Group-IB and HostExploit have published the Top 50 "Worst Networks and Hosts"
The report shows that the highest levels of malicious activity are observed in the autonomous systems of Lithuania.
Group-IB, an information security incident investigation company, and the HostExploit community published a ranking for the third quarter of 2011 titled "Top 50 Worst Networks and Hosts." The company's analysis revealed that the largest increase in malicious activity was observed in Lithuania's autonomous systems.
As a reminder, HostExploit has been publishing reports on the threat level of hosts and networks for two years now. Based on research conducted by community specialists, a list of the most dangerous hosts and networks from which malicious activity is conducted is compiled.
During the study, specialists analyzed 39,056 registered autonomous systems, which is 1,056 more than in the second quarter of 2011.
The American hosting provider AS33626Oversee.net topped the "Worst" list. Its HE Index (Host Exploit Index) was 292.7. This provider also ranked first in the "Malware" and "Infected Websites" categories.
This isn't the only US representative on the list. The "prize-winning" third place went to the American autonomous system AS10297 eNET Inc, which also ranks first in the "Phishing Servers" category. However, experts note that the level of malicious activity in American autonomous systems decreased in the third quarter. This is evidenced by the fact that only 16 American hosts made the list in the third quarter of 2011, while in 2010 there were 23.
The Lithuanian AS47583 Hosting Media demonstrated the highest level of malicious content (22,610.1%), ranking second on the list. It also ranked first in the "Botnets" and "Exploit Servers" categories.
Five Russian systems made it into the ranking, compared to only three in the second quarter. Russian hosting providers rose the most in the "Spam" category. A positive achievement was the breakout of AS41847 Webalta from the top ten, which reduced its malicious activity.
Some autonomous systems showed significant positive results in terms of reducing cybercriminal activity in the third quarter. For example, the HE Index of Serbian hosting provider AS50693 Konsing Group fell by 99.1%. Australian autonomous system AS38333 Symbio-AS-AU-AP rounded out the rankings with the lowest level of recorded malicious activity and a HE Index of 0.37.
