Signal Observatory // Monitoring Station

Cyber Threat Level

cyber-threat // attacks/hr

normal
AI Interpretation

Layer 7 DDoS attack volume is running at 80.2 attacks per hour, slightly above the typical expectation of 78.2 but well within normal ranges for this time period. This represents routine background noise in the threat landscape rather than an emerging surge—the current rate falls comfortably within the recent 24-hour band of 72.93 to 83.52 attacks per hour, and long-term patterns show this sits in the middle of the typical 67 to 104 attack-per-hour range. Nothing in the data suggests an unusual spike or coordinated campaign at this moment.

Layer 7 DDoS attack volume via Cloudflare Radar

apiEvery 1 hour
4-Week Baseline
Score
+0.8
Expected
77.2
Current
80.2
Band: 69.784.7
12-Week Baseline
Score
-0.6
Expected
85.3
Current
80.2
Band: 67.1103.6
Updated 130d ago
Recent Values
4w 12w
Scroll to zoom
Mar 2026
Event Timeline
130d ago·driftnormal

Cyber threat index at 82.3% of daily peak — L7 attack volume within baseline

Value: 82.3Expected: 79.0
+1.0
130d ago·anomalydrift

Cyber threat index at 83.9% of daily peak — drifting above expected baseline

Value: 83.9Expected: 75.8
+2.6
130d ago·normalanomaly

Cyber threat index at 86.2% of daily peak — significantly above normal, elevated L7 attack activity

Value: 86.2Expected: 76.0
+3.9
130d ago·driftnormal

Cyber threat index at 80.3% of daily peak — L7 attack volume within baseline

Value: 80.3Expected: 80.5
-0.1
130d ago·normaldrift

Layer 7 DDoS attack volume increased to 93.26 attacks/hr from an expected 80.49, triggering a short-term drift signal (score 1.94) while remaining within normal long-term bounds (0.86). The uptick sits near the upper edge of the short-term band (67.32–93.66) but below recent peaks, with stable trend characteristics suggesting this may be a temporary elevation rather than sustained escalation.

Value: 93.3Expected: 80.5
+1.9
130d ago·driftnormal

Cyber threat index at 100.0% of daily peak — L7 attack volume within baseline

Value: 100.0Expected: 94.9
+0.7
130d ago·normaldrift

Layer 7 DDoS attack volume has drifted to 100 attacks/hr from an expected 93.89, marking a short-term anomaly with score 2.87, though the rate remains within the broader long-term band of 66.88–103.76 attacks/hr and shows stable trend behavior. The elevation represents a 6.1 attack/hr increase above forecast, moving from normal status, but long-term score of 1.59 suggests this remains a contained deviation rather than a sustained threat escalation.

Value: 100.0Expected: 93.9
+2.9
131d ago·driftnormal

Layer 7 DDoS attack volume improved from drift status to normal, with current rate at 98.47 attacks/hr slightly exceeding the expected 86.81 attacks/hr but remaining well within both short-term (66.60–107.02) and long-term (66.95–103.65) bands at a score of 1.15. The 24-hour trend shows stability around the daily average of 93.16 attacks/hr, indicating the spike has normalized despite remaining marginally elevated versus baseline expectations.

Value: 98.5Expected: 86.8
+1.2
131d ago·normaldrift

Cyber threat index at 97.2% of daily peak — drifting above expected baseline

Value: 97.2Expected: 81.4
+3.0
131d ago·driftnormal

Cyber threat index at 92.3% of daily peak — L7 attack volume within baseline

Value: 92.3Expected: 79.5
+1.3
131d ago·anomalydrift

Cyber threat index at 91.0% of daily peak — drifting above expected baseline

Value: 91.0Expected: 75.5
+2.5
131d ago·driftanomaly

Cyber threat index at 91.0% of daily peak — significantly above normal, elevated L7 attack activity

