U.S., France and Great Britain Top Targets for DDoS Attacks over 10Gbps

United States, France and Great Britain are the top targets for attacks over 10Gbps, according to Arbor Networks’ global DDoS attack data for the first six months of 2016. The data also shows a continuing escalation in both size and frequency of DDoS attacks.

DDoS remains a commonly used attack type due to the ready availability of free tools and inexpensive online services that allow anyone with a grievance and an Internet connection to launch a DDoS attack. This has led to an increase in the frequency, size and complexity of attacks in recent years.

Key findings of Arbor Networks’ global DDoS attack data for the first six months of 2016 show:

  • ddos protection arbor networksAn average of 124,000 events per week over the last 18 months.
  • A 73% increase in peak attack size over 2015, to 579Gbps.
  • 274 attacks over 100Gbps monitored in 1H 2016, versus 223 in all of 2015.
  • 46 attacks over 200Gbps monitored in 1H 2016, versus 16 in all of 2015.
  • S., France and Great Britain are the top targets for attacks over 10Gbps.

A 1 Gbps DDoS attack is large enough to take most organizations completely offline.

  • Average attack size in 1H 2016 was 986Mbps, a 30% increase over 2015.
  • Average attack size is projected to be 1.15Gbps by end of 2016.

“The data demonstrates the need for hybrid, or multi-layer DDoS defense,” said Darren Anstee, Arbor Networks chief security technologist. “High bandwidth attacks can only be mitigated in the cloud, away from the intended target. However, despite massive growth in attack size at the top end, 80% of all attacks are still less than 1Gbps and 90% of attacks last less than one hour. On-premise protection provides the rapid reaction needed and is key against “low and slow” application-layer attacks, as well as state exhaustion attacks targeting infrastructure such as firewalls and IPS.” 

Arbor Networks, the security division of NETSCOUT, helps secure the world’s largest enterprise and service provider networks from DDoS attacks and advanced threats.