Akamai Diversity

The Akamai Blog

State of the Internet: Fewer Attacks Than Previous Quarter

The latest Akamai State of the Internet Report is out. Here's a look at what we saw on the security front in the first quarter of 2014.

Key details on the sources of attack traffic and targeted ports:

  • Akamai observed attack traffic originating from 194 unique countries/regions -- six more than the fourth quarter of 2013. 
  • China was again responsible for originating the most attacks, but dropped slightly from 43% in the fourth quarter of 2013 to 41% in the first quarter of 2014.
  • The United States followed in second place, but also saw a decline from 19% to 11%.
  • Indonesia saw a slight uptick from 5.7% to 6.8% to secure third place. 
Thumbnail image for SOTI Q1 2014 figure_1.jpgOverall, the concentration of attacks decreased significantly, compared to the fourth quarter of 2013, with the top 10 countries/regions originating 75% of observed attacks, down from 88% in the prior quarter.

  • Port 445 (Microsoft-DS) remained the most targeted port in the first quarter of 2014, but the associated attack traffic volume was down to 14% of observed attack traffic (from 30% in the third quarter of 2013). 
  • Port 5000 (Universal Plug & Play/UPnP) saw a significant increase during the quarter -- from less than a tenth of a percent in the fourth quarter of 2013 to 12% this quarter -- an increase of more than 100 times. 
  • Port 23 (Telnet) ranked third with 8.7% of observed attack traffic.
SOTI Q1 2014 figure_2.jpg
Meanwhile, the number of DDoS attacks reported in the first quarter of 2014 declined to 283 from 346 in the last quarter of 2013 -- a 20% decrease quarter-over-quarter and a 27% increase year-over-year.

  • Most regions of the world saw a decline in reported DDoS attacks during the first quarter of 2014. 
  • The Americas continued to account for approximately 49% (139) of all attacks, followed by the Asia Pacific region with 31% (87) of attacks and Europe, Middle East and Africa (EMEA) receiving the remaining 20% (57) of DDoS traffic. 
  • The enterprise sector saw a 49% quarter-over-quarter reduction in attack traffic, while public sector attack traffic grew by 34%, primarily attributable to attacks against government targets within Singapore.
SOTI Q1 2014 figure_3.jpg