Attack success rates demonstrate that 40% to 50% of systems are still inadequately protected against politically motivated attack tactics.

Targeted sectors by DDoS attack in the first half of 2025: Defense (23% - an increase of 14%), retail & e-commerce (18% - an increase of 8%), logistics & transport (15% - an increase of 9%), public sector (11%), education (9%), finance (6%), healthcare (5%), telco (5%), technology, IT, Internet (4%), and other (4%).

One observed Layer 7 DDoS attack used around 20,000 legitimate HTTP requests per minute to disrupt sensitive areas. This is compared to 200 million packets per second for brute force attacks, indicating that precision can be more dangerous if unnoticed.

Targeted sectors by DDoS attacks in the first half of 2024: Finance (17%), public Sector (11%), retail & e-Commerce (10%), defense (9%), telco (8%), healthcare (7%), education (6%), media (6%), food (6%), energy (6%), logistics & transport (6%), other (10%).

The longest documented DDoS attack in the first half of 2025 lasted 12,388 minutes (8 days and 14 hours).

In 2025, 31% of DDoS attacks routed malicious traffic through Germany.

Targeted Sectors (Web Application and API Protection - WAAP) The analysis shows a shift in affected sectors between the first half of 2024 and the first half of 2025:

The Link11 network recorded 225% more DDoS attacks in the first half of 2025 compared to the same period last year.

The longest DDoS attack in the first half of 2024 lasted 1,523 minutes (approximately 1 day and 1 hour).

The cumulative DDoS attack volume rose from 110 TB in the first half of 2024 to 438 TB in the first half of 2025. 438 TB is equivalent to over 7 years of uninterrupted Netflix streaming in 4K. It is enough data for more than 1,700 years of uninterrupted audiobook playback.

Targeted sectors by DDoS attack in the first half of 2025: Defense (23% - an increase of 14%), retail & e-commerce (18% - an increase of 8%), logistics & transport (15% - an increase of 9%), public sector (11%), education (9%), finance (6%), healthcare (5%), telco (5%), technology, IT, Internet (4%), and other (4%).

Hacktivist groups like NoName057(16) orchestrated hundreds of coordinated DDoS attacks each month.

There were multiple gigapacket-per-second (Gpps) DDoS attacks in the first half of 2025.

Bot-driven DDoS incidents peaked at 1,600 in March.

A 3.12 Tbps DDoS attack occurred in the Netherlands in the first half of 2025.

The Iran-Israel conflict generated more than 15,000 DDoS attacks against Iran in June.

Attack durations for bot-driven DDoS attacks increased to an average of 18 minutes.

More than 50 DDoS attacks were greater than a terabit-per-second (Tbps) in the first half of 2025.

NETSCOUT monitored more than 8 million DDoS attacks globally in the first half of 2025.

More than 3.2 million DDoS attacks in the first half of 2025 occurred in EMEA.