• Welcome to the 24th edition of Cloudflareâs Quarterly DDoS Threat Report. • In this report, Cloudforce One offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. • In this edition, we focus on the fourth quarter of 2025, as well as share overall 2025 data. • The fourth quarter of 2025 was characterized by an unprecedented bombardment launched by the Aisuru-Kimwolf botnet, dubbed âThe Night Before Christmas" DDoS attack campaign. • The campaign targeted Cloudflare customers as well as Cloudflareâs dashboard and infrastructure with hyper-volumetric HTTP DDoS attacks exceeding rates of 200 million requests per second (rps), just weeks after a record-breaking 31.4 Terabits per second (Tbps) attack. • DDoS attacks surged by 121% in 2025, reaching an average of 5,376 attacks automatically mitigated every hour.

Article Summaries:

  • Cloudflare’s 24th Quarterly DDoS Threat Report highlights a record‑setting 31.4 Tbps attack in 2025, followed by a massive “Night Before Christmas” campaign from the Aisuru‑Kimwolf botnet that pushed HTTP DDoS rates beyond 200 million requests per second. Total attacks in 2025 more than doubled to 47.1 million, a 121 % rise from 2024, with network‑layer attacks tripling to 34.4 million. Hong Kong and the UK climbed to the second and sixth most‑attacked countries, respectively. Telcos were the most targeted industry, and Cloudflare mitigated an average of 5,376 attacks per hour, underscoring the growing scale and sophistication of DDoS threats.

Sources: