{
  "schemaVersion": "1.0",
  "dataset": "largest-ddos-attacks",
  "title": "Verified DDoS records, by metric",
  "description": "Peak bits/s, packets/s and requests/s records, each read from the reporting organisation’s own publication. Deliberately not a single ranked list: a terabits figure and a requests-per-second figure measure different things.",
  "lastUpdated": "2026-08-15",
  "license": "Free to reuse with attribution to ddosmitigationguide.com; source citations must be preserved.",
  "sources": [
    {
      "id": "cf-q4-2025",
      "title": "2025 Q4 DDoS threat report: a record-setting 31.4 Tbps attack",
      "publisher": "Cloudflare",
      "url": "https://blog.cloudflare.com/ddos-threat-report-2025-q4/",
      "publishedDate": "2026-02-05",
      "accessedDate": "2026-08-15"
    },
    {
      "id": "cf-73tbps",
      "title": "Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack",
      "publisher": "Cloudflare",
      "url": "https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/",
      "publishedDate": "2025-06-19",
      "accessedDate": "2026-08-15",
      "notes": "Also the source for the 6.5 Tbps and 4.8 billion pps figures it cites from the 2025 Q1 report."
    },
    {
      "id": "cf-rapid-reset",
      "title": "HTTP/2 Rapid Reset: deconstructing the record-breaking attack",
      "publisher": "Cloudflare",
      "url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
      "publishedDate": "2023-10-10",
      "accessedDate": "2026-08-15"
    },
    {
      "id": "google-398m",
      "title": "Google Cloud mitigated largest DDoS attack, peaking above 398 million rps",
      "publisher": "Google Cloud",
      "url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps",
      "accessedDate": "2026-08-15",
      "notes": "Also the source for the earlier 46 million rps record it compares against."
    }
  ],
  "changelog": [
    {
      "date": "2026-08-15",
      "note": "Initial release: seven records across three metrics, each read from the reporting organisation’s own post."
    }
  ],
  "rowCount": 7,
  "data": [
    {
      "metric": "peak bits/s",
      "value": "31.4 Tbps",
      "date": "2025-Q4",
      "reportedBy": "Cloudflare",
      "observationScope": "Cloudflare's own network and customer base only",
      "target": "not publicly identified",
      "vector": "not stated in the summary read for this entry",
      "attribution": "confirmed by reporter",
      "source": "https://blog.cloudflare.com/ddos-threat-report-2025-q4/"
    },
    {
      "metric": "peak bits/s",
      "value": "7.3 Tbps",
      "date": "2025-05",
      "reportedBy": "Cloudflare",
      "observationScope": "Cloudflare's own network and customer base only",
      "target": "a Cloudflare customer, not publicly identified",
      "vector": "multi-vector; described in the linked breakdown",
      "attribution": "confirmed by reporter",
      "source": "https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/"
    },
    {
      "metric": "peak bits/s",
      "value": "6.5 Tbps",
      "date": "2025-Q1",
      "reportedBy": "Cloudflare",
      "observationScope": "Cloudflare's own network and customer base only",
      "target": "not publicly identified",
      "vector": "not stated in the summary read for this entry",
      "attribution": "confirmed by reporter",
      "source": "https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/"
    },
    {
      "metric": "peak packets/s",
      "value": "4.8 billion pps",
      "date": "2025-Q1",
      "reportedBy": "Cloudflare",
      "observationScope": "Cloudflare's own network and customer base only",
      "target": "not publicly identified",
      "vector": "not stated in the summary read for this entry",
      "attribution": "confirmed by reporter",
      "source": "https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/"
    },
    {
      "metric": "peak requests/s",
      "value": "398 million rps",
      "date": "2023-08",
      "reportedBy": "Google Cloud",
      "observationScope": "Google Cloud's own infrastructure and customer base only",
      "target": "a Google Cloud customer, not publicly identified",
      "vector": "HTTP/2 Rapid Reset (CVE-2023-44487)",
      "attribution": "confirmed by reporter",
      "source": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps"
    },
    {
      "metric": "peak requests/s",
      "value": "201 million rps",
      "date": "2023-08",
      "reportedBy": "Cloudflare",
      "observationScope": "Cloudflare's own network and customer base only",
      "target": "a Cloudflare customer, not publicly identified",
      "vector": "HTTP/2 Rapid Reset (CVE-2023-44487)",
      "attribution": "confirmed by reporter",
      "source": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/"
    },
    {
      "metric": "peak requests/s",
      "value": "46 million rps",
      "date": "2022-06",
      "reportedBy": "Google Cloud",
      "observationScope": "Google Cloud's own infrastructure and customer base only",
      "target": "a Google Cloud customer, not publicly identified",
      "vector": "HTTPS flood",
      "attribution": "confirmed by reporter",
      "source": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps"
    }
  ]
}