Cloudflare: Indonesia becomes top source of internet traffic attacks

Indonesia was the top source of distributed denial-of-service (DDoS) attacks worldwide in Q3 2025, according to a new report from Cloudflare.

Seven of the ten largest sources of DDoS attacks came from Asia, with Indonesia leading for the past year.

Cloudflare data showed that since Q3 2021, the percentage of HTTP DDoS requests from Indonesia jumped 31,900%.

Other leading countries included Thailand, Bangladesh, Ecuador, Russia, Vietnam, India, Hong Kong, Singapore, and Ukraine.

DDoS attacks targeted sectors such as rare earth minerals, mining, metals, automotive, and cybersecurity, with automotive moving up 62 ranks to become the sixth most-attacked industry globally in one quarter.

Cybersecurity firms also reported a rise in attacks, climbing 17 places to rank 13th.

The most-attacked sectors in Q3 2025 were IT and services, telecommunications, and gambling.

🔗 Source: Bisnis Tekno

🧠 Food for thought

Implications, context, and why it matters.

Indonesia remains top DDoS source amid Aisuru-driven hyper-volumetric attacks

Cloudflare tracked a 31,900% jump since Q3 2021 in Hypertext Transfer Protocol (HTTP) distributed denial-of-service (DDoS) requests from Indonesia 1. In Q3 2025 the Aisuru botnet (a network of malware-infected devices) reached an estimated 1 to 4 million infected hosts worldwide, and Indonesia held the top source spot for a full year since 2024 Q3 1.
Aisuru set a record 29.7 terabits per second (Tbps) User Datagram Protocol (UDP) carpet-bombing attack, a technique that sprays traffic across many destinations and ports to evade per-target defenses, hitting an average of 15,000 destination ports per second with randomized packet attributes 1.

CDN and API gateway vendors can win AI security deals with the 50 companies on Forbes’ 2025 AI 50 list through inference endpoint protection

Cloudflare logged month-over-month spikes up to 347% in HTTP DDoS traffic hitting generative AI firms in September 2025 1. That surge increases demand for protection of inference endpoints (the public APIs that serve model responses) 1. Forbes says Anysphere’s Cursor (an AI code editor and assistant) booked about $100 million in contracts in roughly a year within an AI coding tools market that could hit $30 billion by 2032 1,2. Cloud security providers can focus on stealth AI startups like Thinking Machine Labs, which Forbes says plans to raise $1 billion at around a $9 billion valuation, so they will need DDoS protection before launch 2.