More Than Half of Online Attacks Originating from Asia

CAMBRIDGE, Mass., Jan. 31, 2012  /PRNewswire/ –  Akamai Technologies, Inc. (NASDAQ: AKAM), the leading cloud platform for helping enterprises provide secure, high-performing user experiences on any device, anywhere, today released its Third Quarter, 2011 State of the Internet report, based on data gathered from the Akamai Intelligent Platform™. The report provides insight into key global statistics such as Internet penetration, mobile traffic and data consumption, global and regional connection speeds, and observed attack traffic.

Akamai has recorded a 2000 percent increase in the number of DDoS attack incidents it has investigated on behalf of customers over the last three years. Additionally, observations by Akamai indicate that port-based attacks are still prevalent and being launched from around the globe. While the origin of this observed attack traffic could be individuals searching for easily compromised systems or botnets looking to recruit new participants, the observations indicate an ongoing need for solid network and systems hygiene to help prevent further system compromise and infection. The growing sophistication and intensity of Web-based attacks and the ongoing prevalence of port-based attacks highlight both the importance of online security, and the need for a defense-in-depth strategy.

Attack Traffic from Asia
During the third quarter of 2011, attack traffic originated from 195 unique countries or regions, up from 192 in the second quarter. In examining the continental distribution of observed attack traffic in the third quarter, we uncovered that slightly more than 49 percent originated in the Asia Pacific/Oceania region, up from 47 percent last quarter.
Indonesia vaulted to the top of the list this quarter, generating 14 percent of observed attack traffic. Taiwan and China held the second and third place spots, respectively, accounting for just under 20 percent of observed attack traffic combined. Myanmar, which suddenly appeared at the top of the list in the prior two quarters, disappeared just as suddenly, potentially indicating that attack traffic has either been shut down, or is now coming from other places. With Myanmar dropping out of the top 10 list, South Korea moved in. The country more than tripled its observed level of attack traffic, representing 3.8 percent in the third quarter.
In addition to South Korea and Indonesia, Taiwan, China, India, and Egypt were all responsible for higher percentages of attack traffic as compared to the prior quarter. Attack traffic originating in Europe was down slightly to 28 percent; North & South America accounted for nearly 19 percent; and the remaining 4 percent came from Africa.

Top Computer Ports for Attack Traffic
Attack traffic concentration declined slightly from the second quarter, with the top 10 ports seeing 68 percent of observed attack traffic. Attacks targeting Port 80 (WWW/HTTP) dropped by about a third as compared to the second quarter, while attacks targeting Port 23 (Telnet) grew by almost the same amount. The growth in attacks targeting Port 23 is likely due to attacks apparently sourced in Egypt and South Korea – in Egypt there were over 18x as many attacks targeting Port 23, and in South Korea, nearly 4x as many attacks as the next most targeted port, which was Port 445 in both countries.

Reviewing observed attack traffic from known mobile networks, overall attack traffic concentration declined from the prior quarter, with the top 10 countries generating 76 percent of observed attacks. The list of top ports targeted remained consistent with the second quarter, with Port 445 remaining the target of an overwhelming majority of observed attacks as compared to the other ports in the top 10.

  • 23 U.S. cities made the list, with San Jose, CA ranking as the fastest (#13 out of 100)

About the Akamai State of the Internet report
Each quarter, Akamai publishes a “State of the Internet” report. This report includes data gathered from across the Akamai Intelligent Platform about attack traffic, broadband adoption, mobile connectivity and other relevant topics concerning the Internet and its usage, as well as trends seen in this data over time. To view the full report or access past reports, please visit

Leave a Reply