Quarterly Security Reports

No matter which industry you find yourself in, however big or small your business, DDoS and web application attacks impact everyone. Adversaries don’t take vacations, as we’ve all witnessed in the most recent wave of mega and repeat attacks. To help you fortify your security posture and find effective security solutions, the Akamai SIRT (Security Intelligence Response Team) issues an in-depth quarterly analysis and perspective, plus spotlights on recent DDoS and web application attacks.

Most Recent Security Report

Q1 2017 State of the Internet / Security Report

There was a significant increase in traffic from reflection attacks – to 57% of all DDoS attacks in Q1. Attackers using reflection DDoS techniques make seemingly legitimate DNS, NTP and other requests of servers, causing them to send large amounts of traffic at the attacker’s true target.

Past Security Reports

Q4 2016 State of the Internet / Security Report

300 Gbps attacks become more common.
Seven of 10 DDoS attacks greater than 300+ Gbps occurred in 2016, including three in the last quarter. Insecure Internet of Things (IoT) devices continued as a big source of DDoS traffic. The largest DDoS attacks in Q4 came not from Mirai but from Spike botnets.

Q3 2016 State of the Internet / Security Report

IoT botnet attacks are real and present threats.
We've been hearing for years that it is possible for IoT devices to launch a cyberattack. In September 2016, this rising new trend fueled the most significant attack ever observed across the Akamai Intelligent Platform, reaching a powerful peak of 623 Gbps.

Q2 2016 State of the Internet / Security Report

NTP reflection attacks reach an all-time high.
Brazil becomes the leading origin country of web application attacks, and 21 attacks measured 30+ Mpps in Q2 2016, compared with just six recorded in Q1.

Q1 2016 State of the Internet / Security Report

Year-over-year DDoS attacks more than doubled, largely driven by repeat attacks and a wider number of targets. On average, targets were attacked 29 times each. Which attack vectors were used? View this quarter’s report for full details.