Cloudflare's Q3 2026 DDoS report counts 18.2 million mitigated network-layer attacks and 14.4 trillion HTTP DDoS requests across its network during the quarter. These are measurements from Cloudflare's own traffic and mitigation systems, not a census of every Internet attack.

The reported shift

  • Cloudflare says attacks under ten minutes and below one gigabit per second increased 208 percent year over year.
  • It reports a sharp drop in attacks above one terabit per second compared with Q2.
  • The report describes a decline in CLDAP reflection attacks alongside increased DNS amplification and UDP floods.

The operational point is that a short burst can still overwhelm a small service even when it does not make a headline-grabbing traffic record. Monitoring, rate controls, and an upstream mitigation plan should be in place before an incident.

Use the report as one provider's observed threat data, and consult current Cloudflare Radar and your own traffic logs when assessing exposure.