Last weekend, a European web hosting provider with operations around the globe was hit by a number of distributed denial of service (DDoS) attacks.
The attacks peaked at 1.04Tbps, which is about half the largest recorded DDoS onslaught recorded to date, which occured when Amazon’s AWS Shield stopped a 2.3Tbps attack in February 2020.
IaaS service provider Voxility helped mitigate the attacks, which it says lasted around 15 minutes on average. The attacks had 600 different originating source IPs per event and consisted of volumetric UDP flood which a spokesperson for the company said comprised of very large, “UDP packets, DNS amplification, and UDP packets without payload”.
The geographical origin of the attacks is currently under investigation, but worryingly for service providers, the frequency of these attacks has increased coinciding with the global pandemic. Maria Sirbu, VP of Corporate Communications at Voxility, commented that its service saw up to seven events in August that were higher than 0.7Tbps.
DDoS attacks are one of the easiest ways for criminals to harm companies and organisations, whether as part of extortion attempts or simply to hit them where it matters the most – in goodwill and sales.
Fortunately DDoS protection services exist and are often bundled with web hosting services, either for free or for a small charge; CloudFlare, Google, Microsoft and Amazon are among the better known service providers.