Web infrastructure company Cloudflare blocked the largest volumetric distributed denial-of-service (DDoS) attack to date. It detected and mitigated a wave of dozens of hyper-volumetric DDoS attacks targeting its customers over the weekend.
The majority of attacks peaked in the ballpark of 50-70 million requests per second (rps) with the largest exceeding 71 million rps.
This is the largest reported HTTP DDoS attack on record which is more than 35% higher than the previous reported record of 46M rps in June 2022.
The attacks were launched using over 30,000 IP addresses from multiple cloud providers against various targets, including gaming providers, cloud computing platforms, cryptocurrency firms, and hosting providers.
According to Cloudflare’s recent DDoS threat report
- Company recorded a 79% spike in HTTP DDoS attacks year-over-year in the final quarter of 2022.
- The number of volumetric attacks lasting more than three hours surged by 87% when compared to the previous three-month period.
- The number of volumetric attacks exceeding 100 Gbps grew by 67% quarter-over-quarter (QoQ)
The campaign follows a recent trend of DDoS attacks, not only in their increasing size but the fact they originate from IP addresses inside cloud computing ecosystems.
DDoS-for-hire services make it relatively easy for threat actors to launch attacks today.
Comments