Limits RegistryPUBLIC RECORD
Limits RegistryCloudflare reported in its 2025 Q4 DDoS threat report that it automatically mitigated a 31.4 Tbps attack lasting about 35 seconds, launched by the Aisuru-Kimwolf botnet of an estimated 1-4 million infected devices, mostly Android TVs. Record sizes grew more than 700% during 2025, so this figure is likely to be surpassed.
The question, scope, and sources behind this Registry record.
Cloudflare reported in its 2025 Q4 DDoS threat report that it automatically mitigated a 31.4 Tbps attack lasting about 35 seconds, launched by the Aisuru-Kimwolf botnet of an estimated 1-4 million infected devices, mostly Android TVs. Record sizes grew more than 700% during 2025, so this figure is likely to be surpassed.
The highest peak traffic rate of a distributed denial-of-service attack publicly disclosed by a mitigation provider.
Change a parameter to stress-test whether a proposed result is still inside the published specification. This is an audit aid, not a proof checker.
This record has no editable parameters. Read the formal question and assumptions before challenging it.
Current frontiers derived from accepted Claims.
An observed or demonstrated result; no opposing bound is implied.
The frontier is not sacred
Most progress starts with a disagreement that survives contact with evidence. If you can push the known lower bound up or pull the upper bound down, show us the work.
≥ when you have shown that at least this value is achievable.≤ when you have shown that anything above this value is impossible.No vibes. State the value, define the scope, and link the paper, proof, code, or reproduction that lets another person check it. Editors review every challenge before the public record changes.
Challenge this recordAssertions tied to evidence, attribution, and review.
The frontier as it changed over time.
Only accepted Claims matching the current specification contribute to the displayed bounds. Strict inequalities remain open; contradictory Claims require editorial review.
1 accepted Claim, with 1 linked evidence records.
Permanent ID limitsregistry.com/limits/LR-LARGEST-DDOS-ATTACK-MITIGATED
No active verified bounties are linked to this Limit.
View verified bounty tracker ↗No accepted machine-checked reproductions are recorded for this Limit.
Limits Registry. LR-LARGEST-DDOS-ATTACK-MITIGATED. Largest publicly disclosed DDoS attack. 2026.