One of the biggest HTTPS DDoS attacks ever seen was stopped

Notably, both the complexity and scale of DDoS attacks are forecast to increase dramatically recently, with new records continuously being set.

The famous Internet security service provider Cloudflare has announced it has successfully stopped one of the largest HTTPS DDoS attacks on record, with attack traffic originating in many countries around the world. The analysis results show that the botnet behind this attack made up to 15.3 million requests per second (rps), making it the most powerful HTTPS DDoS attack ever recorded by Cloudflare against a single server. of the company's customers.

Cloudflare revealed that the target of the attack was a company operating in the crypto industry, specifically connecting crypto projects with investors. This company is a customer on Cloudflare's Professional plan, and is protected by Cloudflare almost immediately, less than 15 seconds after the attack takes place. Other Cloudflare customers are also automatically protected from this botnet and do not need to take any action.

Before that, the biggest attack that Cloudflare has ever encountered was reported in August 2021, when a botnet carried out a DDoS attack that scaled up to 17.2 million rps. However, this attack is performed with HTTP traffic and not HTTPS as was the case recently. Cloudflare says that using HTTPS makes the attack more expensive, but in return for more efficiency, it is more difficult to counter.

The results of Cloudflare's investigation also show that this attack mainly comes from data centers, with a botnet of about 6,000 individual bots, located in 112 countries around the world. The countries hosting the most bots include Indonesia, Russia, Brazil, India, Colombia, and the United States.

Isabella Humphrey

Update 28 April 2022