Cloudflare data shows 29.7 Tbps record-breaker landed amid 87% surge in network-layer attacks

The internet has spent the past three months ducking for cover as the Aisuru botnet hurled record-shattering DDoS barrages from an army of up to 4 million infected machines.

Aisuru is a relative newcomer to the botnet scene. It was first spotted in 2024, but it has quickly grown into a Mirai-class monster built from hijacked routers, cameras, and other bargain-basement IoT gear. Despite its humble parts, it punches far above its weight, firing off multi-terabit, multibillion-packet-per-second DDoS blasts that make earlier Mirai variants look almost low-key by comparison.

In its latest quarterly report, Cloudflare reveals Aisuru is now thought to command between 1 million and 4 million infected devices worldwide. That global horde routinely pumped out DDoS attacks topping 1 terabit per second and 1 billion packets per second. On average, that amounted to roughly 14 hyper-volumetric attacks a day – a 54 percent quarter-on-quarter increase.

Aisuru's firepower isn ...