Massive DDoS Attack


We are currently experiencing government sponsored ddos attack.

Any thoughts? We already followed Cloudflare best practices but still not enough.

Regarding traffic analytics, is your Website unresponsive?
Have you activated β€œI am under an attack!” mode?

May I just add usefull articles here:

1 Like

If the attack is not adapting its requests to a certain threshold, enable rate-limiting. If they are able to solve the captcha then the only option would be to block the visitors.

Also, if they are indeed solving the JavaScript as well as Captcha challenges, it’s likely that the attack is coming from a botnet, Try blocking old browser engines and outdated SSL/TLS.
If the attack is not coming from a botnet but is highly distributed through a set of proxies, you might want to simply block proxies/vpn(s) using Cloudflare managed lists.

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.