Overview

• The burst peaked at 11.5 terabits per second and about 5.1 billion packets per second, lasting roughly 35 seconds.
• Cloudflare said the traffic originated from a mix of multiple cloud providers and compromised IoT devices after revising an initial note that highlighted Google Cloud.
• Google Cloud stated its abuse defenses detected misuse and disputed claims that most of the traffic came from its platform.
• Cloudflare reported fully autonomous, globally distributed defenses neutralized the attack in real time without notable customer impact.
• The incident capped weeks of hyper‑volumetric activity, with Cloudflare citing sharp increases this year and promising a fuller technical report; the specific target was not disclosed.