Massive 2.45B-Request DDoS Attack Used 1.2 Million IPs to Evade Rate Limits

A coordinated DDoS campaign flooded a major user-generated content platform with 2.45 billion requests in five hours (peaking at ~205k RPS, averaging ~136k RPS) by distributing traffic across ~1.2 million IPs and 16,402 ASNs to evade per-IP rate limits. Attackers used low-frequency request cadence, wave-patterns, IP rotation, and mixed privacy-oriented and major cloud infrastructure; defenders mitigated the campaign using behavioral server-side fingerprinting, session-sequence analysis, and threat intelligence.