Cloudflare says DDoS attacks have multiplied to 1.7x last year's count and at points there's been about one attempt every second

Cloudflare outage
(Image credit: Cloudflare)

If you thought the AI industry deals with big numbers—millions of tokens, giga-zigga-exa-flexa-FLOPs (a very real metric, I tell you)—wait until you hear about the internet. That thing has been taking an absolute beating over the last year. We've seen very visible effects of this with various memorable outages, but now we've also got some numbers to put to it, in the form of "hyper-volumetric" DDoS attacks.

Giant content delivery network (CDN) Cloudflare has released some somewhat troubling stats and info regarding the past year of distributed denial of service (DDoS) attacks. These are essentially attacks that attempt to flood a target service with packets of data to overload and overwhelm it and prevent it from doing the work it's actually meant to be doing, such as providing an internet connection to customers or displaying webpages.

A Cloudflare chart showing DDoS attack statistics for 2023, 2024, and 2025.

(Image credit: Cloudflare)

In the weeks leading up to September there was a DDoS attack that attempted to flood its target with 11.5 Tbps of data. Then, in late September, there was one that topped this with an attempt to flood its target with 22.2 Tbps of data, which equated to 10.6 billion packets of data per second. And then there was one in early October that saw a new record 29.6 Tbps flung at its target. These attacks each lasted less than a minute.

Those small timeframes are a real problem if you don't have automated defenses in place: "most attacks, 71% of HTTP DDoS and 89% of network-layer, end in under 10 minutes. That's too fast for any human or on-demand service to react. A short attack may only last a few seconds, but the disruption it causes can be severe, and recovery takes far longer."

We've seen how long it can take for simple mistakes to be cleaned up and service to be restored. Cloudflare's recent outage, for instance, was caused by a double-sized file propagating throughout the network. This likely happened quite quickly, but it took hours for service to be restored to full, normal functionality.

To simplify probably far too much, DDoS attacks are generally defended by figuring out which packets of data coming in are illegitimate and then simply not processing them. Cloudflare's defenses seem to have done a good job at this, given these big attacks were defended.

CHONGQING, CHINA - JULY 29: In this photo illustration, a person holds a smartphone displaying the logo of Cloudflare Inc. (NYSE: NET), an American web infrastructure and website security company, with the company's cloud logo visible in the background, on July 29, 2025 in Chongqing, China. (Photo illustration by Cheng Xin/Getty Images)

(Image credit: Cheng Xin via Getty Images)

But as Cloudflare's quarterly and yearly stats show, the number and the scale of these attacks seems to be exponentially increasing. According to Krebs on Security, linked previously, the Aisuru botnet responsible for the latest record-breaking DDoS attack apparently caused widespread internet disruption in the US simply due to attempted DDoSing, that's all without the attack succeeding.

A botnet, if you weren't aware, is like a hivemind of connected computers that are usually connected together unbeknownst to their users. All the systems can, at the behest of the attacker(s) in control of the botnet, be prompted to dish out some packets of data that, when combined with all the packets from other computers in the secret network, makes for a giant mass. A mass that barrages a target with, say, 29.6 terabytes per second of data. In "distributed" fashion, ergo, "distributed denial of service."

In other words, lovely stuff to help us sleep at night. It does make me hope my PC isn't some kind of sleeper agent. I'll keep my side-eye firmly planted on its suspiciously unassuming chassis, just in case.

Secretlab Titan Evo gaming chair in Royal colouring, on a white background
Best PC gaming kit 2025

1. Best gaming chair: Secretlab Titan Evo

2. Best gaming desk: Secretlab Magnus Pro XL

3. Best gaming headset: Razer BlackShark V3

4. Best gaming keyboard: Asus ROG Strix Scope II 96 Wireless

5. Best gaming mouse: Razer DeathAdder V4 Pro

6. Best PC controller: GameSir G7 Pro

7. Best steering wheel: Logitech G Pro Racing Wheel

8. Best microphone: Shure MV6 USB Gaming Microphone

9. Best webcam: Elgato Facecam MK.2


👉Check out our list of guides👈

TOPICS
Jacob Fox
Hardware Writer

Jacob got his hands on a gaming PC for the first time when he was about 12 years old. He swiftly realised the local PC repair store had ripped him off with his build and vowed never to let another soul build his rig again. With this vow, Jacob the hardware junkie was born. Since then, Jacob's led a double-life as part-hardware geek, part-philosophy nerd, first working as a Hardware Writer for PCGamesN in 2020, then working towards a PhD in Philosophy for a few years while freelancing on the side for sites such as TechRadar, Pocket-lint, and yours truly, PC Gamer. Eventually, he gave up the ruthless mercenary life to join the world's #1 PC Gaming site full-time. It's definitely not an ego thing, he assures us.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.