Figure 3 shows how long the emulated bots received
commands to attack each URL in percentages. Over one
third of the DDoS attacks (33.5%) only last for up to one hour.
A total of 34 attacks lasted longer than ten days,
with the longest DDoS at over 45 days and still ongoing
at the end of the analyzed data set. A closer analysis
revealed drops in the number of attacks after certain
time spans (e.g., after 72 and 100 hours). This hints at
DDoS-for-rent services described in Section 2.1 offering
an attack with a specified length.