Twin Kelihos infections in twin countries!
Canada
in both
CBL
and
PSBL
rankings shows
tandem spam volume curves for
Bell Canada‘s
AS577 BACOM
and for
Shaw Communications
AS6327 SHAW.
Meanwhile,
Belgium
in both
CBL
and
PSBL
rankings
shows tandem curves for
Brutele‘s
AS12392 ASBRUTELE
and for
Belgacom‘s
AS5432 BELGACOM-SKYNET-AS.
This is not a coincidence, since all four networks show Kelihos infections in the CBL data.
-jsq
Easyhost's
AS 49512 tripled its spam, sending 97% of the total top 10 spam
in the
January 2013
for
Belgium.
Easyhost did start dropping in the last week.
Nucleus BVBA's
AS 39318 came up from nowhere to #2 with more than a million spam messages,
mostly in the last week.
And
Stone Internet Services'
AS 39234 dropped like a rock, from 9,149 spam messages last month for #8,
to only 2,944 this month and #20.
-jsq
Belgium has a Kelihos problem in
from CBL data
for October 2012.
#1 Mobistar’s AS 12493 and #2 Telenet’s AS 6848 were spewing spam from
Kelihos, pushing all the other ASNs down the rankings.
Kelihos rampage: it’s not just for
north America!
A few other botnets have a bit of Kelihos, but only the top 2 for Belgium are part of the Kelihos rampage. (Newcomer AS 9031 EDPNET has a Cutwail problem.)
-jsq
Congratulations to Belgacom, Mobistar,
Uganda-Telecom
and BASE Belgium for improving in the
September 2012
for
Belgium from CBL data!
But what’s behind Brutele and Mobistar and Gateway getting worse at the end of the month?
And what about Teledis, which is worse over the whole month, but better at the end?
For AS 12392 ASBRUTELE, the problem the whole month is Lethic botnet with a little Festi:
Continue reading
Some good news for
Belgium!
Stone Internet Services’ AS 39234
decreased spamming by 95% in May 2012,
dropping from 8,212 on May Day to 321 on 28 May.
In the other direction, Brutele’s AS 12392 went from 2,220 on 3 May to 6,207 on 30 May, an increase of 279%.
And 
Uganda Telecom’s AS 21491 started up like a rocket at the end of
the month, going from 1,046 on 26 May to 4,213 on 31 May, a 300% increase.
Now all these numbers are just samples by CBL, hints and whispers of the total amount of spam flying around the net. But when the curves move that fast, usually something is going on.
-jsq