Cloudflare successfully mitigated a historic DDoS attack in May 2025, which peaked at 7.3 Tbps and delivered 37.4 TB of data in 45 seconds. This attack involved multiple vectors, originated from over 122,000 IP addresses worldwide, and targeted a hosting provider with sophisticated traffic scattering tactics. #Mirai #NTPAmplification
Keypoints
- The attack peaked at 7.3 terabits per second, setting a new record.
- Cloudflare used its ‘Magic Transit’ network to mitigate the attack effectively.
- Traffic was sourced from over 122,000 IPs across 161 countries, mainly in Brazil, Vietnam, and China.
- UDP floods constituted nearly all of the attack volume, with additional vectors exploiting legacy protocols.
- IoCs from the attack are shared in Cloudflare’s DDoS Threat Feed, aiding organizations in defense strategies.