Comments on: 2% of Internet Traffic Raw Sewage

By: DDoS’s make up 2% of all traffic in the tubes. « Bastard Sheep

DDoS’s make up 2% of all traffic in the tubes. « Bastard Sheep — Thu, 25 Feb 2010 00:13:53 +0000

[...] now says those attacks account for about two percent of internet traffic, with peaks of up to five [...]

By: The end of bandwidth socialism. - Page 4 - SLUniverse Forums

The end of bandwidth socialism. - Page 4 - SLUniverse Forums — Thu, 05 Feb 2009 23:09:22 +0000

[...] 4% of all internet traffic either DDOS packets or spam email [...]

By: As 7 pragas da internet « O Buraco Branco

As 7 pragas da internet « O Buraco Branco — Sun, 23 Nov 2008 01:49:23 +0000

[...] Só para você ter uma idéia, estima-se que 96% dos e-mails enviados no mundo são Spams, o que corresponde a uma média entre 2% a 5% de todo tráfego de informação da internet! [...]

By: Here comes the government to fight cybercrime! [shudder] | Network Administrator | TechRepublic.com

Wed, 14 May 2008 02:28:36 +0000

[...] 2% of Internet Traffic Raw Sewage (Arbor Networks) [...]

By: Danny McPherson

Danny McPherson — Fri, 04 Apr 2008 23:46:17 +0000

Yang Chung,
Yes, most of these attacks do exhibit properties (e.g., multiple synchronized attack sources, common attack vectors, multiple source ISPs, well distributed source locations, etc..) that would suggest they are the work of bots. Bots are used for an array of malicious activities today, most of the interesting typically being associated with some economic motivations. Bots are indeed trivial to obtain today, either directly or through leased partitions from other bots. Have a look back through other entries here and on linked blogs for some more information about this.

By: Yang Chung

Yang Chung — Fri, 04 Apr 2008 20:48:44 +0000

I am just curious….

Are these attacks mostly generated using botnet(s)? How easy is it for a reasonably tech-savvy person or kid to recruit his/her own bots? What do you think are motives behind these attacks?

Thanks,

By: Danny McPherson

Danny McPherson — Thu, 03 Apr 2008 21:48:24 +0000

Chris,
I probably shouldn’t have used that phrase as folks that have taken a statistics class might misinterpret it. The point that I was attempting to convey was indeed “big enough to be meaningful”, specifically, that 1.5Tbps of inter-domain traffic across 68 ISPs is a lot, and significantly more than any other analysis of this type performed to date. As for “statistical significance”, well, when we issue a complete report we’ll attempt to quantify and qualify precisely what we believe this dataset represents.

By: Chris

Chris — Thu, 03 Apr 2008 11:55:31 +0000

Danny:

On the 1.5Tb/s being statistically significant – are you using “statistically significant” as a synonym for “big enough to be meaningful”, or is there some sort of sampling issue here that I am missing? Not trying to be an annoying nit-picker (really!), just trying to understand the methodology better.

Thx.

By: Internet has a trash problem, researcher says | InfoWorld | News | 2008-04-01 | By Robert McMillan, IDG News Service

Tue, 01 Apr 2008 18:37:54 +0000

[...] Arbor’s data show other trends too. Attacks drop off during Christmas and New Year’s, perhaps while the attackers are “hungover or expending their spoils,” McPherson wrote in a blog posting. [...]

By: Petr Ruzicka

Petr Ruzicka — Tue, 01 Apr 2008 10:42:14 +0000

Hi, interesting data !
From testing of IronPort product in our customer infrastructure we see 80-90 % of all mail that hits their MX boxes is spam (sometimes as high as 97 %). So 66 % is, well, a much smaller number.
In typical enterprise about 1-5% of mail is clean, in SP or portal scenario up to 12 %. Rest is garbage.