October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Cloudflare

The 2.5 Tbps Wynncraft DDoS Attack Was Cloudflare’s Largest by Bitrate in 2022

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cloudflare reported a 2.5-terabit-per-second (Tbps) DDoS attack against the Minecraft server Wynncraft in Q3 2022. Cloudflare called it the largest attack it had seen “from the bitrate perspective” at that time. The company said the Mirai botnet variant used both UDP and TCP floods, and that Cloudflare filtered the traffic without Wynncraft noticing. That was a historical, metric-specific record—not a claim that the incident remains Cloudflare’s largest attack today.

What happened to Wynncraft?

Cloudflare’s Q3 2022 DDoS report described several attacks exceeding 1 Tbps. It identified the largest of that quarter as a 2.5 Tbps attack against Wynncraft, a public Minecraft server. Cloudflare attributed the traffic to a Mirai botnet variant and described it as multi-vector, combining UDP and TCP floods.

Cloudflare said its systems automatically detected and mitigated the attack. Its report said Wynncraft “didn’t even notice the attack, since Cloudflare filtered it out for them.” That is Cloudflare’s account of its customer’s experience; the available reporting does not include an independent customer statement or third-party measurement.

Was it really Cloudflare’s largest DDoS attack?

Only with the original qualification. Cloudflare wrote that the event was its largest attack “from the bitrate perspective” when the Q3 2022 report was published. Bitrate measures the volume of traffic transferred each second, expressed here in terabits per second.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sonicwall 01-SSC-6942 TZ105 UTM Secure Firewall
  • Firewall Protection: Remote Access Authentication, Content Filtering, Malware Protection, URL Filtering, Web Content Filtering, Deep Inspection Firewall, Reassembly-free Deep Packet Inspection, and
  • Firewall Protection (continued): Gateway Antivirus, Anti-spyware, Denial of Service (DoS), Distributed Denial of Service (DDoS), Egress Filtering, Cookies Blocking, Dead Peer Detection
  • Encryption Standard: DES, 3DES, AES (142-bit), AES (128-bit), AES (256-bit), SHA-1, MD5 Intrusion Prevention, NAT, PAT, IPSec NAT Traversal, 5 Network (RJ-45) Ports, Fast Ethernet, 10/100Base-TX
  • Virtualization: 8000 x Maximum UTM/DPI Connections, 8000 x Maximum Connections, 1000 x New Connections/Sec, 1 x SonicPoints Supported, 5 x Site-to-Site VPN Tunnels, 5 x VLANS
  • USB Port, AC Adapter (Power Source) 12 V DC, Management Port, 32 MB Flash Memory, 256 MB Standard Memory, Secure Digital (SD) Card , Height: 1.4", Width: 7.5", Depth: 5.6

The unqualified present-tense claim is now outdated. Cloudflare’s current educational material identifies a 29.7 Tbps attack in Q3 2025 as the largest DDoS attack ever reported. The Wynncraft event remains notable as Cloudflare’s reported 2022 bitrate record, not as its all-time record today.

How big is 2.5 Tbps?

A 2.5 Tbps peak means approximately 2.5 trillion bits of network traffic per second at the attack’s maximum. It describes traffic volume, not the number of packets, application requests, or the attack’s duration. Cloudflare’s Wynncraft account does not state how long this particular attack lasted.

Rank #2
FortiGate-120G Network Security Appliance Plus 1 Year FortiGuard Unified Threat Protection (UTP) and FortiCare Premium (FG-120G-BDL-950-12)
  • Comprehensive Hardware and Service Package: Includes FortiGate-120G appliance with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection (UTP).
  • Unified Threat Protection (UTP) Bundle: Protects against sophisticated web and DNS-based threats with advanced filtering and security features including ATP, DNS filtering, URL filtering, video filtering, and anti-botnet services.
  • Enhanced Web Security: Offers high-level web security suitable for varied enterprise environments needing strong protective measures against online threats.
  • Extended Support and Service: FortiCare Premium provides dependable technical support ensuring seamless operation and efficient issue resolution.
  • Optimal for Diverse Deployment: Ideal for organizations with complex network environments looking for comprehensive security solutions.
Measure What it counts Relevant Cloudflare example
Bitrate Bits transferred per second 2.5 Tbps Wynncraft attack in Q3 2022
Packet rate Network packets per second Not stated for the Wynncraft incident
Request rate Application requests per second 201 million requests per second in Cloudflare’s Q3 2023 HTTP DDoS reporting
Duration How long the traffic continued Not stated for the Wynncraft incident

These measurements cannot be ranked against one another as though they were the same statistic. For example, Cloudflare separately reported a 1.9 Tbps network-layer attack in Q4 2023 and a 201-million-request-per-second HTTP attack in Q3 2023. The latter is a request-rate record, not a larger version of the Wynncraft bitrate event.

Did the Minecraft server go offline?

Cloudflare said no: its filtering prevented the attack from being noticed by Wynncraft. The statement establishes what Cloudflare reported about the mitigation outcome, but it does not independently verify uptime, player experience, or the attack’s duration. No attacker identity or motive was established in the cited incident account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.

What role did Mirai play?

Mirai is a botnet family associated with compromised Internet of Things devices such as routers and cameras. Cloudflare’s retrospective describes Mirai’s use in DDoS attacks, including earlier attacks against game-related services, and explains that variants and operators evolved over time.

A 2017 Cloudflare Research bibliographic record for a USENIX Security study reports that the original Mirai campaign peaked at about 600,000 infected devices. That historical infection count is context about the botnet family, not a measurement of the Wynncraft attack and not proof that the same operators or infrastructure were involved.

Rank #4
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.

How did Cloudflare mitigate the attack?

The Q3 2022 report says Cloudflare automatically detected and mitigated multiple attacks above 1 Tbps and filtered the Wynncraft traffic. It does not publish a complete step-by-step configuration for this incident, so the defensible conclusion is limited to automated detection and filtering by Cloudflare’s service. Server operators should not assume that every Minecraft host, network, or unprotected home connection could absorb comparable traffic.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the incident demonstrates for Minecraft operators

  • Separate network and application threats. UDP and TCP floods target network capacity and protocol handling; an HTTP request flood is measured differently and may require different controls.
  • Use a mitigation layer before the origin. The reported outcome depended on Cloudflare filtering the traffic rather than the game server handling all 2.5 Tbps itself.
  • Check the metric before comparing headlines. Ask whether a claim is measured in bitrate, packets per second, requests per second, duration, or another dimension.
  • Keep attribution precise. “Wynncraft did not notice” is Cloudflare’s reported customer outcome, not an independently audited guarantee.

Bottom line on the “largest” claim

The accurate formulation is: Cloudflare reported a 2.5 Tbps Mirai-variant attack against Wynncraft as its largest observed DDoS by bitrate in Q3 2022. Cloudflare said automated filtering kept the incident from being noticed by Wynncraft. Later Cloudflare reporting, including a 29.7 Tbps event in Q3 2025, means the attack is no longer the company’s overall largest reported DDoS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 3
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$68.99
Bestseller No. 4
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$89.99
Bestseller No. 5
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$149.99
Best Value
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Read next

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.