Overview
- The hyper‑volumetric attack peaked at 11.5 Tbps and about 5.1 billion packets per second in a UDP flood lasting roughly 35 seconds over Labor Day weekend.
- Cloudflare initially highlighted Google Cloud as a major source before revising its assessment to a mix of IoT devices and multiple cloud providers, and Google Cloud said claims of majority attribution were not accurate.
- The company reports its globally distributed, fully autonomous mitigation detected and neutralized the traffic in real time with no service disruption.
- The incident capped several weeks of elevated DDoS activity, with Cloudflare reporting thousands of hyper‑volumetric events in Q2 2025 and continued spikes into late August.
- The new peak follows a 7.3 Tbps record disclosed earlier this year, and Cloudflare says a detailed technical report on the latest wave is forthcoming.