By 
Cloudflare successfully mitigated a record-breaking distributed denial-of-service (DDoS) attack that peaked at 5.6 terabits per second, the largest recorded to date. The attack, launched on October 29, 2024, targeted an internet service provider (ISP) in Eastern Asia using a Mirai-based botnet comprising 13,000 compromised devices.
The UDP-based assault lasted 80 seconds but caused no service disruption or alerts due to Cloudflare’s autonomous detection and mitigation systems. This attack surpassed the previous record of a 3.8 Tbps DDoS attack reported earlier in October 2024.
Cloudflare observed a sharp rise in hyper-volumetric DDoS attacks in 2024, especially during the fourth quarter. Key trends included:
- Attack Volume Growth: Quarter-over-quarter increases of 1,885%, with several attacks exceeding 1 terabit per second (Tbps).
- Packet Intensity: Attacks exceeding 100 million packets per second (pps) grew by 175%, with 16% surpassing 1 billion pps.
While hyper-volumetric HTTP DDoS attacks accounted for only 3% of the total, 63% of attacks involved smaller volumes under 50,000 requests per second (rps). Similarly, 93% of network-layer DDoS attacks stayed below 500 Mbps, with 87% sending fewer than 50,000 pps.
"Blitz" Attacks
Short-duration DDoS attacks are becoming the norm, making it nearly impossible for human intervention to prevent damage.
- Attack Duration: 72% of HTTP and 91% of network-layer DDoS attacks ended within 10 minutes. Only 22% of HTTP and 2% of network-layer attacks lasted more than an hour.
- Strategic Timing: Attackers often launch these "blitz" attacks during peak times, like holidays or sales events, to maximize impact.
Ransom DDoS attacks also surged, with a 78% quarter-over-quarter increase and a 25% year-over-year rise, peaking during Q4 and the Christmas holiday season.
In Q4 2024, the most attacked regions were China, the Philippines, Taiwan, Hong Kong, and Germany. Industries frequently targeted included:
- Telecommunications and service providers
- Internet services
- Marketing and advertising sectors
Cloudflare emphasized the importance of automated, always-on DDoS protection to counter the increasing frequency and sophistication of these attacks. "The short duration of attacks highlights the need for in-line, automated mitigation solutions to respond in real-time," the company said.
Cloudflare's proactive measures demonstrate the growing need for robust defenses as cyberattacks evolve in complexity and scale.
