2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaults
Feb 5, 2026Omer Yoachimik, Jorge Pacheco, Cloudforce One
Summary
This post details the evolution of DDoS attacks in 2025, highlighting a 121% surge and record-breaking attack volumes. It introduces the Aisuru-Kimwolf botnet and its 'The Night Before Christmas' campaign, which utilized hyper-volumetric HTTP DDoS attacks. The post also analyzes network-layer DDoS attack growth, specific attack vectors like SYN floods and Mirai-generated attacks, and the impact on various industries and geographic locations. It emphasizes Cloudflare's autonomous DDoS defense systems' ability to automatically detect and mitigate these massive assaults.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack