DDoS Threat Report 2017 Q3

A significant rise in network time protocol (NTP) amplification attacks – 10 times more than the same period in last year.

• The volume of NTP Amplification attacks rose some 425% over Q2, with the largest recorded size of 25Gbps and 7Mpps.
• Overall, the number of attacks increased 15.6% compared to Q2.
• UDP-based attacks jumped sharply (68.7%) over Q2, a finding consistent with the focus of last quarter’s threat report.
• UDP-based Flood, NTP Amplification, and HTTP Flood were the three most common vectors, respectively constituting 21.6, 15.2, and 12.8% of total attack vectors in the quarter.
• Multi-vector attacks were predominant with 54.7% of the total. The most popular multi-vectors combined two vectors, most notably UDP-Flood blended with NTP Amplification, TCP SYN Flood, and ICMP Flood.