Aisuru botnet breaks DDoS record with 31.4 Tbps attack

"Cloudflare named the campaign "The Night Before Christmas" because of the timing. The security service characterized it as an "unprecedented bombardment" on telecom companies and IT organizations. "The campaign targeted Cloudflare customers as well as Cloudflare's dashboard and infrastructure with hyper-volumetric HTTP DDoS attacks exceeding rates of 200 million requests per second (rps) alongside Layer 4 DDoS attacks peaking at 31.4 Terabits per second, making it the largest attack ever disclosed publicly," Cloudflare said."

"The Aisuru/Kimwolf botnet has set a new record with a DDoS attack of 31.4 Tbps and 200 million requests per second. The attack took place on December 19 as part of a campaign against telecom companies. The attack was detected and handled by Cloudflare. The Aisuru botnet previously held the DDoS record at 29.7 Tbps. Microsoft also attributed an attack of 15.72 Tbps to this botnet, which originated from 500,000 IP addresses. The latest attack far exceeded these previous figures."

"The power of the Aisuru botnet comes from compromised IoT devices and routers. But the attack sources in the "The Night Before Christmas" campaign were Android TVs, a notable shift. More than half of the attacks in the Aisuru campaign lasted between one and two minutes, with only 6 percent lasting longer. Most attacks (90 percent) peaked between 1-5 Tbps, and approximately 94 percent were in the range of 1-5 billion packets per second."

Aisuru/Kimwolf executed a record-breaking DDoS on December 19, reaching 31.4 Tbps and 200 million requests per second during a campaign against telecom companies. Cloudflare detected and mitigated the attacks automatically without triggering internal alerts and labeled the campaign "The Night Before Christmas." The botnet previously reached 29.7 Tbps, and Microsoft linked a prior 15.72 Tbps event to 500,000 IP addresses. The campaign primarily used Android TVs rather than typical IoT routers. More than half of attacks lasted one to two minutes, with most peaks between 1–5 Tbps and ~94% in the 1–5 billion pps range. Cloudflare reported a 121 percent rise in DDoS incidents in 2025, totaling 47.1 million and averaging 5,376 mitigations per hour.

Read at Techzine Global