StormWall analysts identified the primary sources of global DDoS attacks in August 2026. Mexico emerged as the leading source, accounting for 19.6% of attacks among the top 15 countries. The United States, which held the top spot for eight consecutive months, fell to second place with a 15.2% share.
Russia ranked third in the August 2026 report, contributing 9.5% of global DDoS traffic. Other significant sources include Brazil at 9.4%, Vietnam at 8.2%, France at 6.6%, and Bangladesh at 5.1%. The list continues with Turkey (3.9%), Thailand (3.6%), and Ukraine (3.6%).
The report highlights a major shift in attack origins. The share of Latin American countries in global DDoS activity rose from 3.2% in early 2025 to 34.5% by August 2026. Conversely, East Asian nations, including China, Taiwan, and South Korea, have largely disappeared from the top 15 rankings.
The surge in attacks from regions like Latin America and South Asia is attributed to the proliferation of vulnerable consumer hardware, such as home routers and IP cameras. These devices are often compromised via default passwords or unpatched software vulnerabilities, facilitating the growth of botnets like Dysphoria and TuxBot.
