Twin Kelihos infections in twin countries!
Canada
in both
CBL
and
PSBL
rankings shows
tandem spam volume curves for
Bell Canada‘s
AS577 BACOM
and for
Shaw Communications
AS6327 SHAW.
Meanwhile,
Belgium
in both
CBL
and
PSBL
rankings
shows tandem curves for
Brutele‘s
AS12392 ASBRUTELE
and for
Belgacom‘s
AS5432 BELGACOM-SKYNET-AS.
This is not a coincidence, since all four networks show Kelihos infections in the CBL data.
-jsq
| 1 | (2) | AS 8075 MICROSOFT-CORP—MSN-AS-BLOCK |
| 2 | (1) | AS 36692 OPENDNS |
| 3 | (-) | AS 26769 BANDCON |
| 4 | (-) | AS 22414 CRAIGS-NET-1 |
| 5 | (-) | AS 22822 LLNW |
| 6 | (-) | AS 10912 INTERNAP-BLK |
Beating even OPENDNS, Microsoft took #1 in U.S. PSBL June 2012 rankings.
Microsoft was last on top in the same rankings for April 2012. I thought Microsoft was a leader in Internet security?
In other news, Bell Canada’s AS 577 BACOM actually dropping off the Canadian June 2012 rankings from CBL data. Shaw took #1 and Iweb dropped to #2.
We have a new medical winner! It’s
Hartford Hospital’s AS 11047 HHCC-ASN1. Gaining altitude at the end of the month was Joan and Sanford I. Weill
Medical College and Graduate School of Medical Sciences of Cornell University with AS 20252 JSIWMC.
More on those and other developments in later blog posts.
-jsq
Snowshoe spam took #1 in Canada again, through AS 32613 IWEB-AS,
on the
May 2012 SpamRankings.net.
That was the first week of a spam plateau per ASN.
The next week saw a platau for AS 33139 CANACA-210.
And the next week it was AS 6407 PRIMUS.
Canada, land of spam plateaus!
Does this mean spammers are shifting from ASN to ASN for successive
weeks of spam campaigns?
The old-time winners, AS 6327 SHAW and AS 577 BACOM, kept spamming
away, and came in #2 and #6 again.
That’s in the
rankings from CBL data.
In
rankings from PSBL data,
IWEB, SHAW, and BACOM were #1, #2, and #3.
We actually saw less spam in May (CBL data) from Bell Canada’s BACOM
than for any month since March 2011, the first month of rankings for SpamRankings.net.
Congratulations Bell Canada!
The rest of the top six were upstarts, not much seen until recently. Iweb did make a bid for the top back in September 2011, but its recent predominance dates only from February of this year.
-jsq
Two ASNs had big spurts of spam in September.
iWeb’s AS 32613 got to second place in the last two weeks of the month.
Like in August, IPWorld’s AS 19875 did one big spam spew,
but this time it almost doubled its closest competitor,
breaking 100,000 messages!
What is making Canada suddenly attractive to spammers?
-jsq