Cloudflare says 1 Tbps DDoS attacks grew sixfold in the second quarter
Cloudflare Inc. reported today that distributed denial-of-service attacks above 1 terabit per second grew sixfold between the first and second quarters of 2026, to 805 from 130.
That took the half-year total to 935 attacks over 1 Tbps, against 219 in the fourth quarter of last year. Cloudflare said in the report that attackers now deliver attacks of that size “at a cadence measured in hundreds per quarter.”
The numbers come from the 25th edition of the company’s DDoS Threat Report. This one covers January through June, the first time Cloudflare has folded two quarters into a single volume. Its threat intelligence team, Cloudforce One, built the analysis from traffic crossing Cloudflare’s own network.
Network-layer attacks mitigated over the six months totaled 23.2 million. At the application layer, the company counted 29.64 trillion HTTP DDoS requests. Cloudflare put the pace at 5,343 network-layer attacks an hour, roughly 128,000 a day. Attack traffic absorbed more than half, running to about 1.23 exabits.
