Record-Breaking DDoS Attack Peaks at 22 Tbps and 10 Bpps

According to Cloudflare, security company, a record-breaking distributed denial-of-service (DDoS) attack peaked at 22.2 terabits per second and 10.6 billion packets per second, lasting only 40 seconds. The attack was aimed at a single IP address belonging to an unnamed European network infrastructure company. Cloudflare has yet to confirm the perpetrators but believes it may have been powered by the Aisuru botnet, which was linked earlier this year to a massive 6.3 Tbps attack on Brian Krebs’ website.

The attack’s 22 Tbps was traced to over 404,000 unique source IPs across more than 14 ASNs worldwide, and Cloudflare stated the source IPs were not spoofed. It was described as a UDP carpet bomb targeting an average of 31,000 destination ports per second, peaking at 47,000 ports on a single IP address. The report notes that Cloudflare’s first-half 2025 DDoS blocks already exceeded the total for 2024, underscoring the ongoing growth of hyper-volumetric attacks.