Cloudflare DDoS Threat Report 2026 Q3: More Swarms, Fewer Giants
Cloudflare, Thursday, October 29th, 2026
Cloudflare's Q3 2026 DDoS report finds more short, small attacks, fewer hyper-volumetric ones, and a 99.5% drop in CLDAP floods.
Cloudflare mitigated 18.2 million network-layer DDoS attacks and 14.4 trillion HTTP DDoS requests in Q3 2026, about 8,226 network-layer attacks per hour.
Short attacks under 10 minutes and 1 Gbps rose 208%, while attacks above 1 Tbps fell from 805 in Q2 to 251, possibly tied to law enforcement takedowns of four large IoT botnets.
CLDAP attacks fell 99.5% as attackers moved to DNS amplification (up 215%) and UDP floods (up 122%), and Mirai-classified traffic peaked in August at 57.23 PB.
The US regained the most-attacked spot from China, and Canada and Israel rose sharply.