Cloudflare Radar: A public view of global Internet activity
Internet traffic follows the rhythm of daily life — rising with the morning in each time zone, dipping during major events, and pausing when populations collectively shift their attention. Behind those human patterns lies a constant churn of automated activity: beneficial systems building search indexes, malicious actors scanning for vulnerabilities, and DDoS campaigns moving between targets.
Cloudflare has long observed these patterns through its edge network, which handles an average of 18 million HTTP requests and 6 million DNS requests per second from over 1 billion unique IP addresses. The company also blocks roughly 72 billion cyberthreats daily, giving it a broad view of both legitimate traffic and attack vectors. Today it is making some of that internal intelligence public with Cloudflare Radar.
Radar is organized into three areas: Internet-wide trends, per-domain insights, and per-IP information. All data is aggregated from Cloudflare’s network operations.
Internet Insights
The main Radar page opens with a news feed covering notable events observed on the network — adoption of new technologies, browser or OS shifts, and significant traffic pattern changes such as those seen during the COVID-19 pandemic. Users can subscribe to Radar Alerts to receive updates when these events occur.
Below the news section, trend charts show traffic data worldwide or filtered by country, across the last hour, 24 hours, or 7 days. A 30-day view is planned to support longer-term analysis.
Traffic change
Country-level views display the aggregate change in Internet traffic seen by Cloudflare’s network, alongside a sidebar of summary statistics for the selected region.
Popular and trending domains
An algorithm calculates domain popularity worldwide and per country, aggregating services across their multiple domains and subdomains for comparability. Relative ranking changes are highlighted to surface emerging trends. This section is still in beta while the ranking algorithm is tuned. A search bar accepts a specific domain or IP address for deeper inspection.
Attack activity
Two views detail attack traffic. The first covers Layer 3 and 4 DDoS mitigations, showing the attack protocol used and change in volume over the selected period.
The second view presents Layer 7 threat data drawn from blocked requests — those stopped by Cloudflare’s WAF, its Layer 7 DDoS mitigation, or customer-configured firewall rules — with a breakdown by responsible system and trend in blocked volume.
Technology adoption
HTTP analytics drive trends across several technical dimensions, including mobile versus desktop traffic share, the percentage of requests from bots, and longer-term shifts such as HTTPS adoption and IPv6 share.
A section listing top browsers worldwide or for a selected country can surface regional differences; selecting Vietnam, for example, shows over 6% of users on the local Cốc Cốc browser.
Domain Insights
Searching for a specific hostname opens a dedicated page with configuration and security context. A series of Domain Badges summarizes at a glance which technologies a site uses — TLS, IPv6, DNSSEC, and eSNI are all indicated — along with domain age and worldwide popularity rank.
The page also lists the domain’s content categories. Users who find a misclassification can submit feedback via the Domain Categorization Feedback form. Global popularity trends from the ranking formula appear as charts, and domains with broad reach include a map showing per-country popularity.
IP Insights
Entering an IP address in the search bar navigates to an IP-specific page with network (ASN) and geographic details. For a quick lookup of your own address, visit radar.cloudflare.com/me.
When viewing your own IP, Radar provides more granular location information and links to speed.cloudflare.com for a connection speed test.
Roadmap
Radar launches with the functionality described above, but Cloudflare plans to extend it over the coming months. Near-term additions include a 30-day time frame for charts and filtering by content category, allowing users to examine traffic by industry rather than geography alone.
