Cloudflare Blocked 22.2 Terabits Per Second DDoS Attack
The massive traffic surge, nearly double the previous record, utilized a global botnet of compromised consumer devices.
Updated on Oct. 10, 2026 in Cybersecurity
Live Poll
Do you trust that your internet-connected home devices are secure from being hijacked for cyberattacks?
Cloudflare successfully mitigated a massive DDoS attack that reached 22.2 terabits per second and 10.6 billion packets per second. This automated defense effort halted the attack against a European network infrastructure provider after only 40 seconds.
Why it matters
The incident demonstrates a doubling of peak DDoS intensity, shifting the benchmark for infrastructure resilience against short-duration, high-volume traffic floods. Such attacks leverage compromised household devices to overwhelm network capacity in seconds.
The attack peaked at 22.2 terabits per second, nearly doubling the previous record of 11.5 terabits per second. It hit a volume of 10.6 billion packets per second, directed at a single IP address.
The players
Cloudflare
A global content delivery network and security firm that provides DDoS mitigation, web application firewalls, and edge computing infrastructure.
The details
The assault utilized a UDP (User Datagram Protocol) flood, which sends massive amounts of data packets to a target system to exhaust its bandwidth and processing resources. The attack originated from a global botnet—a network of compromised household devices infected with malware—that forced the targeted systems to process requests far beyond their capacity. Because the attack lasted only 40 seconds, it was designed to overwhelm automated security buffers before human intervention could occur.
Timeline
May 2025: Cloudflare blocked a 7.3 terabits per second DDoS attack.
September 2026: Cloudflare mitigated an 11.5 terabits per second DDoS attack.
October 10, 2026: Cloudflare mitigated the 22.2 terabits per second record attack.
The Tech Race
This attack far exceeds the 11.5 terabits per second threshold set by the industry in September 2026. It highlights an accelerating race where attackers continuously optimize botnet size to bypass the automated thresholds of major edge security providers.
The attack highlights the vulnerability of connected consumer hardware, as millions of infected devices are used as the foundation for these record-breaking traffic floods. Network operators must increasingly rely on automated, edge-based security solutions to maintain availability during these sub-minute surges.
The takeaway
This event confirms that peak DDoS volumes are currently on an aggressive growth trajectory, nearly doubling capacity requirements within a single month. Security teams should monitor future reports for trends in botnet scale, specifically the transition from 1 million to 4 million compromised host nodes.
Further reading
For broader context on how infrastructure defenses are evolving against global threats, see our coverage in Cybersecurity.
Source note: This article includes information reported by GCN.
Live Poll
Do you trust that your internet-connected home devices are secure from being hijacked for cyberattacks?
