The DDoS mitigation service NaWas protects participants in the digital infrastructure against DDoS attacks and provides insight into changing trends in the field of DDoS.
In the first quarter of 2026, NaWas mitigated a total of 2728 DDoS attacks (+810 compared to Q4 2025). Measured in terms of the number of bits, the largest attack amounted to over 144.29 Gbps. In terms packets per second, the largest attack was 50.96 Mpps.
Application Layer (L7) HTTP request flood remain the most common attack vector during this quarter, representing over 53% of all attacks observed. Within HTTP Floods, we observed a marked increase in the number of events targeting the HTTP/3 QUIC protocol at very high packet rates. This quarter, we also observed a large increase in GRE carpet bomb type attacks.
Download the infographic below for more figures and insights.
