This report highlights a dramatic increase in DDoS attacks in 2025, with a record 47.1 million incidents, primarily driven by the Aisuru-Kimwolf botnet. The final quarter saw significant growth in both the frequency and intensity of attacks, particularly affecting the telecommunications sector. Hong Kong and the UK emerged as key targets, with Bangladesh leading as the top attack source.

Aisuru botnet domains have been dominating Cloudflare's rankings of top websites, leading to concerns about malicious activity. Cloudflare has begun redacting these domains from its list after realizing they were being used to manipulate DNS query volume. Experts criticize Cloudflare for failing to maintain the integrity of its rankings.