Enterprise Is the Main Target of DDoS Attacks
Attack Traffic From Top Originating Countries
During the third quarter (Q3) of 2013, attacks originated from the 185 countries or regions, up 10 from the previous quarter. China (35%), Indonesia (20%), United States (11%)
Attack Traffic From Top Ports
Port 445 (Microsoft-DS) continues to be the most targeted port, drawing 23% of DDoS attacks. Attacks targeting Ports 80 (WWW/HTTP) and 443 (SSL/HTTPS) declined, dropping to 14% and 13%, respectively, compared to the second quarter (Q2) of 2013.
DDoS Attacks Decreased From Previous Quarter
All types of attacks increased from 2012 to Q3, 2013, from 768 to 807, respectively, but since Akamai started reporting DDoS attacks in Q4, 2012, such attacks decreased from Q2 to Q3, 2013, from 318 to 281.
2013 Will See an Overall Increase in DDoS Attacks
“We believe that 2013 will ultimately be a significantly more active year for DDoS attacks than 2012 as of the end of the third quarter, customers had already reported more DDoS attacks than they did in all of 2012,” says David Belson, the report’s editor.
Enterprise Took the Brunt of DDoS Attacks
The enterprise continues to be the leading target of DDoS attacks, with 127 reported in Q3, 2013. Commerce followed with 80 attacks, and media and entertainment reported 42.
Follow-Up Attacks Are Very Likely
Of the 281 Q3 attacks, 27 customers were attacked for a second time, five reported three attacks, and seven were attacked more than three times. Data analysis indicates that if a company suffers one DDoS attack, there is a 25% chance of another assault within three months.
Last Year’s Major Attacker Fairly Quiet Now
One reason for Q3’s shrinking attacks is the “relative silence” of the biggest attacker last year and earlier this year, the Izz ad-Dim al-Qassam Cyber Fighters, according to the report.
DDoS Q3, 2013 Attacks by Region
North America (165), Asia-Pacific (71), Europe and the Middle East (45)
Attacks of all Types to Increase by Q4, 2013
Akamai projects more than 1,000 attacks of all types to be reported by customers by the end of 2013.
