Europe, Middle East, and Africa
Flag of Portugal

Portugal

The DDoS threat landscape is constantly evolving, and to stay ahead of adversaries, ongoing monitoring and analysis are essential to detect how they are modifying their behavior and targets. NETSCOUT monitors the global threat landscape and drills into regional and country-level statistics to ensure that adversaries inform us of near-real-time trends. The country-level analytics featured on this page are automatically generated using our global threat analysis and collection platform, ATLAS, and provide a range of benchmarks for the specified time period, such as the top vectors used in DDoS attacks, top targeted industries, most vectors used in an attack, and total attack frequency.

Max Multivector Attack

Max number of vectors seen in a single attack

21

Attack Vectors Used

1. CLDAP Amplification
2. COAP Amplification
3. DNS
4. DNS Amplification
5. ICMP
6. MS SQL RS Amplification
7. NTP Amplification
8. SNMP Amplification
9. SSDP Amplification
10. STUN Amplification
11. TCP ACK
12. TCP RST
13. TCP SYN
14. TCP SYN/ACK Amplification
15. UDP
16. WS-DD Amplification
17. chargen Amplification
18. mDNS Amplification
19. rpcbind Amplification

Top Attack Vectors

Ta

TCP ACK

Number of Attacks

7,018

Dn

DNS Amplification

Number of Attacks

4,054

Tr

TCP RST

Number of Attacks

4,036

Ts

TCP SYN

Number of Attacks

3,811

Tk

TCP SYN/ACK Amplification

Number of Attacks

3,522

Top Four Industries Under Attack

The following table lists the top vertical industries under attack from July 2025 to December 2025 by number of attacks.

Rank Vertical Frequency Average Duration
1
Wired Telecommunications Carriers
8,633 16 Minutes
2
Wireless Telecommunications Carriers (except Satellite)
1,828 13 Minutes
3
Computing Infrastructure Providers Data Processing Web Hosting and Related Services
1,299 22 Minutes
4
All Other Telecommunications
365 17 Minutes