**Cloudflare**, a leading web infrastructure and security company, has released its quarterly DDoS Threat Report, revealing a dramatic escalation in attack frequency. In Q3 2026 alone, the company autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and an staggering 14.4 trillion HTTP DDoS requests. This translates to approximately 197,400 attacks per day, or one attack every 0.44 seconds. ### A Growing Trend in Attack Volume Compared to previous quarters, the surge is evident: 13.2 million L3 DDoS attacks were recorded in Q2, and 10.0 million in Q1 2026. This upward trajectory is largely attributed to the widespread availability and use of DDoS-for-hire 'booter' or 'stresser' services, which enable even unsophisticated threat actors to launch hundreds of thousands of attacks. ### Shifting Attack Dynamics The **Cloudforce One** threat intelligence team highlighted a significant increase in short-burst, low-bandwidth attacks. These attacks, typically lasting under 10 minutes and peaking below 1 Gbps, saw a 208% surge. Conversely, there was a notable decline in hyper-volumetric attacks exceeding 1 Tbps, dropping by 69% from 805 attacks in Q2 to 251 in Q3. This decrease is likely a direct consequence of recent law enforcement actions against major botnet operators and DDoS services such as **AISURU**, **KimWolf**, **JackSkid**, and **Mossad** earlier in March. ### Emergence of New Threats Despite law enforcement successes, the threat landscape remains dynamic. **Cloudflare** warns of new botnet variants like **Dysphoria**, which incorporates blockchain for command-and-control, and **Evooo1Bot**, a Linux-based botnet actively exploiting known vulnerabilities. Another shift in attack methodology includes a decline in Connectionless Lightweight Directory Access Protocol (**CLDAP**) floods. In contrast, **DNS amplification** attacks have seen a sharp rise, jumping 215% to comprise 3.43% of all network-layer attacks.  ### Most Targeted Sectors and Regions The report identifies several industries as prime targets for these attacks: * Media, production, and publishing * Information technology and services * Gambling and casinos * Computer software * Telecommunications providers Geographically, the U.S., China, Indonesia, the U.K., and Türkiye experienced the most attacks. Canada and Israel also entered the top 10, with Canadian retail, telecommunications, and marketing sectors facing increased targeting.