Moobot vs. Gatebot: Cloudflare Automatically Blocks Botnet DDoS Attack Topping At 654 Gbps
Sep 16, 2020Omer Yoachimik

Summary
This post details the automatic detection and mitigation of a 654 Gbps UDP-based DDoS attack generated by the Moobot botnet, targeting a Magic Transit customer. It highlights the effectiveness of Cloudflare's Gatebot and dosd systems in mitigating volumetric attacks without human intervention, leveraging the global network capacity of over 42 Tbps and Anycast routing. The post also describes Moobot's self-propagation and synchronized attack capabilities, and the data collection methods used by Cloudflare's DDoS protection systems.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack