Quantcast
Browsing all 90 articles
Browse latest View live

Image may be NSFW.
Clik here to view.

No Festi dip in LACNIC, July 2012 SpamRankings.net

There was a dip in volume from the top 20 Festi-infested ASNs starting about 15 July 2012, bottoming out 21 July 2012, except one region's ASNs did not dip. The three Latin American ASNs in the Festi...

View Article


Image may be NSFW.
Clik here to view.

India outspammed the world in September 2012 SpamRankings.net

India's BSNL-NIB beat Saudi Arabia's Saudinetstc for worst spamming organization in the world in the September 2012 , and pushing India to the top of the world country rankings. ASNs in Saudi Arabia,...

View Article


Image may be NSFW.
Clik here to view.

Data storage issues in SpamRankings.net

Data storage issues led to loss of some incoming data for the September 2012 SpamRankings.net. Interestingly, the results seem almost normal anyway. Here is a speculation on why that can be. Look just...

View Article

Image may be NSFW.
Clik here to view.

ISPs, spam, and botnets? a case in Finland

In Finland, some ISPs proactively detect spamming botnets and do something about it. A small company that does computer maintenance, "HS-Works Oy" located in Helsinki, Finland, received a computer...

View Article

Image may be NSFW.
Clik here to view.

Global Crossing spammed the most from the U.S. in September 2012...

Winner and new champion: Global Crossing's AS 3549 GBLX! GBLX won the September 2012 with almost half of all the spam from the top 10 seen in the CBL data and more than a third seen from PSBL. What...

View Article


Image may be NSFW.
Clik here to view.

KOCNET outspams Turkey, gaining on TTNET's record in September 2012...

More than two-thirds top-10 Turkish spam came from KOCNET in September 2012 for Turkey from CBL data. KOCNET's 68.5% is about the same as its 68.7% for August and more than TTNET's 65.2% for July but...

View Article

Image may be NSFW.
Clik here to view.

Botnets behind the late-month upswings in Belgium in the September 2012...

Congratulations to Belgacom, Mobistar, Uganda-Telecom and BASE Belgium for improving in the September 2012 for Belgium from CBL data! But what's behind Brutele and Mobistar and Gateway getting worse...

View Article

Image may be NSFW.
Clik here to view.

Kelihos rampage in October 2012 SpamRankings.net

What's the Kelihos rampage mentioned in the October 2012? It's a few IP addresses sending hundreds of thousands and even millions of spam messages a day. It seems to be associated with Kelihos botnet....

View Article


Image may be NSFW.
Clik here to view.

Kelihos and Maazben botnets in October 2012 SpamRankings.net

Let's look at the botnets associated with the Kelihos rampage in the October 2012. Two botnets turn up the most Maazben and Kelihos. Why call it the Kelihos rampage, then? Because CBL's detection of...

View Article


Image may be NSFW.
Clik here to view.

Why no kelihos rampage in PSBL October 2012 SpamRankings.net?

Why do the rankings from PSBL data not look much like the October 2012 rankings from CBL data in? Apparently because PSBL does not use the heuristic that CBL uses that catches the few IP addresses...

View Article

Image may be NSFW.
Clik here to view.

Kelihos and Maazben botnets in U.S. October 2012 SpamRankings.net

We've seen that botnets Kelihos and Maazben account for most of the spam seen from the entirely-new worldwide top 10 in the October 2012 Kelihos rampage. What about a specific country? The U.S. top 10...

View Article

Image may be NSFW.
Clik here to view.

Canada and Kelihos in October 2012 SpamRankings.net

The Canadian top 10 were half the same as last month and half due to Kelihos in the from CBL data for October 2012. Canadian #1 iWeb (CBL; #10 PSBL) made it into the world CBL top 10 because of...

View Article

Image may be NSFW.
Clik here to view.

Syria and Yemen: 29 November 2012

At 10:30 AM GMT yesterday, 29 November 2012, routing to Yemen suddenly changed from London to Dubai through FLAG to New York to Dubai through ETISALAT, as shown in the animation here and detailed in...

View Article


Image may be NSFW.
Clik here to view.

Belgium has a Kelihos problem in October 2012 SpamRankings.net

Belgium has a Kelihos problem in from CBL data for October 2012. #1 Mobistar's AS 12493 and #2 Telenet's AS 6848 were spewing spam from Kelihos, pushing all the other ASNs down the rankings. Kelihos...

View Article

Image may be NSFW.
Clik here to view.

Turkey and Kelihos botnet rampage, October 2012 SpamRankings.net

Turkey, likeBelgium, Canada, U.S., and the world, has a Kelihos rampage problem in from CBL data for October 2012. New Turkish #1 spammer AS 44565 VITAL TEKNOLOJI shows all the signs: rapidly...

View Article


Image may be NSFW.
Clik here to view.

OVH: Kelihos or darkmailer? November 2012 SpamRankings.net

OVH won again, more than doubling its spam spew of last month! This is in the November 2012 from CBL data. Is that 407,726,779 spam messages in a single month a record? Last month it was Kelihos. This...

View Article

Image may be NSFW.
Clik here to view.

Vital Turkey, November 2012 SpamRankings.net

Even while spamming a lot less, AS 44565 VITAL still placed #1 again for spewing spam from Turkey in the November 2012 from CBL data. Even as Vital got a handle on its Kelihos problem, AS 8386 KOCNET...

View Article


Image may be NSFW.
Clik here to view.

A Field Quasi-Experiment @ ICIS 2012

Project participant Qian Tang presented at ICIS 2012 in Orlando, FL, 14 December 2012, a paper about comparisons of eight countries, in pairs, one of each pair ranked on and the other not. Statistical...

View Article

Image may be NSFW.
Clik here to view.

Medical churn in December 2012 SpamRankings.net

Good (Konkuk), improving (Cornell), and bad (eHealth) in the December 2012 country medical. First the good news: Konkuk University Hospital went from 297 spam messages last month to zero in December...

View Article

Image may be NSFW.
Clik here to view.

Dark times in Turkey in the December 2012 SpamRankings.net

#1 AS 8685 DORUKNET, #3 AS 42910 SADECEHOSTING-COM, and #5 AS 34984 TELLCOM-AS all ran up in the last two weeks, and all three show darkmailer2. December 2012 for Turkey. DORUKNET sent a third of all...

View Article
Browsing all 90 articles
Browse latest View live