Mantis - the most powerful botnet to date
Jul 14, 2022Omer Yoachimik
Summary
This post details the analysis and mitigation of the 'Mantis' botnet, responsible for the largest HTTPS DDoS attacks observed. It highlights Mantis's evolution from the Meris botnet, its use of hijacked VMs and powerful servers, and its ability to launch 26 million requests per second attacks with an average of 5,200 HTTPS RPS per bot. The post also provides insights into the industries and geographic locations targeted by Mantis and reiterates Cloudflare's automated DDoS protection and WAF/CDN capabilities for mitigation.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack