The report states that a small but powerful botnet consisting of 5,067 devices connected to a single network was involved in the attack. Each such computer can generate about 5,200 requests per second. Target is one of the customers of the company using the free tariff plan.

what is known

Apparently, since the attack was only traced back to cloud service providers, the attackers used hacked servers and virtual machines.

The company explains its findings as follows: We’re watching another bigger, but less powerful botnet with over 730,000 devices. A larger botnet cannot generate more than a million requests per second (average of about 1.3 requests per second per device). The smaller botnet was 4,000 times more powerful because it used virtual machines and servers on average. “

• The company’s report shows that this tiny botnet generated over 212 million HTTPS requests in less than 30 seconds.
• It included devices in 121 countries, including Indonesia, the United States, Brazil, and Russia.
• About 3 percent of activity fell on Tor nodes.
• The main sources of attack were the networks of the French company OVH (ASN 16276), Indonesian Telkomnet (ASN 7713), American iboss (ASN 137922) and Libyan Ajeel (ASN 37284).

Among the previous records in the field of such attacks, the DDoS attack in 2020 can be mentioned. Its capacity is estimated at 17.2 million requests per second. In April 2022, Cloudflare reported 15.3 million request attacks per second.