Cloudflare Report Shows Massive Spike in High-Volume DDoS Attacks: Here Is What the Data Shows

Cloudflare's latest report reveals a significant surge in high-volume DDoS attacks, with 805 attacks surpassing 1 Tbps during Q2 2026, a substantial increase from the 130 recorded in the previous quarter. This trend underscores the growing challenges in defending against increasingly powerful cyber threats. While the majority of these attacks remain relatively small, the rise in high-bandwidth events necessitates robust defenses capable of handling extreme traffic volumes.

Cloudflare mitigated 13.17 million network-layer DDoS attacks in Q2 2026, a marked increase from 10.04 million in Q1, highlighting the evolving nature of cyber threats. The company also noted a 143% increase in attacks between 500 Gbps and 1 Tbps, and a 105% rise in attacks between 100 Gbps and 500 Gbps. Even malicious HTTP traffic spiked by 32.4% to 16.89 trillion requests.

Despite the overall increase, 96.62% of these attacks transmitted less than 50 Mbps, and 90.6% lasted no more than 10 minutes, indicating that while the extreme attacks are growing, most attacks continue to be relatively minor. The record-breaking 31.4 Tbps DDoS attack in December 2025, attributed to the Aisuru/Kimwolf botnet, demonstrates the potential for terabit-scale attacks that can far exceed the 1 Tbps threshold.

This surge in high-volume attacks underscores the need for advanced network defenses, including upstream filtering, load balancing, and traffic scrubbing, to protect against the growing threat of large-scale DDoS attacks.