Defaced: Top Level Domains Report, December 2000


Contents:

Top Level Domain Trivia: Who isn't in the archive?

Recent debuts

Top Level Domains Seeing Recent Increasing Activity

Detailed TLD logs from the Attrition archive.


Trivia
A little while back when the conflict was heating up between Palestine and Israel on the ground and on the Net, we were asked if there was any political significance to Attrition not listing the Top Level Domain (TLD hereafter) for Palestine in our country listings page[
0]. I replied with my usual measured approach ;-) that no, the TLDs on that page are only there because we have recorded at least one defacement in our archive for that TLD. There is no political motivation for not listing a TLD: they only need be in our archive.

In fact, there are well over 100 other TLDs that Attrition has no defacements for and so don't appear in our country listing. I list them here along with the TLD abbreviation in parentheses[1]:

  1. Ascension Island (ac)
  2. Afghanistan (af)
  3. Antigua and Barbuda (ag)
  4. Anguilla (ai)
  5. Netherlands Antilles (an)
  6. Angola (ao)
  7. Antartica (aq)
  8. American Samoa (as)
  9. Azerbaijan (az)
  10. Barbados (bb)
  11. Bangladesh (bd)
  12. Bahrain (bh)
  13. Benin (bj)
  14. Bermuda (bm)
  15. Brunei Darussalam (bn)
  16. Bhutan (bt)
  17. Bouvet Island (bv)
  18. Botswana (bw)
  19. Belize (bz)
  20. Congo, Democratic People's Republic (cd)
  21. Central African Republic (cf)
  22. Congo, Republic of (cg)
  23. Cote d'Ivoire (ci)
  24. Cook Islands (ck)
  25. Cameroon (cm)
  26. Cap Verde (cv)
  27. Cyprus (cy)
  28. Djibouti (dj)
  29. Dominica (dm)
  30. Dominican Republic (do)
  31. Algeria (dz)
  32. Western Sahara (eh)
  33. Eritrea (er)
  34. Ethiopia (et)
  35. Fiji (fj)
  36. Falkland Islands (Malvina) (fk)
  37. Micronesia, Federal State of (fm)
  38. Gabon (ga)
  39. Grenada (gd)
  40. French Guiana (gf)
  41. Guernsey (gg)
  42. Gibraltar (gi)
  43. Greenland (gl)
  44. Gambia (gm)
  45. Guinea (gn)
  46. Guadeloupe (gp)
  47. Equatorial Guinea (gq)
  48. South Georgia and the South Sandwich Islands(gs)
  49. Guinea-Bissau (gw)
  50. Guyana (gy)
  51. Haiti (ht)
  52. Isle of Man (im)
  53. British Indian Ocean Territory (io)
  54. Iraq (iq)
  55. Iceland (is)
  56. Jersey (je)
  57. Jamaica (jm)
  58. Kenya (ke)
  59. Kyrgyzstan (kg)
  60. Cambodia (kh)
  61. Kiribati (ki)
  62. Comoros (km)
  63. Saint Kitts and Nevis (kn)
  64. Korea, Democratic People's Republic (kp)
  65. Cayman Islands (ky)
  66. Lao People's Democratic Republic (la)
  67. Saint Lucia (lc)
  68. Liechtenstein (li)
  69. Liberia (lr)
  70. Latvia (lv)
  71. Libyan Arab Jamahiriya (ly)
  72. Monaco (mc)
  73. Moldova, Republic of (md)
  74. Madagascar (mg)
  75. Marshall Islands (mh)
  76. Mali (ml)
  77. Myanmar (mm)
  78. Northern Mariana Islands (mp)
  79. Martinique (mq)
  80. Mauritania (mr)
  81. Montserrat (ms)
  82. Malta (mt)
  83. Mauritius (mu)
  84. Maldives (mv)
  85. Malawi (mw)
  86. Mozambique (mz)
  87. Namibia (na)
  88. New Caledonia (nc)
  89. Norfolk Island (nf)
  90. Nigeria (ng)
  91. Nepal (np)
  92. Nauru (nr)
  93. Oman (om)
  94. French Polynesia (pf)
  95. Papua New Guinea (pg)
  96. St. Pierre and Miquelon(pm)
  97. Pitcairn Island (pn)
  98. Palestinian Territories (ps)
  99. Palau (pw)
  100. Reunion Island (re)
  101. Rwanda (rw)
  102. Solomon Islands (sb)
  103. Seychelles (sc)
  104. Sudan (sd)
  105. St. Helena (sh)
  106. Svalbard and Jan Mayen (sj)
  107. Sierra Leone (sl)
  108. San Marino (sm)
  109. Senegal (sn)
  110. Somalia (so)
  111. Sao Tome and Principe (st)
  112. Syrian Arab Republic (sy)
  113. Swaziland (sz)
  114. Turks and Ciacos Islands (tc)
  115. Chad (td)
  116. French Southern Territories (tf)
  117. Tajikistan (tj)
  118. Tokelau (tk)
  119. Turkmenistan (tm)
  120. Tunisia (tn)
  121. Tanzania (tz)
  122. US Minor Outlying Islands (um)
  123. Uzbekistan (uz)
  124. Holy See (City Vatican State) (va)
  125. Saint Vincent and the Grenadines (vc)
  126. Virgin Islands (USA) (vi)
  127. Vanuatu (vu)
  128. Wallis and Futuna Islands (wf)
  129. Western Samoa (ws)
  130. Mayotte (yt)
  131. Zambia (zm)
  132. Zaire (zr)


