DDoS attacks can last anywhere from a few minutes to several hours or even days, depending on the scale of the attack and the response from security measures. Proper protection can minimize the impact and duration.