Security News > 2022 > April > Cloudflare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second
Cloudflare on Wednesday disclosed that it acted to mitigate a 15.3 million request-per-second distributed denial-of-service attack.
"HTTPS DDoS attacks are more expensive in terms of required computational resources because of the higher cost of establishing a secure TLS encrypted connection," Cloudflare's Omer Yoachimik and Julien Desgats said.
The volumetric DDoS attack is said to have lasted less than 15 seconds and targeted an unnamed Cloudflare customer operating a crypto launchpad. Volumetric DDoS attacks are designed to overwhelm a target network/service with significantly high volumes of malicious traffic, which typically originate from a botnet under a threat actor's control.
Cloudflare said the latest attack was launched from a botnet comprising roughly 6,000 unique compromised devices, with 15% of the attack traffic originating from Indonesia, followed by Russia, Brazil, India, Colombia, and the U.S. "What's interesting is that the attack mostly came from data centers," Yoachimik and Desgats noted.
Record-setting DDoS attacks have become increasingly common in recent months.
In August 2021, Cloudflare disclosed what it characterized as the largest application-layer attack ever seen, and, earlier this year, Microsoft revealed that it had prevented multiple DDoS attacks that crossed 2.4 terabits per second.
News URL
https://thehackernews.com/2022/04/cloudflare-thwarts-record-ddos-attack.html
Related news
- Cloudflare blocks largest recorded DDoS attack peaking at 3.8Tbps (source)
- Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors (source)
- CUPS vulnerabilities could be abused for DDoS attacks (source)
- Recently patched CUPS flaw can be used to amplify DDoS attacks (source)
- Largest Recorded DDoS Attack is 3.8 Tbps (source)
- New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries (source)
- U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks (source)