Value: 91.0Expected: 73.4
+5.4
131d ago·normaldrift

Cyber threat index at 83.2% of daily peak — drifting above expected baseline

Value: 83.2Expected: 76.0
+1.9
131d ago·anomalynormal

Cyber threat index at 85.1% of daily peak — L7 attack volume within baseline

Value: 85.1Expected: 77.5
+1.2
131d ago·driftanomaly

Cyber threat index at 85.1% of daily peak — significantly above normal, elevated L7 attack activity

Value: 85.1Expected: 77.1
+4.4
131d ago·normaldrift

Cyber threat index at 91.5% of daily peak — drifting above expected baseline

Value: 91.5Expected: 80.4
+1.6
132d ago·anomalynormal

Cyber threat index at 91.8% of daily peak — L7 attack volume within baseline

Value: 91.8Expected: 91.4
+0.1
132d ago·normalanomaly

Layer 7 DDoS attack volume spiked to 100 attacks/hr against the expected 88.78, triggering a short-term anomaly (score 6.32) though remaining within the wider long-term band of 66.40–103.90 attacks/hr. The stable trend and 24-point dataset suggest this represents a localized uptick rather than systemic drift, with attack rates still tracking near the daily average of 87.23.

Value: 100.0Expected: 88.8
+6.3
133d ago·driftnormal

Cyber threat index at 87.7% of daily peak — L7 attack volume within baseline

Value: 87.7Expected: 86.2
+0.4
133d ago·normaldrift

Cyber threat index at 87.4% of daily peak — drifting above expected baseline

Value: 87.4Expected: 84.8
+1.6
133d ago·driftnormal

Cyber threat index at 86.8% of daily peak — L7 attack volume within baseline

Value: 86.8Expected: 86.8
0.0
133d ago·normaldrift

Cyber threat index at 91.0% of daily peak — drifting above expected baseline

Value: 91.0Expected: 81.8
+1.6
134d ago·anomalynormal

Cyber threat index at 85.0% of daily peak — L7 attack volume within baseline

Value: 85.0Expected: 88.8
-1.1
134d ago·driftanomaly

Cyber threat index at 78.2% of daily peak — significantly below normal, elevated L7 attack activity

Value: 78.2Expected: 84.7
-3.8
134d ago·normaldrift

Cyber threat index at 86.5% of daily peak — drifting above expected baseline

Value: 86.5Expected: 80.7
+1.8
134d ago·driftnormal

Cyber threat index at 78.5% of daily peak — L7 attack volume within baseline

Value: 78.5Expected: 87.5
-0.9
134d ago·normaldrift

Cyber threat index at 78.5% of daily peak — drifting below expected baseline

Value: 78.5Expected: 90.8
-1.6
134d ago·driftnormal

Layer 7 DDoS attack volume has stabilized at 86.18 attacks/hr, down slightly from the expected 89.16 and returning to normal status after a recent drift period, with a marginally negative score of -0.39 indicating activity remains well within both short-term (73.70–104.62) and long-term (66.25–103.79) bands. The stable trend and peak of 100 suggest the threat environment has normalized without escalation risk.

Value: 86.2Expected: 89.2
-0.4
134d ago·normaldrift

Layer 7 DDoS attack volume has drifted above expected levels at 100 attacks/hr versus the 91.01 baseline, exceeding the short-term band (84.49–97.53) with a score of 2.76, though the long-term trend remains stable within the wider band of 66.26–103.75 attacks/hr. The current spike appears contained within normal daily variation (daily average 87.04) and warrants monitoring rather than immediate escalation.

