Extending Cloudflare Radar’s security insights with new DDoS, leaked credentials, and bots datasets
Mar 18, 2025David Belson
Summary
This post introduces new DDoS-focused graphs, new insights into leaked credential trends, and a new "Bots" page to Cloudflare Radar. It also details the refactoring of Radar's "Security & Attacks" page into separate "Application Layer" and "Network Layer" sections. New visualizations include geographic and AS-level distribution maps for application layer DDoS attacks, and a graph showing the worldwide distribution of leaked credentials in authentication requests (classified as "clean" or "compromised"). It also highlights the share of authentication requests originating from bots versus humans.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack