Loading story…
A leading DDoS scrubbing provider in Western Europe was hit by a record-breaking distributed denial-of-service attack peaking at 1.5 billion packets per second. The attack, launched from over 11,000 networks using compromised IoT and MikroTik routers, was successfully mitigated by FastNetMon's automated detection and response platform. The incident highlights the escalating scale of DDoS threats and the urgent need for ISP-level intervention to prevent mass exploitation of consumer hardware.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
5 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourcetomshardware.com
Open sourcehackread.com
Open sourcesecurityonline.info
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cloudflare successfully mitigated the largest distributed denial-of-service (DDoS) attack ever recorded, which peaked at 22.2 terabits per second and 10.6 billion packets per second. The attack, which lasted approximately 40 seconds, was automatically detected and blocked by Cloudflare’s network without service disruption. This incident was twice the size of any previous DDoS attack seen on the internet, highlighting the increasing scale and frequency of such attacks. Cloudflare did not disclose the specific target of the attack but emphasized the importance of robust, automated DDoS mitigation capabilities for organizations. The event underscores the ongoing escalation in DDoS attack volumes and the need for advanced protection measures.
Jun 29, 2026
A major user-generated content platform was hit by a highly distributed **low-and-slow DDoS campaign** that generated **2.45 billion malicious requests in five hours**, peaking at **205,344 requests per second** and averaging about **136,000 requests per second**. According to DataDome’s Galileo threat research team, the operation relied on more than **1.2 million unique IP addresses** spread across **16,402 ASNs**, with no single network contributing more than 3% of the traffic. The attackers used a pulsed cadence and kept per-IP activity low—roughly one request every nine seconds on average—to stay below conventional rate-limiting thresholds and make simple IP blocking ineffective. The traffic was designed to resemble legitimate users by rotating IPs, user agents, and payloads and by forging HTTP headers, cookies, and TLS fingerprints. Researchers said the botnet also blended traffic through anonymization-friendly providers and major cloud infrastructure including **Cloudflare, AWS, and Google**, complicating filtering efforts. DataDome reported that it detected and blocked the attack in real time using **behavioral analysis**, server-side fingerprinting, and threat intelligence, finding inconsistencies between claimed browser identities and actual TLS handshake behavior. The incident underscores how modern DDoS operators are shifting from brute-force floods to distributed evasion techniques that require time-based behavioral detection rather than static volume limits.
Jun 29, 2026In September 2025, Qrator Labs thwarted a major Layer 7 DDoS attack targeting a government organization, leveraging a botnet of 5.76 million compromised IoT devices. The botnet, first observed in March with 1.33 million devices, rapidly expanded to nearly six million by September. The attack was executed in two waves and sourced traffic from multiple countries, with significant growth in India and Vietnam.
Jun 29, 2026