Security News > 2022 > September > Imperva mitigated long-lasting, 25.3 billion request DDoS attack
Internet security company Imperva has announced its DDoS mitigation solution has broken a new record, defending against a single attack that sent over 25.3 billion requests to one of its customers.
The DDoS attack unfolded on June 27, 2022, peaking at 3.9 million requests per second and averaging 1.8 million RPS. While this pales compared to the record-breaking attack that Cloudflare mitigated in June, which topped at 26 million RPS, the duration in Imperva's case was unusually long.
Attacks peaking above one million RPS typically last between several seconds and a few minutes, but the one Imperva mitigated lasted over four hours.
"The attack started at 3.1M RPS, and maintained a rate of around 3M RPS. Once the attack peaked at 3.9M RPS, the attack lowered for several minutes but returned to full strength for another hour," describes Imperva.
According to the company, only about one in ten DDoS attacks last for over an hour, and an even smaller percentage comes with notable firepower sustained for so long.
The DDoS attack that Imperva mitigated was launched by a massive botnet spread across 180 countries, with most IP addresses located in the U.S., Brazil, and Indonesia.