Tag Archives: theplanet

What We Learned at ThePlanet (AS21844)

After months of looking into the infections of AS21844 (ThePlanet) we've decided to wrap up our investigations for now.  We have learned quite a bit from our communications with customers at ThePlanet.  While no one from ThePlanet has spoken with … Continue reading

Tagged , , , | Comments Off

A Detailed Look at ThePlanet’s Infection Distribution

A reader asked a question in the comments of the previous blog post about ThePlanet regarding the distribution of infections.  The reader wanted to know if the rest of the infections not attributed to Skenzo and HostGator were evenly distributed … Continue reading

Tagged , , , | Comments Off

Update on ThePlanet and Hostgator

Last month we started an investigation into the massive numbers of infections we saw on ThePlanet’s AS21844 network. Last week we discovered the Rwhois server at ThePlanet and were able to get a more fine grained view of the infection … Continue reading

Tagged , , , , | 3 Comments

Update on Sustained Infections at ThePlanet (Skenzo and Host Gator)

I’ve been working on my investigation of ThePlanet and have some new and interesting results. Skenzo has some valid concerns. They monetize abandoned domain names and apparently inherited a bunch of abandoned badware URLs. When Google rescans a site on … Continue reading

Tagged , , , | Comments Off

Update: Sustained Infections at ThePlanet

Last week I wrote about infections which seem to plauge web host ThePlanet. A lot of information has come in since then that explains a bit of what is going on. First I have not received any official communications from … Continue reading

Tagged , , , , , | 3 Comments

Infections continue to plague ThePlanet

Earlier this month I started investigating the infections which continue to plague ThePlanet. As you can see in the chart I linked to they have sustained over 10,000 infections for several months now. In my research I found that many … Continue reading

Tagged , , | 1 Comment

Prevalence in web infections

I’ve been very interested in applying epidemiology to the world of malware lately. Prevalence is quite simply the number of infected in a given population at a specific time. More specifically it is a ratio of infected over the number … Continue reading

Tagged , , , | 2 Comments

October infected network stats

In June we released "a report":http://www.stopbadware.org/home/badwebs with numbers from late May, showing the network blocks containing the largest numbers of badware sites reported by Google. We released updated in "July":http://blogs.stopbadware.org/articles/2008/07/30/updated-infection-stats and "August":http://blog.stopbadware.org/2008/08/25/top-infected-network-blocks-for-mid-august. Here is another update from early October: |_.# … Continue reading

Tagged , , , , , , | Comments Off

StopBadware identifies hosting providers of largest numbers of sites in Badware Website Clearinghouse

StopBadware recently analyzed 49,296 sites which were submitted by trusted third parties to our Badware Website Clearinghouse. We identified five web hosting companies with the largest number of infected sites residing on their servers: • iPowerWeb, Inc., (10,834) • Layered … Continue reading

Tagged , , , , , , | Comments Off