Network-layer DDoS attack trends for Q4 2020
Jan 22, 2021Vivek Ganti, Omer Yoachimik

Summary
This post details network-layer DDoS attack trends observed in Q4 2020. It highlights an increase in large DDoS attacks (over 500Mbps and 50K pps), a 3-10x increase in protocol-based attacks, and a significant rise in attack durations exceeding 24 hours. Specific attack vectors like NetBIOS, ISAKMP, and SPSS saw substantial increases. The post also analyzes global DDoS activity, noting higher percentages of attack traffic relative to non-attack traffic in Mauritius, Romania, and Brunei, and discusses potential geopolitical or societal factors influencing these trends. A unique 'Beat' attack, inspired by acoustics, is also detailed.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack