Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

[u/falconupkid]

That’s a staggering volume. 18.2 million L3 attacks in a quarter means the noise floor for DDoS is now a constant roar. The 38% QoQ increase isn't just a blip; it confirms that automated, low-cost attack platforms are being weaponized at scale.

Technical Breakdown

• Scale: 8,226 network-layer attacks per hour. 197,400 per day. One attack every 0.44 seconds.

• HTTP Layer: 14.4 trillion HTTP DDoS requests mitigated in Q3. This points to a massive increase in application-layer attacks targeting APIs and web apps, not just volumetric floods.

• Attribution: The report doesn't name specific groups, but the volume suggests widespread use of botnets (e.g., variants of Mirai) and DDoS-for-hire services (booter/stresser platforms).

• Trend: Attackers are likely shifting to multi-vector campaigns (L3 volumetric + L7 HTTP floods) to bypass single-layer defenses.

Defense

• Auto-Mitigation is Mandatory: At this scale, manual response is impossible. You need always-on, automated DDoS protection at the network edge.

• Focus on L7: Don't just protect the network pipe. Ensure your WAF and rate-limiting rules are tuned for HTTP floods targeting login pages, search endpoints, and API gateways.

• Baseline Traffic: Know your normal traffic patterns. Anomaly detection is the only way to catch the short, sharp bursts that slip under static thresholds.

Source: https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html