Cloudflare mitigates record-breaking 22.2 Tbps DDoS attack
Summary
Hide β²
Show βΌ
Cloudflare mitigated a volumetric DDoS attack that peaked at 22.2 Tbps and 10.6 Bpps. The attack lasted 40 seconds and was the largest ever mitigated by the company. The attack volume was equivalent to streaming one million 4K videos simultaneously. The attack targeted network resources, aiming to make services slow or unavailable to legitimate users. Cloudflare has not disclosed details about the attack's origin or the targeted entity. The attack's packet rate made it difficult for firewalls, routers, and load balancers to process requests. The AISURU botnet, which has infected over 300,000 devices worldwide, was previously linked to an 11.5 Tbps DDoS attack. The botnet exploits vulnerabilities in various IoT devices and routers.
Timeline
-
23.09.2025 18:58 π° 1 articles Β· β± 4h ago
Cloudflare mitigates 22.2 Tbps DDoS attack
Cloudflare mitigated a DDoS attack that peaked at 22.2 Tbps and 10.6 Bpps. The attack lasted 40 seconds and was the largest ever mitigated by the company. The attack volume was equivalent to streaming one million 4K videos simultaneously. The AISURU botnet, which has infected over 300,000 devices worldwide, was previously linked to an 11.5 Tbps DDoS attack. The botnet exploits vulnerabilities in various IoT devices and routers.
Show sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
Information Snippets
-
The attack peaked at 22.2 Tbps and 10.6 Bpps.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The attack lasted 40 seconds.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The attack volume was equivalent to streaming one million 4K videos simultaneously.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The packet rate of 10.6 Bpps can be translated to roughly 1.3 web page refreshes per second from every person on the planet.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The AISURU botnet has infected over 300,000 devices worldwide.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The AISURU botnet targets vulnerabilities in IP cameras, DVRs/NVRs, Realtek chips, and routers from T-Mobile, Zyxel, D-Link, and Linksys.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58
-
The AISURU botnet exploited a compromise in a Totolink router firmware update server in April 2025.
First reported: 23.09.2025 18:58π° 1 source, 1 articleShow sources
- Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack β www.bleepingcomputer.com β 23.09.2025 18:58