![\"Ending](\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2016\/12\/Ending-The-Year-With-A-650Gbps-DDoS-Attack-640x320.png\")
<\/p>\nIt seems that 2016 has been the year of immense DDoS attacks, many coming from Mirai. This seems to be a newcomer though ending the year with a 650Gbps DDoS attack.<\/p>\n
<\/p>\n
The Dyn DNS DDoS attack<\/a> that some speculated reached over 1Tbps was probably the biggest, but this isn’t that far behind and it’s bigger than the previously largest recorded at 620Gbps<\/a>.<\/p>\n As the end of the year approaches, it\u2019s natural to contemplate the future and look for signs of things to come. Sometimes, however, you don\u2019t have to search too hard. Sometimes, these \u201csigns\u201d hit you like a ton of bricks.<\/p>\n This is how it was for us when, just ten days before the year\u2019s end, we found ourselves mitigating a 650 Gbps (Gigabit per second) DDoS attack\u2014the largest on record for our network.<\/p>\n This was a fitting end to a year of huge DDoS assault, nasty new malware types and massive IoT botnets. What\u2019s more, it showed exactly where things are heading next on the DDoS front.<\/p>\n The attack began around 10:55 AM on December 21, targeting several anycasted IPs on the Imperva Incapsula network.<\/p>\n It\u2019s hard to say why this attack didn\u2019t focus on a specific customer. Most likely, it was the result of the offender not being able to resolve the IP address of his actual victim, which was masked by Incapsula proxies. And so, lacking any better option, the offender turned his attention to the service that stood between him and his target.<\/p><\/blockquote>\n