Debuts
The following date-sorted table lists the year, month, date, TLD, and TLD abbreviation (in parenthesis) of TLDs that entered the archive since year 2000, as well as each subsequent defacement over the year. Click the TLD abbreviation in parentheses to browse the individual break outs.

    Year       Month   Date             TLD and URL to Attrition Breakouts
    2000         1   00Jan01         Virgin Islands (British) (vg)
    2000         1   00Jan23         Lesotho (ls)
    2000         1   00Jan23         Andorra (ad)
    2000         1   00Jan23         Armenia (am)
    2000         1   00Jan31         Bulgaria (bg)
    2000         2   00Feb13         Virgin Islands (British) (vg)
    2000         2   00Feb13         Cuba (cu)
    2000         2   00Feb21         Burkina Faso (bf)
    2000         2   00Feb27         Trinidad and Tobago (tt)
    2000         3   00Mar04         Lesotho (ls)
    2000         3   00Mar09         Iran (Islamic Republic of)(ir)
    2000         3   00Mar12         Egypt (eg)
    2000         4   00Apr18         Trinidad and Tobago (tt)
    2000         4   00Apr22         Egypt (eg)
    2000         4   00Apr24         Trinidad and Tobago (tt)
    2000         4   00Apr25         Andorra (ad)
    2000         4   00Apr25         Iran (Islamic Republic of)(ir)
    2000         4   00Apr28         Puerto Rico (pr)
    2000         4   00Apr28         Georgia (ge)
    2000         5   00May09         Macedonia, Former Yugoslav Republic (mk)
    2000         5   00May24         Georgia (ge)
    2000         5   00May28         Macedonia, Former Yugoslav Republic (mk)
    2000         5   00May28         Guatemala (gt)
    2000         5   00May30         Luxembourg (lu)
    2000         6   00Jun03         Sri Lanka (lk)
    2000         6   00Jun04         Mongolia (mn)
    2000         6   00Jun14         Bulgaria (bg)
    2000         6   00Jun16         Ecuador (ec)
    2000         6   00Jun25         Lithuania (lt)
    2000         7   00Jul06         Bulgaria (bg)
    2000         7   00Jul11         Guatemala (gt)
    2000         7   00Jul14         Ecuador (ec)
    2000         7   00Jul14         Armenia (am)
    2000         7   00Jul20         Zimbabwe (zw)
    2000         8   00Aug13         Armenia (am)
    2000         8   00Aug14         Ghana (gh)
    2000         8   00Aug26         Bulgaria (bg)
    2000         9   00Sep03         Bulgaria (bg)
    2000         9   00Sep04         Bulgaria (bg)
    2000         9   00Sep10         Guam (gu)
    2000         9   00Sep23         Bulgaria (bg)
    2000         9   00Sep27         Ecuador (ec)
    2000         9   00Sep30         Georgia (ge)
    2000        10   00Oct07         Trinidad and Tobago (tt)
    2000        10   00Oct08         Guam (gu)
    2000        10   00Oct11         Mongolia (mn)
    2000        10   00Oct11         Guatemala (gt)
    2000        10   00Oct15         Trinidad and Tobago (tt)
    2000        10   00Oct19         Guatemala (gt)
    2000        10   00Oct21         Bulgaria (bg)
    2000        10   00Oct27         Guam (gu)
    2000        10   00Oct28         Guatemala (gt)
    2000        10   00Oct29         Iran (Islamic Republic of) (ir)
    2000        11   00Nov04         Iran (Islamic Republic of) (ir)
    2000        11   00Nov05         Mongolia (mn)
    2000        11   00Nov08         Iran (Islamic Republic of) (ir)
    2000        11   00Nov10         Egypt (eg)
    2000        11   00Nov12         Iran (Islamic Republic of) (ir)
    2000        11   00Nov18         Guam (gu)
    2000        11   00Nov18         Guam (gu)
    2000        11   00Nov18         Guam (gu)
    2000        11   00Nov18         Iran (Islamic Republic of) (ir)
    2000        11   00Nov19         Iran (Islamic Republic of) (ir)
    2000        11   00Nov20         Iran (Islamic Republic of) (ir)
    2000        11   00Nov22         Guam (gu)
    2000        11   00Nov23         Bulgaria (bg)
    2000        11   00Nov25         Tuvalu (tv)
    2000        11   00Nov26         Tuvalu (tv)
    2000        11   00Nov30         Tuvalu (tv)
    2000        12   00Dec01         Macedonia, Former Yugoslav Republic (mk)
    2000        12   00Dec02         Faroe Islands (fo)
    2000        12   00Dec07         Macedonia, Former Yugoslav Republic (mk)
    


TLDs with recent increases in activity
No need to make the inference that this is a prediction of future activity or an alert. This list is based on past activity only. The criteria used are as follows:

The following list met that criteria. No surprise seeing Israel in the list. But despite a "cyberwar" and concerted action on the part of a good number of hacker groups, Israel still lagged Brazil in it's overall total for November.

