Friday, May 9, 2025
HomeCyber AttackHackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours

Hackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours

Published on

SIEM as a Service

Follow Us on Google News

On the day of June 27, 2022, Imperva, an internet cybersecurity company mitigated over 25.3 billion requests as part of a DDoS attack. A new record in the field of DDoS mitigation has been set by its solution.

A Chinese telecommunications company that has not been named was targeted in the attack. This furious attack reach a peak level of 3.9 million RPS, and it lasted for four hours on end.

To send multiple requests over individual connections simultaneously, attackers used HTTP/2 multiplexing, which is the ability to combine multiple packets into one package.

- Advertisement - Google News

Massive Attack

There is no shortage of attacks that Cloudflare mitigated in June, and this attack set a record of 26 million RPS. However, Imperva’s attack lasted for an unusually long period of time, which stands in contrast to Cloudflare’s record-breaking attack in June.

The Imperva mitigation took place over 4 hours after an attack peaking at over one million RPS. Typically, attacks peaking at over one million RPS last for several seconds or minutes.

During the attack, the rate of RPS started at 3.1M, and remained about 3M until the attack was over. After reaching a peak of 3.9M RPS, the attack slowed down for several minutes before returning to full strength for an additional hour, at which time it peaked at 3.9M RPS.

A DDoS attack typically lasts no more than an hour in about one out of ten cases. 

Botnet

A massive botnet was in control of the DDoS attack and it was spread across 180 countries, with most IP addresses originating from the following countries:-

  • The U.S.
  • Brazil
  • Indonesia

The botnet consists of over 170,000 IP addresses distributed throughout the world, including the following:-

  • Routers
  • Security cameras
  • Compromised servers
  • Vulnerable IoTs

Cloud security service providers and public clouds are some of the places where the malicious traffic originates from and are hosting some of the malicious servers.

However, no name or identification was given for the botnet, but from what has been observed, it doesn’t appear to be “Mantis.” The Mantis relies primarily on powerful servers and virtual machines to run its operations, rather than a large number of devices.

Moreover, it is estimated that the number of devices that are used against Imperva’s client is closer to the counts of Mēris.

Download Free SWG – Secure Web Filtering – E-book

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Scattered Spider Malware Targets Klaviyo, HubSpot, and Pure Storage Platforms

Silent Push researchers have identified that the notorious hacker collective Scattered Spider, also known...

Chinese Hackers Exploit SAP RCE Vulnerability to Deploy Supershell Backdoors

A critical remote code execution (RCE) vulnerability, identified as CVE-2025-31324, in SAP NetWeaver Visual...

Hackers Target IT Admins by Poisoning SEO to Push Malware to Top Search Results

Cybercriminals are increasingly targeting IT administrators through sophisticated Search Engine Optimization (SEO) poisoning techniques. By...

New Mamona Ransomware Targets Windows Systems Using Abused Ping Command

Cybersecurity researchers are raising the alarm about a newly discovered commodity ransomware strain dubbed Mamona,...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

New Supply Chain Attack Compromises Popular npm Package with 45,000 Weekly Downloads

An advanced supply chain attack has targeted the well-known npm package rand-user-agent, which receives...

Threat Actors Leverage Multimedia Systems in Stealthy Vishing Attacks

Threat actors have begun exploiting multimedia systems as a pivotal component of their voice...

Indirect Prompt Injection Exploits LLMs’ Lack of Informational Context

A new wave of cyber threats targeting large language models (LLMs) has emerged, exploiting...