Europe, Middle East, and Africa
Flag of Andorra

Andorra

The DDoS threat landscape is constantly evolving, and to stay ahead of adversaries, ongoing monitoring and analysis are essential to detect how they are modifying their behavior and targets. NETSCOUT monitors the global threat landscape and drills into regional and country-level statistics to ensure that adversaries inform us of near-real-time trends. The country-level analytics featured on this page are automatically generated using our global threat analysis and collection platform, ATLAS, and provide a range of benchmarks for the specified time period, such as the top vectors used in DDoS attacks, top targeted industries, most vectors used in an attack, and total attack frequency.

Max Multivector Attack

Max number of vectors seen in a single attack

17

Attack Vectors Used

1. CLDAP Amplification
2. DNS Amplification
3. MS SQL RS Amplification
4. RIPv1 Amplification
5. SNMP Amplification
6. SSDP Amplification
7. TCP ACK
8. TCP RST
9. TCP SYN
10. TCP SYN/ACK Amplification
11. UDP
12. chargen Amplification
13. mDNS Amplification
14. memcached Amplification
15. rpcbind Amplification

Top Attack Vectors

Tr

TCP RST

Number of Attacks

371

Ts

TCP SYN

Number of Attacks

276

Ta

TCP ACK

Number of Attacks

225

Dn

DNS Amplification

Number of Attacks

180

Tk

TCP SYN/ACK Amplification

Number of Attacks

176

Top Four Industries Under Attack

The following table lists the top vertical industries under attack from July 2025 to December 2025 by number of attacks.

Rank Vertical Frequency Average Duration
1
Wireless Telecommunications Carriers (except Satellite)
473 263 Minutes
2
Wired Telecommunications Carriers
139 42 Minutes
3
Computing Infrastructure Providers Data Processing Web Hosting and Related Services
9 9 Minutes
4
Elementary and Secondary Schools
1 7 Minutes