Signal Observatory // Monitoring Station

Cyber Threat Level

cyber-threat // attacks/hr

normal
AI Interpretation

Layer 7 DDoS attack volume is running at 80.2 attacks per hour, slightly above the typical expectation of 78.2 but well within normal ranges for this time period. This represents routine background noise in the threat landscape rather than an emerging surge—the current rate falls comfortably within the recent 24-hour band of 72.93 to 83.52 attacks per hour, and long-term patterns show this sits in the middle of the typical 67 to 104 attack-per-hour range. Nothing in the data suggests an unusual spike or coordinated campaign at this moment.

Layer 7 DDoS attack volume via Cloudflare Radar

apiEvery 1 hour
4-Week Baseline
Score
+0.8
Expected
77.2
Current
80.2
Band: 69.784.7
12-Week Baseline
Score
-0.6
Expected
85.3
Current
80.2
Band: 67.1103.6
Updated 75d ago
Recent Values
4w 12w
Scroll to zoom
Mar 2026
Event Timeline
75d ago·driftnormal

Cyber threat index at 82.3% of daily peak — L7 attack volume within baseline

Value: 82.3Expected: 79.0
+1.0
75d ago·anomalydrift

Cyber threat index at 83.9% of daily peak — drifting above expected baseline

Value: 83.9Expected: 75.8
+2.6
75d ago·normalanomaly

Cyber threat index at 86.2% of daily peak — significantly above normal, elevated L7 attack activity

Value: 86.2Expected: 76.0
+3.9
75d ago·driftnormal

Cyber threat index at 80.3% of daily peak — L7 attack volume within baseline

Value: 80.3Expected: 80.5
-0.1
75d ago·normaldrift

Layer 7 DDoS attack volume increased to 93.26 attacks/hr from an expected 80.49, triggering a short-term drift signal (score 1.94) while remaining within normal long-term bounds (0.86). The uptick sits near the upper edge of the short-term band (67.32–93.66) but below recent peaks, with stable trend characteristics suggesting this may be a temporary elevation rather than sustained escalation.

Value: 93.3Expected: 80.5
+1.9
75d ago·driftnormal

Cyber threat index at 100.0% of daily peak — L7 attack volume within baseline

Value: 100.0Expected: 94.9
+0.7
75d ago·normaldrift

Layer 7 DDoS attack volume has drifted to 100 attacks/hr from an expected 93.89, marking a short-term anomaly with score 2.87, though the rate remains within the broader long-term band of 66.88–103.76 attacks/hr and shows stable trend behavior. The elevation represents a 6.1 attack/hr increase above forecast, moving from normal status, but long-term score of 1.59 suggests this remains a contained deviation rather than a sustained threat escalation.

Value: 100.0Expected: 93.9
+2.9
75d ago·driftnormal

Layer 7 DDoS attack volume improved from drift status to normal, with current rate at 98.47 attacks/hr slightly exceeding the expected 86.81 attacks/hr but remaining well within both short-term (66.60–107.02) and long-term (66.95–103.65) bands at a score of 1.15. The 24-hour trend shows stability around the daily average of 93.16 attacks/hr, indicating the spike has normalized despite remaining marginally elevated versus baseline expectations.

Value: 98.5Expected: 86.8
+1.2
75d ago·normaldrift

Cyber threat index at 97.2% of daily peak — drifting above expected baseline

Value: 97.2Expected: 81.4
+3.0
76d ago·driftnormal

Cyber threat index at 92.3% of daily peak — L7 attack volume within baseline

Value: 92.3Expected: 79.5
+1.3
76d ago·anomalydrift

Cyber threat index at 91.0% of daily peak — drifting above expected baseline

Value: 91.0Expected: 75.5
+2.5
76d ago·driftanomaly

Cyber threat index at 91.0% of daily peak — significantly above normal, elevated L7 attack activity

