Cloudflare says it fended off the largest HTTP DDoS attack the company has ever seen over the weekend. It would be an HTTP/2 attack that exceeded 71 million requests per second at its peak. This made the attack more than a third larger than the previous record.
Cloudflare writes that it repelled multiple DDoS attacks for customers over the past weekend. It concerns several dozen attacks, the majority of which fired between 50 and 70 million requests per second. In the worst case, one of the attacks amounted to 71 million rps. During the previous largest attack Cloudflare ever detected, 46 million rps were fired at targets. That happened in June of 2022. In August, Google also hit such a large attack.
Cloudflare does not provide many details about the attack, but according to the company it is in any case HTTP/2 attacks where the requests came from 30,000 different IP addresses. The attacks took place on various websites of game providers, cryptocurrency companies, hosting providers and cloud platforms. According to Cloudflare, the botnets were controlled from “many cloud providers”, although the company does not provide further details.
The attack would have nothing to do with recent attacks last week that took place on hospitals and other healthcare facilities. The attackers would use other methods for that. Cloudflare also says that the attack has nothing to do with the Superbowl, which took place in America this weekend.
