iStock_000003398416XSmall_keepenemiescloser_0211-120x95

Beware! DNS Changer’s IP Blocks are re-allocated and advertised!

From Senki.org …. By bgreene On August 10, 2012 · As of Friday morning (August 10, 2012), the IP address blocks used by the Rove Digital criminal operations have been re-allocated by RIPE-NCC and advertised to the Internet: http://www.ris.ripe.net/cgi-bin/lg/index.cgi?rrc=RRC001&query=1&arg=85.255.112.0%2F20 http://www.ris.ripe.net/dashboard/85.255.112.0/20 (Read full blog here)

iStock_000003398416XSmall_keepenemiescloser_0211-120x95

DCWG Ends Clean DNS Function

On 12:01 Eastern Time on Monday July 9th 2012, the DCWG stop responding to DNS queries from infected machines. This is in compliance with the US Justice Department Court Order authorizing the clean DNS servers. At 12:23 Eastern Time on Monday July 9th 2012, the server started to reply to all DNS request with an Read More

Victim Count - July 8, 2012

Last Day of DCWG Data

July 8th 2012 is the last day we collect DNS data on the DNS Changer Victims. The total “unique IPs” and last day of infections per DNS Top Level Domain Country Code (TLD CC) are linked below. Now that this phase of the remediation exercise is over, researchers will collect all the data and compare Read More

datagram_128 copy

Updated DNS Changer Infection Data

Lots of people have been asking for updated data. Thanks to one of our volunteers, we have the latest dump:   Daily Unique IPs connecting to the clean DNS servers up to June 27th 2012 – dcwg-unique-ips-up-to-June-27 Daily Unique IPs in July 2012 – dcwg-unique-ips-July-2012 Current List of Infections by Top Level Domain Country Code Read More

datagram_128 copy

DNS Changer – Top 25 ASNs

Top 25 ASNs seen on Monday, June 11th who have DNS Changer infections communicating with the DCWG Clean DNS servers. +——-+————+ | asn   | unique_ips | +——-+————+ | 9829  |      15568 | | 3269  |      13406 | | 7922  |      11964 | | 3320  |       9250 | | 7132  |       6743 | | 3215  |       Read More

datagram_128 copy

Top DNS Changer Infections by Country

Here is our latest country based on Country codes for Monday, June 11th:   +—-+————+ | cc | unique_ips | +—-+————+ | US |      69517 | | IT |      26494 | | IN |      21302 | | GB |      19589 | | DE |      18427 | | FR |      10454 | | CN |      10304 Read More