Cloudflare Thwarts Record-Breaking 11.5 Tbps DDoS Attack Originating from Google Cloud

September 2, 2025
Cloudflare Thwarts Record-Breaking 11.5 Tbps DDoS Attack Originating from Google Cloud
  • The rise in DDoS attacks is linked to the exploitation of cloud resources and IoT botnets, reflecting the increasing sophistication and scale of cyber threats.

  • Cloudflare has successfully mitigated the largest recorded DDoS attack, peaking at 11.5 Tbps, which lasted approximately 35 seconds and was primarily a UDP flood originating from Google Cloud infrastructure.

  • Over recent weeks, Cloudflare has defended against hundreds of massive DDoS attacks, with the largest reaching 11.5 Tbps and involving 4.8 billion packets per second, marking a significant escalation in attack scale.

  • These attacks include various types such as SYN floods, Mirai-generated attacks, and SSDP amplification, demonstrating the increasing sophistication of volumetric DDoS threats.

  • The escalation highlights the growing scale and frequency of DDoS threats facing internet infrastructure providers, with attacks becoming more complex and intense.

  • The recent attack originated from multiple sources, including compromised accounts on Google Cloud, IoT devices, and other cloud providers, illustrating the diverse and widespread nature of these threats.

  • The attack involved multiple vectors, with UDP floods accounting for 99.996% of the traffic, along with other methods like QOTD, Echo, NTP, Mirai, Portmap, and RIPv1.

  • This 11.5 Tbps attack is part of a series of record-breaking DDoS events, including a 7.3 Tbps attack in June and previous attacks reaching 3.8 Tbps in October 2024.

  • The June 7.3 Tbps attack generated 37.4 TB of data in just 45 seconds, equivalent to streaming thousands of HD movies or downloading millions of songs in that brief period.

  • The recent attack was a hyper-volumetric UDP flood, representing a significant escalation in attack scale, with over 5.1 billion packets per second.

  • Experts advise organizations to employ DDoS protection services from providers like Cloudflare, Akamai, Imperva, Radware, F5, and Fortinet to defend against such threats.

  • In the first half of 2025, Cloudflare mitigated 27.8 million DDoS attacks, surpassing the total for all of 2024, with network-layer attacks increasing by 509% year-over-year.

  • Cloudflare's real-time detection and mitigation efforts prevented significant service disruptions, demonstrating the resilience of modern internet defenses.

Summary based on 4 sources


Get a daily email with more Tech stories

More Stories