      Brazil (br)
      Month           num.      Pct.
      Sep 2000         44      57.14  
      Oct 2000         65      47.73  
      Nov 2000         88      35.38  

      Israel (il)                   
      Month           num.      Pct.
      Sep 2000          0       -100
      Oct 2000          5          .
      Nov 2000         62    1140.00

      Mexico (mx)                   
      Month           num.      Pct.
      Sep 2000         12      50.00
      Oct 2000         18      50.00
      Nov 2000         28      55.56
    

The following list of TLDs met a more relaxed set of criteria (>10 defacements in the last period, >50% increase between the last period and the next to last period). The U.S. Government domain, despite showing up in this list, is perhaps a blip. The .gov TLD is one of the few TLDs to have fallen overall over the last year (so far, of course) with 163 defacements for 1999 versus 137 this year through the beginning of December.

      China (cn)                        
      Month           num.      Pct.      
      Sep 2000          0    -100.00	  
      Oct 2000          5          .  	  
      Nov 2000         14     180.00  	

      Indonesia (id)                  
      Month           num.      Pct.
      Sep 2000          0          .
      Oct 2000          7          .
      Nov 2000         12      71.43

      U.S. Government (gov)
      Month           num.      Pct.  
      Sep 2000          6     -25.00
      Oct 2000         11      83.33  
      Nov 2000         19      72.73
    


Attrition.org has begun keeping detailed summaries of every TLD in our archive. As many of you know, we keep a breakout page devoted to each TLD in the archive, indexed on a large table[0]. Still, it's rather difficult to get summary data from that without running it through a program or the tedium of a pocket calculator and a note pad (and some large TLDs make even that impractical). With that in mind, we have produced the TLD logs which you can browse at http://www.attrition.org/mirror/attrition/tldlogs/. Each log has a table for 1999 and 2000 with totals for each month, annual totals, and a crude ASCII plot which is there only of the barest of illustrative purposes. The log for Brazil is reproduced below:

        *****************************************************
          Total Defacements by month for br, 1999 - 2000:
          The breakout for this TLD can be browsed at:
          http://www.attrition.org/mirror/attrition/br.html
        *****************************************************


----------+-----------
    Month |    sum(br)
----------+-----------
 Jan 1999 |          0
 Feb 1999 |          1
 Mar 1999 |          1
 Apr 1999 |          1
 May 1999 |          1
 Jun 1999 |          5
 Jul 1999 |          6
 Aug 1999 |          4
 Sep 1999 |          7
 Oct 1999 |         12
 Nov 1999 |         36
 Dec 1999 |         50
          | 
    Total |        124
----------+-----------

----------+-----------
    Month |    sum(br)
----------+-----------
 Jan 2000 |         27
 Feb 2000 |         46
 Mar 2000 |         42
 Apr 2000 |         26
 May 2000 |         49
 Jun 2000 |         40
 Jul 2000 |         39
 Aug 2000 |         28
 Sep 2000 |         44
 Oct 2000 |         65
 Nov 2000 |         88
          | 
    Total |        494
----------+-----------

        ***************************************************
              ASCII Plot of br, Year 2000:
          NOTE: the vertical axis is defacements per month
        ***************************************************


      88 +  
         |                             *
         |  
         |  
    b    |  
    r    |                           *
         |  
         |            *
         |   *  *        *        *
         |                  *
      26 + *       *           *
          +-----------------------------+
          Jan 00    Month         Nov 00

  

It is hoped that you will find these useful. The update time on these will be after the end of each month and my available free time (usually within the next week or so after each month). Of course, if there is something else that you would like to see in the logs, contact me at my address below.

[0] http://www.attrition.org/mirror/attrition/country.html

[1] The official country TLD list can be found here: http://www.iana.org/cctld/cctld-whois.htm


munge@attrition.org

© 2000, 2001 Matt Dickerson for Attrition.org
Permission is granted to quote, reprint or redistribute provided the text is not altered, and the author and Attrition.org are credited. The opinions expressed in this text are not necessarily the opinion of all Attrition staff members.

To subscribe to this list, send mail to majordomo@attrition.org with subscribe defaced-commentary in the BODY of the mail.

Last modified: Sun Dec 24 10:18:04 EST 2000