Cloudflare mitigates largest-ever DDoS attack at 22.2 Tbps

Cloudflare has disclosed that it blocked a new record-breaking distributed denial-of-service attack, peaking at 22.2 Tbps and 10.6 billion packets per second. The organisation noted it has not shared further technical details about the attack. According to Security Affairs, the earlier peak in early September was 11.5 Tbps, part of a wave of attacks largely attributed to a UDP flood from Google Cloud.

In June, Cloudflare announced that during 2025 Q2 it automatically blocked the largest ever reported DDoS attacks, peaking at 7.3 Tbps and 4.8 billion packets per second. The 7.3 Tbps on that occasion delivered 37.4 TB of data in 45 seconds, equating to the rough equivalent of streaming thousands of HD movies or millions of songs in under a minute.

This latest record-breaking event underscores the scale of hyper-volumetric DDoS activity observed on the internet, according to Security Affairs, with Cloudflare’s mitigation capabilities tasked to handle such extremes.