Re: Speaking of filtering, was Research-y (IPv6)

On Mar 27, 2013, at 1:30 AM, Kurt M <[email protected]> wrote:

> Compile a yearly, for news people readable, "State of the Spam" and get a
> Ralph Naderish spokesman. If done right, it can prove to be a real incentive
> for ISP's to ID customers having spambots etc.
> 
> Can't be done?

What a great idea! Oh, wait.

http://www.spamhaus.org/statistics/networks/

The World's Worst Spam Support ISPs
As of 27 March 2013 the ISPs with the worst Abuse Departments and consequently the worst reputations for knowingly hosting illegal spam operations are:

1
cb3rob.net	Number of Current Known Spam Issues: 127

2
hinet.net	Number of Current Known Spam Issues: 120

3
idear4business.net	Number of Current Known Spam Issues: 77

4
ovh.net	Number of Current Known Spam Issues: 77

5
iliad.fr	Number of Current Known Spam Issues: 70

6
airtel.in	Number of Current Known Spam Issues: 53

7
telefonica.com.br	Number of Current Known Spam Issues: 52

8
chinanet-gd	Number of Current Known Spam Issues: 52

9
cat.net.th	Number of Current Known Spam Issues: 50

10
uplus.co.kr	Number of Current Known Spam Issues: 50


http://hostexploit.com/downloads/viewdownload/7/46.html
Abstract

As malware continues to evolve, and cybercriminals continue to learn, one particular fundamental remains constant – almost all malicious threats are physically hosted somewhere. For this reason, it remains as important as ever to examine hosting practices and standards and consider how they can be improved.

One such way is to measure levels of cybercriminal activity on servers around the world, and attempt to quantify the results. Such has been the aim of HostExploit’s World Hosts Report (formerly Top 50 Bad Hosts) since publication began in 2009. The quarterly reports examine all 43,000+ publicly-routed Autonomous Systems in the world, gathering data on infected websites, botnets, spam and other activity, before combining the research with trusted community sources and analyzing the results.

The report makes suitable reading for service providers, security professionals, webmasters and policymakers alike. For the most part, the reader is left to draw their own conclusions, as numbers speak for themselves. However, it should be stressed that most malicious content is not hosted knowingly – often it is as a result of inaction, and sometimes hosts can be the victims.

This quarter we see the return of Dutch hosting provider Ecatel to the #1 rank, having held the position at various times in the past. Ecatel does not top the rankings for any particular category of activity, but rather for a consistently poor showing across the board.




http://www.spamrankings.net
Which organizations send the most spam?

February 2013 Monthly  World ∀ All  from CBL Volume 
(Previous Month)

			
1	(1) 	AS 16276 OVH	 FR
2	(23) 	AS 17447 NET4INDIA	 IN
3	(27) 	AS 21844 THEPLANET-AS	 US
4	(4) 	AS 7643 VNPT-AS-VN	 VN
5	(215)	AS 6724 STRATO	 DE
6	(17) 	AS 15201 UOL	 BR
More...
AS 16276 OVH is still #1 but is finally getting a grip on its spam problem.

OVH was down from 19 million spam messages a day (38 million the previous month) to 2 at the end of February. AS 8685 DORUKNET also got a grip on its darkmailer2 problem. No worries for darkmailer2, though: all the other top 10 are infested by it, and all but AS 7643 VNPT-AS-VN got worse.



Both OVH and VNPT kept their former ranks yet spammed less. Only DORUKNET spammed less and improved its rank. The other seven all spammed more.
Rank (Previous)	Organization	Country	Volume	Vol%
1	(1) 	OVH Systems
www.ovh.com/fr/index.xml 
AS 16276 OVH	 FR	284,910,621 
(742,589,700)	17%
2	(23) 	Net4India Ltd.
www.net4.in/ 
AS 17447 NET4INDIA	 IN	200,028,259 
(90,959,551)	12%
3	(27) 	ThePlanet.com Internet Services Inc.
www.theplanet.com/ 
AS 21844 THEPLANET-AS	 US	194,914,540 
(64,029,949)	11.7%
4	(4) 	Vietnam Posts and Telecommunications (VNPT)
www.vnpt.com.vn/ 
AS 7643 VNPT-AS-VN	 VN	180,285,185 
(277,278,999)	10.8%
5	(215) 	Strato AG
www.strato.de/ 
AS 6724 STRATO	 DE	144,373,753 
(3,464,796)	8.63%
6	(17) 	Universo Online Ltda.
www.uol.com.br/ 
AS 15201 UOL	 BR	138,311,682 
(112,300,746)	8.27%
7	(-) 	CTI Systems
www.ctisystems.com/ 
AS 41288 CTISYSTEMS-AS OOO	 UA	137,266,800 
(-)	8.21%
8	(88) 	Korea Telecom
www.kt.com/eng 
AS 4766 KIXS-AS-KR	 KR	134,142,424 
(19,428,991)	8.02%
9	(3) 	DorukNet IstanbulTurkey
www.doruk.net.tr/ 
AS 8685 DORUKNET	 TR	131,685,436 
(324,544,788)	7.87%
10	(60) 	Hanaro Telecom Inc.
www.skbroadband.com/eng/ 
AS 9318 HANARO-AS	 KR	126,776,114 
(34,711,361)	7.58%
 	Total		1,672,694,814	100%