Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps

SecurityWeek reports that the Aisuru botnet powered a record-breaking DDoS attack mitigated by Cloudflare, peaking at 29.7 Tbps and 14.1 Bpps in the third quarter of 2025, according to Cloudflare. The company described the incident as a UDP carpet-bombing attack averaging around 15,000 destination ports per second, with the attack’s attributes randomised to evade defenses.

The Aisuru botnet, dubbed a TurboMirai-class IoT botnet, has previously been linked to the largest ever DDoS attack on Microsoft Azure, which topped over 15.7 Tbps and 3.6 Bpps. Cloudflare noted that this year it mitigated nearly 3,000 Aisuru attacks, including more than 1,300 in Q3 2025.

The botnet powers attacks by compromising devices such as routers, CCTV cameras and DVRs and is offered under a DDoS-for-hire model, with residential proxy services also available for activities including spamming, scraping and credential stuffing.