Table 5 Features of each group
From: Neighborhoods and bands: an analysis of the origins of spam
Group 1 | Group 2 | Group 3 | Group 4 | |
|---|---|---|---|---|
ASes | 2,064 | 449 | 359 | 354 |
Msgs (x10 6) | 379 | 2,602 | 88 | 907 |
No. IP Addresses | 8,426 | 16,024 | 11,503 | 301,760 |
Msgs/IP (x10 3) | 45.0 | 162.4 | 7.6 | 3.0 |
Activity 1 | 48.8 | 63.4 | 67.1 | 85.3 |
Msgs-SMTP | 85.3% | 1.5% | 71.4% | 29.2% |
Msgs-SOCKS | 13.5% | 75.3% | 23.2% | 50.3% |
Msgs-HTTP | 1.2% | 23.2% | 5.4% | 20.5% |
Msgs-Xbl | 81.9% | 1.7% | 68.6% | 20.0% |
Msgs-Pbl | 2.8% | 1.4% | 52.0% | 76.8% |
Msgs-No-Bl | 17.2% | 97.2% | 15.0% | 11.7% |
IPs-Xbl | 83.5% | 13.2% | 64.7% | 16.5% |
IPs-Pbl | 5.2% | 12.9% | 86.6% | 89.5% |
IPs-No-Bl | 15.2% | 77.7% | 7.1% | 8.8% |
Volume (TB) | 1.2 | 7.55 | 0.36 | 4.98 |
IPs-SMTP | 97.43% | 84.62% | 99.19% | 89.01% |
IPs-SOCKS | 2.67% | 15.27% | 0.82% | 11.12% |
IPs-HTTP | 0.33% | 9.52% | 0.02% | 3.44% |