Full Breakdown
The Rising Threat of Massive DDoS Attacks: A Call for Collective Action
10/24/2025, 1:38:02 PM
Overview of the Recent DDoS Attacks
On October 9, 2023, Nokia Deepfield reported a staggering 33 terabits-per-second (Tbps) distributed denial-of-service (DDoS) attack targeting a gaming provider. This attack is part of a troubling trend, as the Aisuru botnet has been consistently breaking DDoS records, with a previous attack of 29.6 Tbps occurring just days earlier on October 6. Such attacks are not merely aimed at individual servers; they threaten the very infrastructure of the internet, overwhelming shared resources and causing widespread disruption.
The Impact on Internet Infrastructure
The scale of these attacks results in significant collateral damage. When a 33 Tbps attack is launched, it congests the internet's shared infrastructure, including peering links and internet exchange points (IXPs). This congestion leads to legitimate traffic being dropped, preventing users from accessing essential services. The burden of these attacks is disproportionately borne by other networks and users, as the attackers externalize their costs.
The Role of Compromised Devices
A significant portion of the devices used in these attacks is hosted within U.S. communications service provider (CSP) networks. The Aisuru botnet comprises approximately 300,000 compromised devices, many of which are capable of generating substantial attack traffic due to the high bandwidth of U.S. residential connections. As global broadband speeds increase, the geographical concentration of these compromised devices is expected to shift, making the problem more widespread.
Misaligned Incentives in DDoS Defense
Service providers face a dilemma as their customers' compromised devices generate outbound DDoS traffic, straining their infrastructure and degrading service quality. This situation exemplifies a misalignment of incentives: manufacturers of insecure Internet of Things (IoT) devices do not bear the costs of their vulnerabilities, while service providers struggle to manage the fallout from attacks they did not initiate.
The Need for a Distributed Defense Strategy
To effectively combat these massive DDoS attacks, experts argue for a shift from centralized to distributed defense strategies. Relying solely on a few mega-providers to absorb attack traffic is economically unsustainable and could create new vulnerabilities. Instead, service providers must monitor and control outbound attack traffic, while internet exchanges and transit providers should implement inline filtering to mitigate attacks before they spread.
Collaborative Solutions for a Secure Internet
Addressing the DDoS threat requires collective action across the internet ecosystem. Manufacturers must prioritize building secure devices, service providers need tools for detecting and mitigating attacks, and users should have access to devices that are secure by default. The recent 33 Tbps attack serves as a wake-up call, highlighting the inadequacy of current defenses and the urgent need for a coordinated response.
Conclusion: A Call to Action
The increasing frequency and scale of DDoS attacks signal a critical moment for internet security. Without a concerted effort to build a more resilient and secure internet infrastructure, the threat of 33 Tbps attacks may become the new norm. The internet commons cannot defend itself; it requires proactive measures and collaboration to ensure its sustainability and security.
