DDoS Now a Constant Hazard

Link11’s telemetry shows active DDoS activity across its network 88% of the time in 2025, which the report equates to being targeted on 322 days of the year, and the longest single campaign lasted 12,388 minutes (over eight days). (prnewswire.com)) A coordinated series in 2025 delivered 509 terabytes of attack traffic, the strongest single-volume spike reached 1.33 Tbit/s with over 120 million packets per second, and Link11 recorded three separate attacks above 1 Tbit/s during the year. (prnewswire.com)) Documented DDoS incidents in the Link11 network rose 75% year-over-year in 2025 after a 137% jump in 2024, and the platform registered a peak day of 1,247 attacks on March 1, 2025. (prnewswire.com)) The report finds repeat campaigns are common: more than a 70% probability that an initial DDoS will be followed by at least one more and an average of 2.8 follow-up attacks per incident—a follow-up rate that rose about 80% year-over-year. (prnewswire.com)) Link11 analysts describe a tactical shift to hybrid campaigns that combine massive bandwidth, long-duration “low-and-slow” pressure, and application-layer probing designed to vary patterns in real time and test protective mechanisms. (prnewswire.com)) Link11’s recommended countermeasure set emphasizes permanently automated, architecturally anchored resilience, and the vendor concurrently rolled out an AI Management Dashboard in February 2026 that separates AI crawler traffic from general bot traffic and provides event-log drilldowns for traceability. (prnewswire.com))