Value: 91.0Expected: 73.4
+5.4
76d ago·normaldrift

Cyber threat index at 83.2% of daily peak — drifting above expected baseline

Value: 83.2Expected: 76.0
+1.9
76d ago·anomalynormal

Cyber threat index at 85.1% of daily peak — L7 attack volume within baseline

Value: 85.1Expected: 77.5
+1.2
76d ago·driftanomaly

Cyber threat index at 85.1% of daily peak — significantly above normal, elevated L7 attack activity

Value: 85.1Expected: 77.1
+4.4
76d ago·normaldrift

Cyber threat index at 91.5% of daily peak — drifting above expected baseline

Value: 91.5Expected: 80.4
+1.6
77d ago·anomalynormal

Cyber threat index at 91.8% of daily peak — L7 attack volume within baseline

Value: 91.8Expected: 91.4
+0.1
77d ago·normalanomaly

Layer 7 DDoS attack volume spiked to 100 attacks/hr against the expected 88.78, triggering a short-term anomaly (score 6.32) though remaining within the wider long-term band of 66.40–103.90 attacks/hr. The stable trend and 24-point dataset suggest this represents a localized uptick rather than systemic drift, with attack rates still tracking near the daily average of 87.23.

Value: 100.0Expected: 88.8
+6.3
78d ago·driftnormal

Cyber threat index at 87.7% of daily peak — L7 attack volume within baseline

Value: 87.7Expected: 86.2
+0.4
78d ago·normaldrift

Cyber threat index at 87.4% of daily peak — drifting above expected baseline

Value: 87.4Expected: 84.8
+1.6
78d ago·driftnormal

Cyber threat index at 86.8% of daily peak — L7 attack volume within baseline

Value: 86.8Expected: 86.8
0.0
78d ago·normaldrift

Cyber threat index at 91.0% of daily peak — drifting above expected baseline

Value: 91.0Expected: 81.8
+1.6
78d ago·anomalynormal

Cyber threat index at 85.0% of daily peak — L7 attack volume within baseline

Value: 85.0Expected: 88.8
-1.1
78d ago·driftanomaly

Cyber threat index at 78.2% of daily peak — significantly below normal, elevated L7 attack activity

Value: 78.2Expected: 84.7
-3.8
78d ago·normaldrift

Cyber threat index at 86.5% of daily peak — drifting above expected baseline

Value: 86.5Expected: 80.7
+1.8
79d ago·driftnormal

Cyber threat index at 78.5% of daily peak — L7 attack volume within baseline

Value: 78.5Expected: 87.5
-0.9
79d ago·normaldrift

Cyber threat index at 78.5% of daily peak — drifting below expected baseline

Value: 78.5Expected: 90.8
-1.6
79d ago·driftnormal

Layer 7 DDoS attack volume has stabilized at 86.18 attacks/hr, down slightly from the expected 89.16 and returning to normal status after a recent drift period, with a marginally negative score of -0.39 indicating activity remains well within both short-term (73.70–104.62) and long-term (66.25–103.79) bands. The stable trend and peak of 100 suggest the threat environment has normalized without escalation risk.

Value: 86.2Expected: 89.2
-0.4
79d ago·normaldrift

Layer 7 DDoS attack volume has drifted above expected levels at 100 attacks/hr versus the 91.01 baseline, exceeding the short-term band (84.49–97.53) with a score of 2.76, though the long-term trend remains stable within the wider band of 66.26–103.75 attacks/hr. The current spike appears contained within normal daily variation (daily average 87.04) and warrants monitoring rather than immediate escalation.

