The internet
Attack origins
Where the network-layer DDoS traffic Cloudflare sees comes from: the top 25 countries over the last day, by their share of all attack traffic.
What you see
- The top 25 origin countries, each with its share.
Where the data comes from
- Cloudflare RadarWhat Cloudflare sees across the share of the internet it carries.
A rolling last day, loaded when you open the map.
Good to know
- “Origin” is where Cloudflare saw the traffic come from. Attackers route through other countries, so it isn’t who is behind it.
- Pinned at the middle of each country.
Goes well with
Internet outagesInternet outages around the world from Cloudflare Radar, on a live map: which countries and networks lost connectivity, why, and for how long.
Malware and botnetsMalware download sites from abuse.ch URLhaus as they are reported, and active botnet command servers from Feodo Tracker, on a live map.