CLOUDFLARE DDOS THREAT REPORT 2026 Q3: MORE SWARMS, FEWER GIANTS

Summary from the TLDR InfoSec newsletter

Cloudflare mitigated 18.2 million network-layer DDoS attacks and 14.4 trillion HTTP requests in Q3 2026. Short attacks under 10 minutes and 1 Gbps rose 208% year over year, while attacks above 1 Tbps fell 69% from Q2. CLDAP floods dropped 99.5%. DNS amplification rose 215%, and UDP floods rose 122%. The United States was the most-attacked country, followed by China and Indonesia. Canada rose from 16th to 6th, and Israel to 10th. IoT botnets remain active, with Mirai-classified traffic peaking at 57.23 PB in August.