Cloudflare saw the number of DDoS attacks double in 2025 and faced a record attack of 31.4 Tbps in the fourth quarter.
Cloudflare has published its report on global DDoS attacks in the fourth quarter of 2025, based on data from the Cloudflare network. This shows that the total number of attacks in 2025 reached 47.1 million. That’s a doubling compared to 2024. Network-level attacks in particular increased sharply, from 11.4 million in 2024 to 34.4 million in 2025. This increase fits into a broader trend: between 2023 and 2025, the number of DDoS attacks worldwide grew by 236 percent.
‘The Night Before Christmas’
The fourth quarter was characterized by a notable attack from the so-called Aisuru-Kimwolf botnet. This attack was named ‘The Night Before Christmas’ and exceeded peaks of 200 million HTTP requests per second. Shortly before, a record DDoS attack of 31.4 Terabits per second was already registered. According to Cloudflare, Android TVs infected with the botnet were involved in this campaign.
New targets
Hong Kong rose from 14th place to 2nd place in the fourth quarter on the list of most affected locations. The United Kingdom climbed 36 places and became the sixth most attacked region. Telecom companies were the primary targets of DDoS campaigns worldwide.
read also
Cloudflare: Internet traffic increases by 19 percent in 2025, DDoS attacks break records
Cloudflare also noticed a large coordinated campaign at the beginning of 2025. For 18 days, global internet infrastructure came under fire. In total, the company detected 13.5 million attacks at this level. Of these, 6.9 million were directed at customers of the Magic Transit service, and 6.6 million directly at Cloudflare’s own infrastructure.