Security News > 2022 > August > Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second

Google's cloud division on Thursday disclosed it mitigated a series of HTTPS distributed denial-of-service attacks which peaked at 46 million requests per second, making it the largest such recorded to date.
The attack, which occurred on June 1, targeting an unnamed Google Cloud Armor customer, is 76% larger than the 26 million RPS DDoS attack repealed by Cloudflare earlier this June.
"To give a sense of the scale of the attack, that is like receiving all the daily requests to Wikipedia in just 10 seconds," Google Cloud's Emil Kiner and Satya Konduru said.
Google said that the unexpectedly high volume of traffic originated from 5,256 IP addresses located in 132 countries, with Brazil, India, Russia, and Indonesia alone accounting for 31% of all the attack requests.
"The attack leveraged encrypted requests which would have taken added computing resources to generate," the company noted.
In September 2021, the Mēris botnet was linked to a DDoS attack on Russian internet giant Yandex that peaked at 21.8 million RPS. Parts of the botnet's infrastructure were sinkholed in late September 2021.
News URL
https://thehackernews.com/2022/08/google-cloud-blocks-record-ddos-attack.html
Related news
- Phishers abuse Google OAuth to spoof Google in DKIM replay attack (source)
- Cloudflare mitigates record number of DDoS attacks in 2025 (source)
- DDoS attacks jump 358% compared to last year (source)
- Google: 97 zero-days exploited in 2024, over 50% in spyware attacks (source)
- Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks (source)
- Europol Shuts Down Six DDoS-for-Hire Services Used in Global Attacks (source)
- New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors (source)
- CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs (source)
- Threat actors abuse Google Apps Script in evasive phishing attacks (source)
- Google patches new Chrome zero-day bug exploited in attacks (source)