Value: 100.0Expected: 91.0
+2.8
135d ago·anomalynormal

Cyber threat index at 82.2% of daily peak — L7 attack volume within baseline

Value: 82.2Expected: 83.4
-0.1
135d ago·normalanomaly

Cyber threat index at 91.0% of daily peak — significantly above normal, elevated L7 attack activity

Value: 91.0Expected: 70.5
+3.8
135d ago·driftnormal

Cyber threat index at 97.0% of daily peak — L7 attack volume within baseline

Value: 97.0Expected: 91.5
+1.3
135d ago·normaldrift

Cyber threat index at 88.2% of daily peak — drifting below expected baseline

Value: 88.2Expected: 91.5
-1.8
136d ago·anomalynormal

Cyber threat index at 83.5% of daily peak — L7 attack volume within baseline

Value: 83.5Expected: 90.1
-0.9
136d ago·normalanomaly

Cyber threat index at 73.6% of daily peak — significantly below normal, elevated L7 attack activity

Value: 73.6Expected: 86.9
-4.7
136d ago·driftnormal

Cyber threat index at 79.9% of daily peak — L7 attack volume within baseline

Value: 79.9Expected: 87.7
-0.7
136d ago·normaldrift

Cyber threat index at 79.9% of daily peak — drifting below expected baseline

Value: 79.9Expected: 90.1
-2.3
136d ago·driftnormal

Cyber threat index at 82.0% of daily peak — L7 attack volume within baseline

Value: 82.0Expected: 88.9
-1.2
136d ago·normaldrift

Cyber threat index at 83.4% of daily peak — drifting below expected baseline

Value: 83.4Expected: 92.9
-1.8
136d ago·driftnormal

Layer 7 DDoS attack volume has returned to normal at 83.37 attacks/hr from a previous drift state, sitting 6 attacks/hr below the 89.36 expected rate with a modest negative score of -0.74, indicating the threat level has stabilized within both short-term and long-term bands despite recent volatility. The stable trend and daily average of 72.79 suggest the attack pattern has normalized without immediate escalation risk.

Value: 83.4Expected: 89.4
-0.7
136d ago·normaldrift

Cyber threat index at 100.0% of daily peak — drifting above expected baseline

Value: 100.0Expected: 93.0
+3.0
136d ago·driftnormal

Cyber threat index at 100.0% of daily peak — L7 attack volume within baseline

Value: 100.0Expected: 94.6
+0.7
136d ago·normaldrift

Cyber threat index at 100.0% of daily peak — drifting above expected baseline

Value: 100.0Expected: 91.2
+1.6
137d ago·anomalynormal

Layer 7 DDoS attack volume transitioned from anomaly to normal status, with current rate at 76.02 attacks/hr sitting just above the expected 75.215 attacks/hr and comfortably within both short-term (72.21–78.22) and long-term (65.96–104.71) bands. The low short-term score of 0.54 and strongly negative long-term score of -0.96 confirm stabilization, though the daily average of 81.77 suggests recent elevated activity has now subsided to baseline levels.

Value: 76.0Expected: 75.2
+0.5
137d ago·driftanomaly

Layer 7 DDoS attack volume spiked to 100 attacks/hr, exceeding both the short-term band (74.25–86.83) and expected baseline (80.54), marking a shift from drift to short-term anomaly with a score of 6.19, though the rising trend remains within the broader long-term band (66.01–104.67 attacks/hr).

Value: 100.0Expected: 80.5
+6.2
137d ago·anomalydrift

Cyber threat index at 97.9% of daily peak — drifting above expected baseline

Value: 97.9Expected: 80.8
+2.5
137d ago·driftanomaly

Cyber threat index at 97.9% of daily peak — significantly above normal, elevated L7 attack activity

Value: 97.9Expected: 80.5
+7.0
137d ago·normaldrift

Cyber threat index at 97.1% of daily peak — drifting above expected baseline

Value: 97.1Expected: 79.8
+2.1
137d ago·driftnormal

Cyber threat index at 93.5% of daily peak — L7 attack volume within baseline

Value: 93.5Expected: 86.8
+0.7
137d ago·normaldrift

Cyber threat index at 93.0% of daily peak — drifting above expected baseline

Value: 93.0Expected: 85.2
+1.8