Ask HN: Scale of real-life DDoS attacks?

5 points·alexkon··4 comments

What was the biggest DDoS attack you have ever encountered? How many gigabits per second? Packets per second? How many unique source IP addresses? How long did it last?

The peak number of real (non-spoofed) source IPs is also very interesting. I wonder whether it is feasible to automatically maintain a blacklist of offending IPs that managed to establish a TCP connection (and are thus real).

View on HN

Its old but GRC had a write-up about the attacks against them and infiltrating the bots: http://www.crime-research.org/library/grcdos.pdf

I couldn't find the originals on GRC website anymore: http://www.grc.com/default.htm

If I recall, after that writeup, GRC was knocked off the web by a BGP attack or something...

The best attack vector is usually Apache. Nonetheless, the records I heard are from Akamai:

Peak: 300,000 unique IPs, 795,000 page views/s, 98,000 unique views/s, 200Gbps [0].

[0] http://wwwns.akamai.com/rsa_2011/RSA_NOCC_DDoS.pdf

I have not encountered DDoS attacks directed at my own properties, but I had domains hosted on Namecheap that were hit when their DNS got DDoS'd a few times last year.

There is plenty of coverage of this if you just do a search: http://www.google.com/search?gcx=c&sourceid=chrome&i...

I have collected some reports on DDoS sizes here: https://code.google.com/p/googleappengine/issues/detail?id=6...

Reply on news.ycombinator.com