The State of the Internet, 4th Quarter of 2010
Each quarter, Akamai Technologies publishes "State of the Internet" report. Akamai’s globally distributed network of servers allows them to gather massive amounts of information on many metrics, including connection speeds, attack traffic, and network connectivity/ availability/ latency problems, as well as traffic patterns on leading Web sites.This report includes data gathered from across Akamai’s global server network during the fourth quarter of 2010 about attack traffic, broadband adoption, and mobile connectivity, as well as trends seen in this data over time.
Attack Traffic, Top Originating Countries
During the fourth quarter of 2010, Akamai observed attack traffic originating from 207 unique countries/regions, down just two from the third quarter. While the list of countries/regions comprising the top five remained constant from quarter-to-quarter, a shift in the rankings clearly occurred, as shown in the chart. Most notably, the United States dropped to fifth place globally, the source of 7.3% of the observed attack traffic. Russia shifted into first place, responsible for approximately 12% more of the observed traffic in the fourth quarter than in the prior quarter. For most of the remaining countries, the quarterly changes in attack traffic percentages were mixed, though none of the variations were significant.
Attack Traffic, Top Ports
Attack traffic concentration among the top 10 targeted ports dropped significantly from the third
quarter, with the top 10 ports responsible for just 72% of the observed attacks (down from 87% in the third quarter of 2010). This difference is mostly accounted for by the continued decline in the percentage of attacks targeted at Port 445 (Microsoft-DS), down from 56% to 47%, and Port 23 (Telnet), down from 17% to 11%, as shown in the chart.
As shown in Figure below, the top 10 countries remained the same quarter over quarter. Nine of the top 10 countries saw quarterly growth in the number of unique IP addresses observed by Akamai, ranging from an increase of under 1% in France to an 18% increase in South Korea. Yearly growth across all of the top 10 countries was strong, with double digit yearly increases seen in all countries but France. China’s growth rate has been consistently strong throughout 2010, with year-over year changes of 30% or more seen in all quarters. Concentration among the top 10 remained consistent with the past several quarters, accounting for nearly 70% of the observed IP addresses. In looking at the “long tail,” there were 183 countries/regions with fewer
than one million unique IP addresses connecting to Akamai in the fourth quarter of 2010, 132 with fewer than 100,000 unique IP addresses, and 30 with fewer than 1,000 unique IP addresses. The counts for all three thresholds were down quarter-over-quarter.
Global Average Connection Speeds
In the fourth quarter of 2010, the global average connection speed remained essentially flat as compared to the third quarter, ending the year approximately 60 Kbps shy of the 2 Mbps “broadband” threshold. However, as shown in Figure 5, average connection speeds among the top 10 countries were not as static, with quarterly growth as high as 14% (in Belgium), though declines were not as significant, with South Korea’s 3.0% quarterly decline the worst of the three countries in the list that lost ground. Even with these declines, all of the countries within the top 10, as well as the United States, maintained average connection speeds that exceeded the “high broadband” threshold of 5 Mbps.
Attack Traffic From Mobile Networks, Top Originating Countries
In looking at attack traffic from known mobile network providers observed by Akamai during the fourth quarter of 2010, we see that the list of top countries responsible for the attacks remained fairly consistent quarter-over-quarter.
Nine of the top 10 countries, as shown in Figure 19, are the same as in the third quarter – Brazil dropped out of the top 10 list, while Hungary joined it. Italy remained the source of the largest amount of observed attack traffic, up nearly 7% from the third quarter. Of the top 10 countries, the United Kingdom was the only country that saw their percentage drop quarter-over-quarter. Overall attack traffic concentration remained fairly consistent from the prior quarter, with the top two countries responsible for 40% of observed attacks, while the top 10 countries were the source of three-quarters of observed attacks.
Attack Traffic From Mobile Networks, Top Ports
In the fourth quarter of 2010, nine of the top 10 ports targeted by attack traffic coming from mobile networks were the same as in the third quarter. The lone difference was the appearance of Port 3389 (Microsoft Terminal Services), which replaced Port 6882 (BitTorrent) at the bottom of the list. (And in the third quarter, BitTorrent itself replaced Symantec System Center at the bottom of the list.) As shown in Figure 20, attack concentration grew very slightly in the fourth quarter, with Port 445 responsible for 76% of observed attacks (up from 75% last quarter), and the top 10 ports accounting for almost 96% of observed attacks (up just over 1% from last quarter).
The State of the Internet, 4rd Quarter, 2010 Report (Akamai_state_of_internet_q42010.pdf)
Publish Date: 2011/5/17 Views: 517