Cloudflare Boots Aisuru Botnet and Suddenly Gets Hammered Offline

Cloudflare has gone offline for a couple hours today after reporting a huge traffic spike.

Source: Cloudflarestatus.com

Yesterday the news was Microsoft revealed a nearly 16 terabit/second attack from the Aisuru (Mirai-based) botnet flooding a single target in Australia with UDP packets from over a half-million systems.

Azure was hit by the “largest-ever” cloud-based distributed denial of service (DDoS) attack, originating from the Aisuru botnet and measuring 15.72 terabits per second (Tbps), according to Microsoft. On October 24, the Windows giant’s cloud DDoS protection service auto-detected and mitigated the traffic tsunami – nearly 3.64 billion packets per second – so no customer workloads experienced any service interruptions, Microsoft’s Sean Whalen said in a Monday blog.

This was a notable event not least because the news at the start of the month was Cloudflare announcing that they were giving Aisuru the boot.

For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon, Apple, Google and Microsoft in Cloudflare’s public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites list. The chief executive at Cloudflare says Aisuru’s overlords are using the botnet to boost their malicious domain rankings, while simultaneously attacking the company’s domain name system (DNS) service.

No word yet from Cloudflare on the causes of their massive outages.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.