Big_Cake

晓雨杂记

也许我们会分别,但我们将永远不会忘记彼此
bilibili
github
twitter
zhihu
telegram
tg_channel

Experience of being DDoSed

Wow, is it finally my turn to be attacked?

TL;DR#

This DDoS attack did not cause any substantial losses and did not affect normal access to the blog.

Cloudflare records show a total of 3 million HTTP DDoS attack requests, with over a million requests being intercepted by custom firewall rules.

Process#

I didn't initially notice that the blog was under a DDoS attack. At that time, I was chatting with friends from all over on Telegram and QQ, and when I opened the Cloudflare dashboard, I casually glanced at the WAF events as usual, only to find many abnormal access records.

Taking another look, oh boy, HTTP DDoS. The Cloudflare dashboard was full of the word "Blocked".

Checking my email, oh boy, Cloudflare sent me 13 emails in one go, all about my website being under a DDoS attack.

image

Clearly, I don't have much traffic, why would someone attack me (confused black face.webp

I found it quite funny, catching me with a static site, and even attacking through Cloudflare.

image

image

This attack resulted in a total of 27 GB of traffic and about 4.8 million requests, but since my blog is hosted on Cloudflare Pages, it did not have any substantial impact, and the blog remained accessible.

This was the first time my blog encountered a DDoS attack, this has to be documented?

In any case, I hope you never have to worry about being attacked.

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.