Someone\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#website\",\"url\":\"https:\\\/\\\/enthec.com\\\/\",\"name\":\"ENTHEC\",\"description\":\"Advanced AI-driven Cyber-Surveillance Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\"},\"alternateName\":\"ENTHEC \u00b7 Kartos \u00b7 Qondar\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/enthec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\",\"name\":\"ENTHEC\",\"alternateName\":\"ENTHEC \u00b7 Kartos \u00b7 Qondar\",\"url\":\"https:\\\/\\\/enthec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fondo-blanco_1.png\",\"contentUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fondo-blanco_1.png\",\"width\":667,\"height\":131,\"caption\":\"ENTHEC\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/person\\\/ca39e450d4d09a7a39995a9b0a27bfe2\",\"name\":\"Enthec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"caption\":\"Enthec\"},\"url\":\"https:\\\/\\\/enthec.com\\\/en\\\/author\\\/phernandez\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u25b7 DDoS Attack: What Our Honeypots See","description":"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/","og_locale":"en_US","og_type":"article","og_title":"\u25b7 DDoS Attack: What Our Honeypots See","og_description":"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company","og_url":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/","og_site_name":"ENTHEC \u00b7 Kartos \u00b7 Qondar","article_published_time":"2026-11-06T07:09:47+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg","type":"image\/jpeg"}],"author":"Enthec","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Enthec","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#article","isPartOf":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/"},"author":{"name":"Enthec","@id":"https:\/\/enthec.com\/#\/schema\/person\/ca39e450d4d09a7a39995a9b0a27bfe2"},"headline":"DDoS Attack: A Printer at Your Company Might Be Attacking Someone","datePublished":"2026-11-06T07:09:47+00:00","mainEntityOfPage":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/"},"wordCount":1311,"publisher":{"@id":"https:\/\/enthec.com\/#organization"},"image":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#primaryimage"},"thumbnailUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/","url":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/","name":"\u25b7 DDoS Attack: What Our Honeypots See","isPartOf":{"@id":"https:\/\/enthec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#primaryimage"},"image":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#primaryimage"},"thumbnailUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg","datePublished":"2026-11-06T07:09:47+00:00","description":"What is a DDoS attack, and what is its purpose? \u27a1\ufe0f We analyze a real campaign detected by our honeypots and what to check within your company","breadcrumb":{"@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#primaryimage","url":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg","contentUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/11\/ataque-ddos-impresora-scaled.jpg","width":2560,"height":1440,"caption":"DDoS Attack via Printer"},{"@type":"BreadcrumbList","@id":"https:\/\/enthec.com\/en\/ddos-attack-a-printer-at-your-company-might-be-attacking-someone\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/enthec.com\/"},{"@type":"ListItem","position":2,"name":"DDoS Attack: A Printer at Your Company Might Be Attacking Someone"}]},{"@type":"WebSite","@id":"https:\/\/enthec.com\/#website","url":"https:\/\/enthec.com\/","name":"ENTHEC","description":"Advanced AI-driven Cyber-Surveillance Platform","publisher":{"@id":"https:\/\/enthec.com\/#organization"},"alternateName":"ENTHEC \u00b7 Kartos \u00b7 Qondar","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/enthec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/enthec.com\/#organization","name":"ENTHEC","alternateName":"ENTHEC \u00b7 Kartos \u00b7 Qondar","url":"https:\/\/enthec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enthec.com\/#\/schema\/logo\/image\/","url":"https:\/\/enthec.com\/wp-content\/uploads\/2024\/08\/Fondo-blanco_1.png","contentUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2024\/08\/Fondo-blanco_1.png","width":667,"height":131,"caption":"ENTHEC"},"image":{"@id":"https:\/\/enthec.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/enthec.com\/#\/schema\/person\/ca39e450d4d09a7a39995a9b0a27bfe2","name":"Enthec","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","caption":"Enthec"},"url":"https:\/\/enthec.com\/en\/author\/phernandez\/"}]}},"_links":{"self":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/comments?post=6517"}],"version-history":[{"count":2,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6517\/revisions"}],"predecessor-version":[{"id":6522,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6517\/revisions\/6522"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/media\/6519"}],"wp:attachment":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/media?parent=6517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/categories?post=6517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/tags?post=6517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}