Massive DDoS Attack: 2.4 Billion Requests From 1.2 Million IPs
Posted: Fri May 08, 2026 1:51 am
A new large-scale distributed denial-of-service (DDoS) attack has attracted attention across the cybersecurity community after attackers generated around 2.45 billion malicious HTTP requests over a period of approximately five hours.
According to multiple reports, the attack used more than 1.2 million IP addresses distributed across over 16,000 autonomous systems (ASNs), making it one of the most fragmented HTTP DDoS campaigns observed so far.
Unlike older brute-force DDoS attacks that generate huge traffic from a smaller number of systems, this campaign used a so-called "low and slow" strategy.
How did the attack work?
Instead of flooding targets from a few aggressive IP addresses, the attackers distributed requests across an enormous number of systems.
Researchers reported:
According to multiple reports, the attack used more than 1.2 million IP addresses distributed across over 16,000 autonomous systems (ASNs), making it one of the most fragmented HTTP DDoS campaigns observed so far.
Unlike older brute-force DDoS attacks that generate huge traffic from a smaller number of systems, this campaign used a so-called "low and slow" strategy.
How did the attack work?
Instead of flooding targets from a few aggressive IP addresses, the attackers distributed requests across an enormous number of systems.
Researchers reported:
- 2.45 billion requests
- More than 1.2 million IPs
- Around 205,000 requests per second peak
- Traffic from over 16,400 ASNs
- Requests spread over approximately 5 hours