Cloudflare Thwarts Record-Breaking 11.5 Tbps DDoS Attack Originating from Google Cloud
September 2, 2025
The rise in DDoS attacks is linked to the exploitation of cloud resources and IoT botnets, reflecting the increasing sophistication and scale of cyber threats.
Cloudflare has successfully mitigated the largest recorded DDoS attack, peaking at 11.5 Tbps, which lasted approximately 35 seconds and was primarily a UDP flood originating from Google Cloud infrastructure.
Over recent weeks, Cloudflare has defended against hundreds of massive DDoS attacks, with the largest reaching 11.5 Tbps and involving 4.8 billion packets per second, marking a significant escalation in attack scale.
These attacks include various types such as SYN floods, Mirai-generated attacks, and SSDP amplification, demonstrating the increasing sophistication of volumetric DDoS threats.
The escalation highlights the growing scale and frequency of DDoS threats facing internet infrastructure providers, with attacks becoming more complex and intense.
The recent attack originated from multiple sources, including compromised accounts on Google Cloud, IoT devices, and other cloud providers, illustrating the diverse and widespread nature of these threats.
The attack involved multiple vectors, with UDP floods accounting for 99.996% of the traffic, along with other methods like QOTD, Echo, NTP, Mirai, Portmap, and RIPv1.
This 11.5 Tbps attack is part of a series of record-breaking DDoS events, including a 7.3 Tbps attack in June and previous attacks reaching 3.8 Tbps in October 2024.
The June 7.3 Tbps attack generated 37.4 TB of data in just 45 seconds, equivalent to streaming thousands of HD movies or downloading millions of songs in that brief period.
The recent attack was a hyper-volumetric UDP flood, representing a significant escalation in attack scale, with over 5.1 billion packets per second.
Experts advise organizations to employ DDoS protection services from providers like Cloudflare, Akamai, Imperva, Radware, F5, and Fortinet to defend against such threats.
In the first half of 2025, Cloudflare mitigated 27.8 million DDoS attacks, surpassing the total for all of 2024, with network-layer attacks increasing by 509% year-over-year.
Cloudflare's real-time detection and mitigation efforts prevented significant service disruptions, demonstrating the resilience of modern internet defenses.
Summary based on 4 sources
Get a daily email with more Tech stories
Sources

ZDNET • Sep 3, 2025
Cloudflare stops new world's largest DDoS attack over Labor Day weekend
BleepingComputer • Sep 2, 2025
Cloudflare blocks largest recorded DDoS attack peaking at 11.5 Tbps
SecurityWeek • Sep 2, 2025
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack
Security Affairs • Sep 2, 2025
Cloudflare blocked a record 11.5 Tbps DDoS attack