"Unused" isn't quite the right term here. "Misassigned if they were to design their network today" or something would be more apt.
I had a networking job where we had a /16 legacy assignment nearly completely used but only one /24 "in use" according to what you could see from the internet. We looked at how the space was worth about a million dollars at the time but found it was not really worth it to try to move off anyways. Unfortunately, a lot of the devices smattered across that space were embedded devices where we had to pay bespoke vendors to come change the IP assignments or devices with IPs statically coded into home grown applications and every other sort of nightmare you could imagine. It'd have taken many bodies for a year + the associated costs + any of the operational fallout. At the following job we had roughly the same number of employees as Ford and our 10/8 was very tight as a unified network.
I'm not saying it would be as hard for Ford to try to find sub-blocks worth selling off or anything, just highlighting that waaaaay more of that IP space is being used than it seems from that picture and they likely do have a lot similar piece of shit equipment/sensors/building control and whatnot as well.
100%! I dearly missed how simple it was to correlate security & issue event tracing (even for guest users!) without NAT/PAT at the following job, what a treat that was.
Right as I was on the way out they finally started using 10/8 after merging with another large org that had a lot of branches (and a "normal" amount of public IPs for their size :)).
I really like how detailed the Government Directed Internet Outages are, when I saw that I wondered if that means the whole country was taken offline, or it's heavily filtered, or some regions within the countries are blocked or what, but if you click in a little, and use the timeline on the bottom, they give some interesting context. Cool.
The PaaS section seems odd to me too. AWS 63% followed by Vercel 7.9%. But Vercel runs on AWS I believe. Azure just 4.6% and no showing for GCP at all.
There's a particular narrow age range demo that did everything on Snapchat and still use it as their primary way to talk to friends and send messages without giving out a phone number.
X, people fled their long ago. Staggering amount of bot v not traffic.
Claude is coming up in 6th or 7th place and below in most countries including US, but in 2nd place in the world, how is it possible, what am i missing.
No i meant when you change country on top of cloudflare report, it comes up like 6th and 7th for most of countries i selected, but it comes to 2nd place suddenly when you select world.
Even when it identifies the specific project, it doesn't know C#. I took some scans of some notable CMS websites (so the programming language is provably correct).
The 10% share for ASP.NET among the top 5,000 domains shows that .NET (and therefore also C#) is a very serious player in building web apps and APIs and for good reason. .NET is a solid, fast, secure, and mature technology, and it's only getting better. All other significant frameworks were JS based, which is no surprise to anyone, as a lot of modern sites are built as SPAs.
ASP.NET could mean a bunch of programming languages and I'm assuming that a ASP.NET Server doesn't disclose that.
It's probably safe to guess mostly C#, but that requires a different metric.
Hah, AS16509 beats every other AS in bot traffic by a huge margin. I wonder if at least half of it is due to the major crypto exchanges hosted in AWS Tokyo behind Cloudflare.
It is quite surprising that over half of the traffic hitting Cloudflare are still from desktop clients. Based on my observation, most normies are mobile-only users now. Maybe it's user demographic?
Established markets are more desktop heavy, and newer markets are more mobile heavy. Maybe an interesting info to watch out for if you're an app dev.
Also,
> Internet Outages... 174 major Internet disruptions observed globally
So uh... no percentage of impact for each event? ;-)
There's no option to disable the transition too (not even when hovering the tabs, which is very common). At first I liked how they used a grid and transitioned every cell - it's very info dense - but without being able to pause it becomes useless.
I had to keep clicking and waiting for the animation to end to keep reading.
They can detect golang pretty reliably by fingerprinting the requests they handle (ie. TLS handshake) unless the app developer has taken some explicit measures to counter it.
I see Ford Motors are still flexing their almost entirely unused /8: https://radar.cloudflare.com/year-in-review/2025#ipv4-traffi...
Better to hang onto it - you never know when you'll suddenly need 16 million IPv4 addresses for uh, car stuff.
"Unused" isn't quite the right term here. "Misassigned if they were to design their network today" or something would be more apt.
I had a networking job where we had a /16 legacy assignment nearly completely used but only one /24 "in use" according to what you could see from the internet. We looked at how the space was worth about a million dollars at the time but found it was not really worth it to try to move off anyways. Unfortunately, a lot of the devices smattered across that space were embedded devices where we had to pay bespoke vendors to come change the IP assignments or devices with IPs statically coded into home grown applications and every other sort of nightmare you could imagine. It'd have taken many bodies for a year + the associated costs + any of the operational fallout. At the following job we had roughly the same number of employees as Ford and our 10/8 was very tight as a unified network.
I'm not saying it would be as hard for Ford to try to find sub-blocks worth selling off or anything, just highlighting that waaaaay more of that IP space is being used than it seems from that picture and they likely do have a lot similar piece of shit equipment/sensors/building control and whatnot as well.
wifi handing out public IPs? :)
100%! I dearly missed how simple it was to correlate security & issue event tracing (even for guest users!) without NAT/PAT at the following job, what a treat that was.
Right as I was on the way out they finally started using 10/8 after merging with another large org that had a lot of branches (and a "normal" amount of public IPs for their size :)).
I really like how detailed the Government Directed Internet Outages are, when I saw that I wondered if that means the whole country was taken offline, or it's heavily filtered, or some regions within the countries are blocked or what, but if you click in a little, and use the timeline on the bottom, they give some interesting context. Cool.
The PaaS section seems odd to me too. AWS 63% followed by Vercel 7.9%. But Vercel runs on AWS I believe. Azure just 4.6% and no showing for GCP at all.
