Key Takeaways – Q1 2025 DDoS Trends

  • Q1 2025 nearly matches entire 2024 DDoS total: In Q1 2025, Cloudflare’s autonomous systems mitigated 20.5 million DDoS attacks – nearly matching the entire 2024 total of 21.3 million. 
  • Hyper-volumetric attacks become the new normal: Roughly 700 attacks were hyper-volumetric in Q1, exceeding rates of 1 billion packets per second (pps) or 1 Tbps – averaging about 8 attacks daily. 
  • Network-layer DDoS attacks skyrocket: Network-layer DDoS attacks saw the most dramatic surge with 16.8 million attacks, representing a 509% year-over-year increase and a 397% quarter-over-quarter increase.
  • Germany crowned new DDoS target capital: We saw a significant shift in the most attacked locations, with Germany rising to become the most attacked country, climbing four spots from last quarter. Turkey made a dramatic 11-spot jump to second place, while China slipped to third.
    • On the flip side, Hong Kong became the top source of DDoS attacks, followed by Indonesia and Argentina. 
  • Betting on chaos: In the first quarter of 2025, the Gambling & Casinos industry leapt to the top position as the most targeted by DDoS attacks, climbing four spots. Telecommunications fell to second place, followed by Information Technology & Services.
    • The Airlines, Aviation & Aerospace industry had the biggest jump of all, moving up 40 spots making it the tenth most attacked industry.

Share on