Q1 2025 nearly matches entire 2024 DDoS total: In Q1 2025, Cloudflare’s autonomous systems mitigated 20.5 million DDoS attacks – nearly matching the entire 2024 total of 21.3 million.
Hyper-volumetric attacks become the new normal: Roughly 700 attacks were hyper-volumetric in Q1, exceeding rates of 1 billion packets per second (pps) or 1 Tbps – averaging about 8 attacks daily.
Network-layer DDoS attacks skyrocket: Network-layer DDoS attacks saw the most dramatic surge with 16.8 million attacks, representing a 509% year-over-year increase and a 397% quarter-over-quarter increase.
Germany crowned new DDoS target capital: We saw a significant shift in the most attacked locations, with Germany rising to become the most attacked country, climbing four spots from last quarter. Turkey made a dramatic 11-spot jump to second place, while China slipped to third.
On the flip side, Hong Kong became the top source of DDoS attacks, followed by Indonesia and Argentina.
Betting on chaos: In the first quarter of 2025, the Gambling & Casinos industry leapt to the top position as the most targeted by DDoS attacks, climbing four spots. Telecommunications fell to second place, followed by Information Technology & Services.
The Airlines, Aviation & Aerospace industry had the biggest jump of all, moving up 40 spots making it the tenth most attacked industry.