Skip to main content

Cybersecurity report

Arelion’s 2026 DDoS report shows Aisuru botnet responsible for nearly one third of DDoS attacks

Arelion, July 15, 2026. Aisuru's continued operation after the March 2026 disruption: Arelion's 2026 DDoS threat landscape report finds a single botnet, Aisuru, driving approximately 33 percent of global DDoS attack traffic on Arelion's network about four months later..

Source type
Cybersecurity report
Published
July 15, 2026
Research grade
T2
Used in entries
1

Bibliographic record

Publisher
Arelion
Published
July 15, 2026
Source type
Cybersecurity report
Research grade
Source grade T2
Language
English
Official record
Not an official publication
Address
https://www.arelion.com/why-arelion/about-us/news/arelion-ddos-report-2026
What it supports
Aisuru's continued operation after the March 2026 disruption: Arelion's 2026 DDoS threat landscape report finds a single botnet, Aisuru, driving approximately 33 percent of global DDoS attack traffic on Arelion's network about four months later.
Dataset id
src_arelion_ddos_report_2026

Research notes

  • Dateline on the page reads 'Stockholm, July 15, 2026'. The page's JSON-LD headline belongs to a different, later Arelion item, so the date is taken from the release dateline and confirmed against the PR Newswire distribution timestamp of Jul 15, 2026, 08:00 ET.
  • Subhead: 'Surge in hypervolumetric attacks targeting gaming and cloud providers accompanies global rise of AI-driven botnets.'
  • The 33 percent figure is measured on Arelion's own network, not globally - the headline's 'nearly one third of DDoS attacks' should not be read as a worldwide share.
  • The same release is also carried at https://www.prnewswire.com/news-releases/arelions-2026-ddos-report-shows-aisuru-botnet-responsible-for-nearly-one-third-of-ddos-attacks-302821390.html; that is a wire copy of this document, not a separate source.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

Cited by

Later activity

1 citation

Cited for activity recorded after the takedown.

All sources