Cloudflare blocked yet another record-breaking distributed denial of service (DDoS) attack, its second in just one month.

The vendor said it blocked a hyper-volumetric DDoS attack – which are vastly larger than typical DDoS attacks – that peaked at 22.2 Tb/s and 10.6 billion packets per second (PPS).

According to Cloudflare, the attack was “twice as large as anything seen on the internet before.”

Just a few weeks prior, Cloudflare blocked an 11.5 Tb/s attack, comprising of 51 billion PPS. That surpassed the vendor’s previous record of 7.3 Tb/s, the equivalent of more than 9,000 high-definition movies being streamed at once.

Cloudflare claimed to have autonomously blocked this latest massive attack, which lasted for just 40 seconds.

The vendor did not disclose details as to the origin of this latest attack. Cloudflare attributed the 11.5 Tb/s one from earlier this month to a combination of IoT and cloud providers, with the deluge "mainly came from Google Cloud."

Cloudflare’s repeated handling of such attacks comes as DDoS attacks are becoming increasingly larger and more complex.

A Nexusguard report revealed that while the number of DDoS attacks only saw a marginal increase of 2%, the average attack size surged by 69%, with peak sizes reaching 962.2 Gb/s.

Cloudflare itself warned earlier this year that large-scale DDoS attacks were on the rise, noting a 44% increase in the second quarter of 2025.

While the firm is successfully fending off attacks from threat actors, Cloudflare became its own worst enemy in an unusual incident last week. A flawed software update for its API dashboard led the service to make continuous, redundant calls to its tenant service API, inadvertently causing Cloudflare to effectively DDoS itself.