Wow, the internet has grown 19%, which is surprising that it is still growing at that rate over the year.
2.2 billion people without internet, and far more without "broadband".
Keep in mind that electrification isn't everywhere, either.
Cool that they publish reasonably detailed info! Couple points that stood out to me
* Perplexity beating Gemini for volume?
* Globo #1 in news...never heard of it (Latin Am. news)
* Only 4.2% http is from bots? Seems low relative to people's complaints about it on blogs
* >50% post quantum encrypted (of TLS1.3 I think, not overall)
4.2% for bots? Wat. No way. In 2012 it was easily 50%. In the era of GenAI scraping it's surely only gone up.
>* Globo #1 in news...never heard of it (Latin Am. news)
I was surprised as well. And then Snapchat ( is that still a thing ? ) is higher than X ?
Shopee larger than Temu?
I assume a lot of these are Cloudflare customer's specific, or 1.1.1.1 DNS user specific.
Actually the entire study should be titled “Usage trends of Cloudflare users”. The internet is not Cloudflare.
There's a particular narrow age range demo that did everything on Snapchat and still use it as their primary way to talk to friends and send messages without giving out a phone number.
X, people fled their long ago. Staggering amount of bot v not traffic.
*there, oops!
Claude is coming up in 6th or 7th place and below in most countries including US, but in 2nd place in the world, how is it possible, what am i missing.
The data gathering method is 1.1.1.1 Cloudflare DNS resolver. It won't have the information about people who use any other DNS.
No i meant when you change country on top of cloudflare report, it comes up like 6th and 7th for most of countries i selected, but it comes to 2nd place suddenly when you select world.
Yeah, a more meaningful study next would be the market share of DNS resolvers.
Not every metric published here can be used, because the observers are from the PoV of Cloudflare and cloudflare alone.
Seems odd that C# does not figure in the top 10 programming languages, yet ASP.Net is the 4th most popular web framework with 10% share?
Even when it identifies the specific project, it doesn't know C#. I took some scans of some notable CMS websites (so the programming language is provably correct).
WordPress.org (PHP, correctly identified language and framework): https://radar.cloudflare.com/scan/88fcab24-5e27-4c77-8ace-94...
Orchard Core (C#, Modern .Net, correctly identified framework): https://radar.cloudflare.com/scan/88adbf69-c010-4074-a80f-03...
DotNetNuke (C#, .Net Framework, correctly identified framework): https://radar.cloudflare.com/scan/7889b8b9-4fed-43b6-8506-49...
Yeah, it doesn't detect C# for some reason and for some of our own sites, it even failed to detect that those were built with .NET (as we intended;)).
> it even failed to detect that those were built with .NET (as we intended;)
Yeah, I'm pretty embarrassed to like a Microsoft product too.
The 10% share for ASP.NET among the top 5,000 domains shows that .NET (and therefore also C#) is a very serious player in building web apps and APIs and for good reason. .NET is a solid, fast, secure, and mature technology, and it's only getting better. All other significant frameworks were JS based, which is no surprise to anyone, as a lot of modern sites are built as SPAs.
ASP.NET could mean a bunch of programming languages and I'm assuming that a ASP.NET Server doesn't disclose that. It's probably safe to guess mostly C#, but that requires a different metric.
Are they using headers for identification? If so, it could be skewed by orgs masking some/all. I’m quite curious myself.
Where is "Cloudflare Cock-Ups" in this chart? https://radar.cloudflare.com/year-in-review/2025#internet-ou...
this is a goldmine of insights, albeit with the platform bias.
i am not even through the entire report but already spotted some dark horses running the web without much fanfare.
Love the 99.8% malicious traffic on .christmas. I guess literally no one has registered a legitimate .christmas domain.
Likely because it is not on any client side blocklist (yet). Do not underestimate the power of Google Safe Browsing.
unfortunately the website is super laggy
Hah, AS16509 beats every other AS in bot traffic by a huge margin. I wonder if at least half of it is due to the major crypto exchanges hosted in AWS Tokyo behind Cloudflare.
Who cares, as long as the numbers go up, other numbers go up to, and everyone stays happy-ish.
Bold of them to not open with their 5-9's uptime.
89.9999%
It is quite surprising that over half of the traffic hitting Cloudflare are still from desktop clients. Based on my observation, most normies are mobile-only users now. Maybe it's user demographic?
Established markets are more desktop heavy, and newer markets are more mobile heavy. Maybe an interesting info to watch out for if you're an app dev.
Also,
> Internet Outages... 174 major Internet disruptions observed globally
So uh... no percentage of impact for each event? ;-)
At work people mostly use desktops/laptops, IME.
Verify you are human before you connect to my client, Cloudflare.
No uptime % chart?
How else will you sell the 99.99%?
vibecoded page? click the panel 3/5 and then panel 4/5. cell about .christmas tld persists. click on tile 5/5. three cells persist.
Human make mistakes and write buggy websites sometimes too, I've even done it myself once or twice.
I noticed that too.
There's no option to disable the transition too (not even when hovering the tabs, which is very common). At first I liked how they used a grid and transitioned every cell - it's very info dense - but without being able to pause it becomes useless.
I had to keep clicking and waiting for the animation to end to keep reading.
Design: 4/5 Usability: 1/5
Some of this data is obviously trash: https://radar.cloudflare.com/year-in-review/2025#api-client-...
There is no way that go is beating python for api client language popularity. Are they just measuring the fact that net/http has a default user agent?
They can detect golang pretty reliably by fingerprinting the requests they handle (ie. TLS handshake) unless the app developer has taken some explicit measures to counter it.