Cloudflare Says Network‑Layer DDoS Assaults Surge 38% in Q3, Over 18 Million Incidents Mitigated

Cloudflare, the web‑infrastructure and security firm, disclosed on Thursday that its systems automatically blocked 18.2 million network‑layer (Layer 3) distributed denial‑of‑service attacks during the third quarter, a rise of 38 percent compared with the previous period.

The company said the attacks averaged about 8,226 separate incidents each hour, underscoring a relentless tempo that forces enterprises to rely on automated mitigation. In total, Cloudflare’s network absorbed roughly 14.4 trillion units of malicious traffic—whether measured in packets or bits—while keeping customer services online.

Network‑layer DDoS attacks flood a target’s IP infrastructure with overwhelming traffic, often exploiting amplification techniques or compromised devices. Because they strike at the foundational routing level, they can disrupt any internet‑connected service, from e‑commerce sites to critical public‑sector portals. Cloudflare’s platform, which sits between users and origin servers, scrubs inbound traffic in real time, filtering out malicious flows before they reach a client’s infrastructure.

Industry analysts attribute the uptick to several converging factors: the growing availability of low‑cost botnet rentals, heightened geopolitical tensions that spur hacktivist campaigns, and the broader expansion of internet‑of‑things devices that can be conscripted into attacks. The surge also reflects a broader trend of attackers shifting toward higher‑volume, network‑layer assaults that are harder to mitigate without specialized infrastructure.

While Cloudflare’s figures illustrate the scale of the problem, they also highlight the importance of robust, cloud‑native defenses. The company’s automated mitigation reportedly neutralized the bulk of the traffic without manual intervention, a capability that many smaller providers lack. Experts caution that as attackers refine their methods, the arms race will intensify, prompting organizations to evaluate both on‑premise and third‑party DDoS protection strategies.

Looking ahead, Cloudflare indicated that it will continue to invest in AI‑driven detection and larger scrubbing capacities to stay ahead of evolving threats. The firm’s quarterly report serves as a reminder that the volume of network‑layer attacks is unlikely to abate, and that continuous vigilance will remain essential for keeping the internet functional and secure.