Targeted by 20.5 million DDoS attacks, up 358% year-over-year: Cloudflare’s 2025 Q1 DDoS Threat Report

Cloudflare’s Q1 2025 DDoS Threat Report highlights a dramatic surge in activity, blocking 20.5M attacks (16.8M network-layer), including 700+ hyper‑volumetric events and record surges peaking at 4.8 Bpps and 6.5 Tbps in an April campaign; leading vectors included SYN and DNS floods, Mirai-driven botnets, and large spikes in CLDAP and ESP reflection, while most attacks remained small and short-lived. The report maps the most attacked locations and industries, identifies major source ASNs (e.g., Hetzner, OVH, DigitalOcean), and underscores the need for automated, always-on mitigation at global scale.