According to the StormWall analytical center, Mexico became the primary source of DDoS attacks in August 2026, accounting for 19.6% of infected devices among the top 15 sources. The United States, which led the ranking for eight consecutive months, dropped to second place with a 15.2% share.
Russia secured the third position with 9.5% of the total share. The list of top sources also includes Brazil at 9.4% and Vietnam at 8.2%. Other countries in the top ten are France, Bangladesh, Turkey, Thailand, and Ukraine, with shares ranging from 6.6% to 3.6%.
The report highlights a significant shift in the geographical distribution of attacks, particularly the rise of Latin America. Its contribution to global DDoS activity increased from 3.2% in early 2025 to 34.5% in August 2026. Meanwhile, East Asia, which held a 37.4% share a year ago, is no longer present in the ranking.
StormWall attributes these trends to the proliferation of botnets targeting low-cost hardware. These attacks frequently exploit consumer devices such as home routers, IP cameras, and set-top boxes that use default passwords or lack necessary security updates.
