Channel Register

Almost half of malicious sites tied to 10 networks

Sam

I wonder.. 

OIX (aka Phorm) wouldn't be one of them?

Neil Greatorex

I blame Microsoft 

Coat

Just because I can :-)

I'm gone already.

Anonymous Coward

Hmm 

Thumb Down

I thought it was USA, Canada, Chine ten the rest of the world? (as prime malware sources. Maybe some sites bounce via china? I believe some Canadian sites used to bounce via Russia again to lose trail of the malware source).

Joseph Haig

10 networks? 

Coat

I'm glad I stick to 192.168 networks.

Dave

Not just websites 

I looked at my firewall log and the number of packets blocked from the 24.64.0.0 netblock exceeds the number of blocked packets from all other IP addresses. So on a sample of 1, 50% of blocked packets are attempts at messenger spam (ports 1026,1027,1028) from that netblock. Perhaps Shaw Cable could address this issue. Certain other specific blocks also feature frequently, so they're not the only ones.

Gary Heston

Give me the IP blocks! 

Flame

I can't block them by AS number, I can't block them by AS name, give me the blasted IP address blocks so I _can_ block them!

netgeek

Anonymous Coward

I beg to differ 

In my experience most SPAM comes from the US, Turkey or sometimes Russia. It looks to me like some US people are compromising Chinese sites to spread malware if you follow the chain back.

Of course it's popular in the US to blame the Chinese. Of course your network admin could always block all Chinese sites........

Dr Patrick J R Harkin

Ten networks? I thought there was just one big one... 

"Ten networks" in the title become "ten registrars" in the text. I freely admit I have no idea how many registrars would account for half of any selection of sites, so I don't know if 10 is a surprisingly large or small number.

Dave N

here's an idea... 

Paris Hilton

how about releasing the ip ranges of those networks so we can block them?

Anonymous Coward

I've been saying this for years.... 

Pirate

... spam-filters, whitelists, blacklists, the lot - it's all a complete waste of time. It's time to take this fight offline and into the IRL world.

There are only a small number of people engaged in serious spamming and virus attacks, and they all have names and addresses in the real world. The rest of us outnumber them a million to one. We should just kill them all. One quick night of the long knives, and the whole problem is solved for at least a generation.

Andy Worth

Block China and the USA? 

If we block all of the U.S. and Chinese websites, most of the spam problem will be gone!!

It'll also have the added bonus of ridding our shores of that Facebook thing.

Dan Keating

China 

Linux

Not surprising China gets a mention. After analysing the IP addresses of people trying to relay off my mail server I found that I could kill 95% of the problem by blocking addresses from this country. Subsequent checking of the logs shows all manner of IP detritus seeking to find "exploit nirvana" on my humble fixed IP.

Perhaps I have it all wrong and the friendly folk of that nation are just trying to reach out and touch the western community in anticipation of forthcoming olympic games!

Dave Edmondston

Hmm... 

Happy

There is an easy solution to get rid of phishing websites.

Just click on:

http://www.thisisnotaphishingwebsitehonestguv.com.eu:8982/stupidcnut.php

and input your bank details when prompted. Hey presto, all phishing'll stop. They sell really good viagra 'n all.

Andy Worth

Re:Hmm... 

I tried to go to that site but they'd ran out of Viagra. Stuck my bank details in anyway, as the site said it would guarantee me cheaper shopping on my next visit.

Doug Lynn

Google responsible for 2% that nothing! 

Hi, they must be doing a good job filtering them out, being the biggest search engine otherwise it would be 100%.

Mark Simon

Great Firewall of China 

Here's an idea. Why don't we turn China's firewall backwards. That way, we're protected from all of their malware, and they can find out what's happening in the real world, including the rest of China ...?

Anonymous Coward

Question for those who know... 

Would it be easier to manage this crap in an IPv6 world?

Eric Pinkerton

Would it be easier to manage this crap in an IPv6 world? 

Alert

My guess is we will just acrrue a whole host of new problems!