According to Akamai’s (NASDAQ:AKAM) Fourth Quarter 2010 State of the Internet report, attack traffic flowing out of Russia represented 10 percent of all observed global attack traffic. In contrast, the U.S accounted for 7.3 percent of attack traffic.
While Akamai sees the attack traffic coming from a specific country, there is the possibility that there is a deeper origination point.
“From our perspective the attacks are originating in Russia but we’re only seeing the IP addresses making a request to us,” David Belson, Editor of the Akamai State of the Internet report told InternetNews.com. “So it could be that the attacks are coming from somewhere else and are being proxied or forwarded through Russia.”
Belson noted that the top attacked port from Russia is port 445, which doesn’t set them a part from any other place in the world. Port 445 is used for Microsoft DS (Directory Services) and was the most attacked port in the world, representing 47 percent of attack traffic.