📢 In case you missed it….we recently published a detailed piece on the 'Anatomy of Bulletproof Hosts' - exploring how these services are evolving and what it means for the threat landscape. In this blog, we cover: - The decline of monolithic bulletproof hosts - The shift toward separation of liabilities - The growing abuse of trusted services - And what’s next for the threat ecosystem 👉 Read the full post here:

Resources | The anatomy of bulletproof hosting – past, present, future | Spamhaus Project

❗Latest Spamhaus DROP listings - representing the worst of the worst IP traffic: 👉 SBL689777 - https://check.spamhaus.org/results?query=SBL689777 👉 SBL689721 - https://check.spamhaus.org/results?query=SBL689721 👉 SBL689720 - https://check.spamhaus.org/results?query=SBL689720 👉 SBL689719 - https://check.spamhaus.org/results?query=SBL689719 👉 SBL689718 - https://check.spamhaus.org/results?query=SBL689718 👉 SBL689717 - https://check.spamhaus.org/results?query=SBL689717 👉 SBL689716 - https://check.spamhaus.org/results?query=SBL689716 👉 SBL689706 - https://check.spamhaus.org/results?query=SBL689706 👉 SBL689704 - https://check.spamhaus.org/results?query=SBL689704 Avoid connecting with these at all costs ✋ ⤵️

📈 We’re continuing to see IPs being abused by residential proxy networks, and there’s no sign of it slowing down. Ending up part of one can be a nightmare, not to mention the risk of getting listed on our side. If you discover your IP has been listed because it’s part of a residential proxy network, you'll no doubt have questions: What exactly is a residential proxy? How did my IP get pulled into this? And how do I fix it? 🤯 Don't worry, we are here to help. ⤵️ ⤵️

digitalocean[.]com is currently the #1 network hosting #botnetCCs, with 153 detections over the last 30 days. It’s disappointing to see so many major global networks still appearing in this Top10. But why does this keep happening? 🤔 Earlier this year, we explored the root causes behind this ongoing issue and what networks must do to break the cycle - learn more here ⤵️

Botnet Spotlight | Networks Hosting Botnet C&Cs: Same Players, Same Problems | Blog

Spamhaus #ReputationStatistics 👉 https://www.spamhaus.org/reputation-statistics/networks/botnet/

Meet the 🔝 5 URL leaderboard contributors (last 30 days)! 🏆 🏅Contributor: N147 - over 100,000 URLs! 🏅Contributor: LP31 🏅Contributor GF24 🏅Contributor: EL67 🏅Contributor: MM89 Amazing efforts - THANK YOU to all our amazing contributors for your continuous support and submissions! 🙌✨ Did you know you can change your name on the leaderboard? It only takes a minute to review your 'Display Name' and give consent to share it on the leaderboard. Login here: 👉

The Spamhaus Project

This week, everywhere you look, bulletproof hosting (BPH) is in cyber news headlines. From the CrazyRDP takedown, to sanctions against entities adjacent to Aeza, and most recently Media Land LLC and ML[.]Cloud] LLC (do these measures actually move the needle?), to new CISA guidance on mitigating BPH activities.🛡️ It’s clear the spotlight is firmly on one of cybercrime’s most persistent enablers. And for a good reason. Few infrastructures have enabled so much criminal activity, for so long, with such resilience. Spamhaus has tracked BPH operators and their evolving tactics for decades. 🕵️ We've watched the ecosystem shift from monolithic BPHs to layered and complex business structures. So, amid the sensational headlines, we’ve compiled a grounded look at the topic, covering: the history, the current landscape, and where the threat landscape is likely to head next. Read it in full here 👉

Resources | The anatomy of bulletproof hosting – past, present, future | Spamhaus Project

#Bulletproofhosting #Cybercrime

ENDGAME 3.0 REMEDIATION | Following on from the 📢 announcement last week Spamhaus is now sending notification emails 📩 to ISPs associated with infected machines. Here's what to do if you receive one: ⤵️