3692249 - Strategies for Mitigating DDoS Attacks & Addressing Symptoms - SAP Commerce Cloud

DDoS (Distributed Denial of Service) attacks aim to disrupt the normal operation of a targeted server, service, or network by inundating it with traffic. Common symptoms indicating a possible DDoS attack include:

1. Slow Network Performance: The website or application experiences significantly slower performance, with pages taking longer to load or interactions becoming sluggish.

2. Intermittent Website Crashes: Frequent website outages or crashes due to the excessive load.

3. Increased Number of Requests: A noticeable spike in traffic from single or multiple IP addresses.

4. Suspicious or Anomalous Traffic Patterns: Traffic patterns that are unusual compared to normal activity, such as a surge from a geographic location that typically has low traffic.

5. Excessive Requests for a Particular Page or Endpoint: High volume requests directed at one specific resource or endpoint.

6. Overloaded Server Logs: Server logs filled with abnormal requests and error messages, overwhelming standard logging capacity.

7. Increased CPU and Memory Usage: Servers show unusually high CPU and RAM usage, even beyond typical peak levels.

8. Malicious Payloads in requests: Detection of unusually long payloads, which may indicate an attempt to overwhelm the system.

KBA , CEC-SCC-CLA-ENV-EMG , Environment Management , How To