Cloudflare reports a new record in the DDoS arena. The company mitigated a DDoS attack that peaked at a record 22.2 Tbps and 10.6 billion packets per second. Just three weeks ago, the company reported mitigating a 11.5 Tbps DDoS attack, which at the time was the largest in history.
Experts report that the new record-setting DDoS lasted only 40 seconds, but it is the most powerful attack ever mitigated to date.
Although the attack was brief, the volume of traffic directed at the victim was enormous and roughly equivalent to simultaneously streaming one million 4K videos. In turn, the delivery of 10.6 billion packets per second can be compared to a situation where every person on Earth refreshes a web page 1.3 times per second.
Cloudflare representatives have disclosed virtually no details about the two recent DDoS records, but experts from Qianxin Xlabs have linked the 11.5 Tbps attack to the AISURU botnet.
According to researchers, AISURU has infected more than 300,000 devices worldwide, with a sharp surge in bots in April 2025 following the compromise of the Totolink router update server. It is also known that this botnet exploits vulnerabilities in IP cameras, DVRs/NVRs, Realtek chips, and routers from T-Mobile, Zyxel, D-Link, and Linksys.