Cloudflare Q3 Report Reveals Surge in DDoS Attacks
Threat actors launched 18.2 million network-layer DDoS attacks in Q3 2026, marking a 38% increase. Web infrastructure teams face growing pressure from automated attack volumes.
TL;DR
- Cloudflare mitigated 18.2 million L3 DDoS attacks in Q3 2026 (+38% YoY).
- Attack frequency reached 8,226 per hour, or one every 0.44 seconds.
- HTTP DDoS request volume hit 14.4 trillion in the same period.
- Automated defenses are critical as attack scale grows exponentially.
- Organizations should reassess DDoS resilience and mitigation strategies.
In the third quarter of 2026, Cloudflare detected and automatically mitigated a staggering 18.2 million network-layer (L3) distributed denial-of-service (DDoS) attacks. This represents a 38% year-over-year increase, underscoring a sharp rise in automated threats targeting web infrastructures.
Alongside L3 attacks, the security firm also reported blocking 14.4 trillion HTTP-based DDoS requests during the same period. With threat actors launching over 8,200 network-level attacks each hour, organizations must prioritize scalable defense mechanisms to maintain uptime and service availability.
Attack Trends and Volumes
- A total of 18.2 million network-layer DDoS attacks were mitigated in Q3 2026.
- This marks a 38% annual increase compared to the same period last year.
- On average, one attack occurred every 0.44 seconds throughout the quarter.
- HTTP DDoS requests reached a record high of 14.4 trillion in three months.
Implications for Security Teams
- Web application and infrastructure teams must invest in real-time, automated DDoS protection.
- Legacy or manual mitigation systems are unlikely to keep pace with current attack rates.
- Scalable cloud-based security services like Cloudflare's are becoming essential for enterprise resilience.
- Organizations should conduct regular stress tests to evaluate their defensive posture against large-scale volumetric attacks.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.