30
30
60
60
55
Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
Cloudflare's H1 2026 report records a 519% surge in hyper-volumetric DDoS attacks, driven by DNS and CLDAP reflection amid geopolitical tensions.
Cloudflare detected a 519% surge in hyper-volumetric DDoS attacks across its network during the first half of 2026. Attack traffic was driven heavily by DNS and CLDAP reflection vectors, with 1 Tbps attacks becoming far more common. The report attributes reshaped attack patterns to major geopolitical conflicts.
58
35
35
60
DDoS attacks hit record scale as 1 Tbps+ campaigns become more common
Cloudflare's H1 2026 report shows record DDoS scale, with more 1 Tbps+ attacks, multi-vector campaigns, and hacktivist surges against governments.
Cloudflare's H1 2026 DDoS Threat Report documents record-scale attacks, with a significant increase in campaigns exceeding 1 Tbps and April 2026 peaking at 6.46 trillion requests and 165 PB. Most network-layer attacks stayed small and short — 96.62% under 500 Mbps and 90.60% under 10 minutes — but multi-vector campaigns combining HTTP floods with DNS and CLDAP amplification grew. Operation Epic Fury drove 149 hacktivist DDoS claims against 110 organizations in 16 countries, hitting the government sector hardest, and Brazil overtook the US as the leading attack source country.
48
30
35
30
42
42
42
55
30
30
57
45