Cloudflare successfully blocked a record-breaking 7.3 Tbps DDoS attack in May 2025, surpassing the previous peak by 12%.
The attack targeted a hosting provider using Cloudflare's DDoS protection solution, Magic Transit.
In January and February 2025, Cloudflare experienced over 13.5 million DDoS attacks, primarily impacting its infrastructure and protected hosting providers.
The 7.3 Tbps attack sent 37.4 TB of data in 45 seconds, equivalent to streaming 9,350 HD movies or downloading 9.35 million songs.
The attack focused on a single IP, hitting an average of 21,925 ports per second and peaking at 34,517, with mainly UDP floods.
It originated from 122,145 IPs across 5,433 networks in 161 countries, with a significant portion from Brazil and Vietnam.
Cloudflare's system autonomously blocked the attack without human intervention, managing the traffic effectively.
The previous record DDoS attack blocked by Cloudflare was 5.6 Tbps, occurring in October 2024.