All IDCA News

By Loading

30 Aug 2022

Share on social media:

Google Cloud Reported They Were Able to Withstand the Largest Layer 7 Attack Ever at an Astonishing 46 Million Requests per Second.

The Google cloud division disclosed that it mitigated a series of HTTPS distributed denial-of-service attacks that peaked at 46 million requests per second (RPS), making it the largest DDoS attack recorded.

The June 1, 2022 attack, which targeted an unnamed Google Cloud Armor customer, was 76% larger than the DDoS attack repealed by Cloudflare earlier this year, surpassing a previous record attack of 17.2 million RPS.

"To give a sense of the scale of the attack, that is like receiving all the daily requests to Wikipedia (one of the top 10 trafficked websites in the world) in just 10 seconds," Said Google Cloud's Satya Konduru and Emil Kiner.

The DDoS attack began at 9:45 a.m. PT with 10,000 RPS, then increased eight minutes later to 100,000 RPS, and then further grew within two minutes to 46 million RPS by 10:18 a.m. PT. In all, the DDoS attack lasted for 69 minutes.

According to Google, the unusual traffic originated from 5,256 IP addresses in over 130 countries, with India, Russia, Brazil, and Indonesia accounting for 31% of the total attack requests.

Only 3% of the attack traffic came from the 1,169 IP addresses associated with TOR exit nodes, representing 22% of the total attack traffic.

"The attack leveraged encrypted requests (HTTPS), which would have taken added computing resources to generate," the company noted. "The geographic distribution and types of unsecured services leveraged to generate the attack match the Mēris family of attacks."

In September 2021, the Mēris botnet was identified as being connected to a Distributed Denial of Service attack on Russian internet giant Yandex, with the attack peaking at a rate of 21.8 million requests per second. Additionally, in September 2021, approximately 50% of the botnet's infrastructures were sinkholes.

Follow us on social media: