[REVISION HISTORY]
Cloudflare DDoS attack trends 2026
Updated 1 time since CLSTR started tracking revisions of this situation.
What changed
2026-08-16 10:06 UTC → 2026-09-03 08:41 UTC ·
added
removed
Cloudflare reports a significant increase in Distributed Denial of Service (DDoS) attacks during the first half of 2026. The company repelled 23.2 million attacks against its network infrastructure, averaging approximately 128,000 attacks per day. day, while also blocking 29.64 trillion malicious requests directed at specific websites. A notable trend is the surge in hyper-volumetric attacks exceeding 1 Tbps, which saw a 519% increase between the first and second quarters of the year. There has quarters. Medium-sized attacks are also been a rise in medium-sized attacks, rising, with bandwidth attacks between 500 Gbps and 1 Tbps increasing by 143%. 143%, and those between 100 Gbps and 500 Gbps increasing by 105%. Data from Link11 corroborates this shift toward intensity, noting record-breaking bandwidth attacks reaching 2.3 Tbit/s. Attack vectors are shifting from traditional botnet floods toward reflection and amplification methods. DNS-based attacks accounted for 34.3% of all network-layer activity, and with DNS Floods specifically increasing from 25.7% to 40.0% quarter-over-quarter. CLDAP Floods experienced a 580% increase in the second quarter. The escalation is attributed to hijacked cloud servers and superbotnets such as Aisuru and Kimwolf. Geopolitical tensions have influenced these trends, with the media, production, publishing, and government publishing sectors seeing increased targeting. being heavily targeted. The government sector saw a major rise in targeting, moving from the 29th to the 9th most-attacked sector. While the US remains a primary major target, Brazil has overtaken the US as the primary country of origin for these attacks, and Turkey has emerged as the third most-attacked country during this period. country.
Versions
- 2026-09-03 08:41 UTC Cloudflare DDoS attack trends 2026
- 2026-08-16 10:06 UTC Cloudflare DDoS attack trends 2026
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.