According to Akamai's fourth quarter "2010 State of the Internet" report, Russia has the dubious honor of being the top source of Internet attack traffic in the world. eSecurity Planet reports that Russia represented 10 percent of all observed global attack traffic. The study focused on port level attacks and is not a measure of spam origination.
2010 Security Threats in Review
2010 was a year full of security-related events of all shapes and sizes.
Akamai notes that Russia may not be the ultimate origination point. David Belson, the editor of the report, says:
From our perspective the attacks are originating in Russia but we're only seeing the IP addresses making a request to us ... So it could be that the attacks are coming from somewhere else and are being proxied or forwarded through Russia.
The top attacked port from Russia is port 445, which is used for Microsoft DS (Directory Services) and was the most attacked port in the world. Attacks on port 23 (Telnet) made up 11 percent, while port 22 (SSH) represented 6.2 percent.