Cloudflare defeats record 7.3 Tbps DDoS attack
In an unprecedented display of cyber resilience, Cloudflare successfully mitigated the largest Distributed Denial of Service (DDoS) attack ever recorded, peaking at a staggering 7.3 terabits per second (Tbps). This monumental defense, achieved autonomously by Cloudflare’s advanced systems, underscores the escalating sophistication of cyber threats and the critical need for robust, automated security infrastructures. The incident highlights Cloudflare’s pivotal role in safeguarding the internet’s critical infrastructure against increasingly potent and complex multi-vector attacks.
Points clés
- In mid-May 2025, Cloudflare blocked the largest DDoS attack ever recorded, reaching 7.3 Tbps.
- This attack was 12% larger than Cloudflare’s previous record and 1 Tbps greater than an attack reported by Brian Krebs at KrebsOnSecurity.
- The 7.3 Tbps attack delivered 37.4 terabytes of data in just 45 seconds.
- The attack was a multivector DDoS attack, with 99.996% of traffic categorized as UDP floods, and the remaining 0.004% including QOTD, Echo, NTP, Mirai UDP, Portmap, and RIPv1 reflection/amplification attacks.
- The attack originated from over 122,145 source IP addresses across 5,433 Autonomous Systems (AS) in 161 countries.
- Telefonica Brazil (AS27699) and Viettel Group (AS7552) were the largest contributors to the attack traffic, accounting for 10.5% and 9.8% respectively.
- Cloudflare provides a free DDoS Botnet Threat Feed for Service Providers, with over 600 organizations signed up.
- The attack was detected and mitigated autonomously across 477 Cloudflare data centers in 293 locations globally using anycast routing.
- Cloudflare’s defense systems, including the dosd heuristic engine and eBPF programs, automatically identified and mitigated the attack without human intervention.
À retenir
Well, isn’t that just peachy? While you were probably debating whether to binge-watch another season of that show or finally clean your apartment, Cloudflare was busy fending off an internet-shattering attack. Apparently, the bad guys are getting better at their jobs, launching attacks so massive they make your entire digital life look like a dial-up connection. So, next time your internet is working flawlessly, maybe spare a thought for the unsung heroes at Cloudflare, who are apparently too busy saving the world to even trigger an alert. It’s almost like they’re saying, “Don’t worry your pretty little heads, we’ve got this, even if it means handling the equivalent of 9,350 HD movies in under a minute.” Just another day at the office, right?
Sources