Value: 100.0Expected: 91.0
+2.8
80d ago·anomalynormal

Cyber threat index at 82.2% of daily peak — L7 attack volume within baseline

Value: 82.2Expected: 83.4
-0.1
80d ago·normalanomaly

Cyber threat index at 91.0% of daily peak — significantly above normal, elevated L7 attack activity

Value: 91.0Expected: 70.5
+3.8
80d ago·driftnormal

Cyber threat index at 97.0% of daily peak — L7 attack volume within baseline

Value: 97.0Expected: 91.5
+1.3
80d ago·normaldrift

Cyber threat index at 88.2% of daily peak — drifting below expected baseline

Value: 88.2Expected: 91.5
-1.8
80d ago·anomalynormal

Cyber threat index at 83.5% of daily peak — L7 attack volume within baseline

Value: 83.5Expected: 90.1
-0.9
80d ago·normalanomaly

Cyber threat index at 73.6% of daily peak — significantly below normal, elevated L7 attack activity

Value: 73.6Expected: 86.9
-4.7
81d ago·driftnormal

Cyber threat index at 79.9% of daily peak — L7 attack volume within baseline

Value: 79.9Expected: 87.7
-0.7
81d ago·normaldrift

Cyber threat index at 79.9% of daily peak — drifting below expected baseline

Value: 79.9Expected: 90.1
-2.3
81d ago·driftnormal

Cyber threat index at 82.0% of daily peak — L7 attack volume within baseline

Value: 82.0Expected: 88.9
-1.2
81d ago·normaldrift

Cyber threat index at 83.4% of daily peak — drifting below expected baseline

Value: 83.4Expected: 92.9
-1.8
81d ago·driftnormal

Layer 7 DDoS attack volume has returned to normal at 83.37 attacks/hr from a previous drift state, sitting 6 attacks/hr below the 89.36 expected rate with a modest negative score of -0.74, indicating the threat level has stabilized within both short-term and long-term bands despite recent volatility. The stable trend and daily average of 72.79 suggest the attack pattern has normalized without immediate escalation risk.

Value: 83.4Expected: 89.4
-0.7
81d ago·normaldrift

Cyber threat index at 100.0% of daily peak — drifting above expected baseline

Value: 100.0Expected: 93.0
+3.0
81d ago·driftnormal

Cyber threat index at 100.0% of daily peak — L7 attack volume within baseline

Value: 100.0Expected: 94.6
+0.7
81d ago·normaldrift

Cyber threat index at 100.0% of daily peak — drifting above expected baseline

Value: 100.0Expected: 91.2
+1.6
82d ago·anomalynormal

Layer 7 DDoS attack volume transitioned from anomaly to normal status, with current rate at 76.02 attacks/hr sitting just above the expected 75.215 attacks/hr and comfortably within both short-term (72.21–78.22) and long-term (65.96–104.71) bands. The low short-term score of 0.54 and strongly negative long-term score of -0.96 confirm stabilization, though the daily average of 81.77 suggests recent elevated activity has now subsided to baseline levels.

Value: 76.0Expected: 75.2
+0.5
82d ago·driftanomaly

Layer 7 DDoS attack volume spiked to 100 attacks/hr, exceeding both the short-term band (74.25–86.83) and expected baseline (80.54), marking a shift from drift to short-term anomaly with a score of 6.19, though the rising trend remains within the broader long-term band (66.01–104.67 attacks/hr).

Value: 100.0Expected: 80.5
+6.2
82d ago·anomalydrift

Cyber threat index at 97.9% of daily peak — drifting above expected baseline

Value: 97.9Expected: 80.8
+2.5
82d ago·driftanomaly

Cyber threat index at 97.9% of daily peak — significantly above normal, elevated L7 attack activity

Value: 97.9Expected: 80.5
+7.0
82d ago·normaldrift

Cyber threat index at 97.1% of daily peak — drifting above expected baseline

Value: 97.1Expected: 79.8
+2.1
82d ago·driftnormal

Cyber threat index at 93.5% of daily peak — L7 attack volume within baseline

Value: 93.5Expected: 86.8
+0.7
82d ago·normaldrift

Cyber threat index at 93.0% of daily peak — drifting above expected baseline

Value: 93.0Expected: 85.2
+1.8