Cloudflare mitigates record 29.7 Tbps DDoS attack by the AISURU botnet

Cloudflare blocked a record 29.7 Tbps DDoS attack from the AISURU botnet in a 69-second barrage, with the targeted organisation left undisclosed. According to Cloudflare’s Q3 2025 DDoS Threat Report, the AISURU network comprises 1–4 million devices and regularly launches hyper-volumetric attacks above 1 Tbps and 1 billion packets per second. The report notes that AISURU has hit telecoms, gaming, hosting and financial firms, and that parts of the botnet are sold as-for-hire services.

Since the start of 2025, Cloudflare has mitigated 2,867 AISURU attacks, including 1,304 hyper-volumetric attacks in Q3 such as the record 29.7 Tbps floods. DDoS attacks over 100 Mpps rose 189% QoQ in Q3, while those exceeding 1 Tbps surged 227%, with many incidents ending within 10 minutes but causing notable outages.

Indonesia remains the top global DDoS source for the year, and the report cautions that organisations relying on on-premise mitigation or scrubbing centres should review their defence strategies amid the evolving threat landscape.