A study by the University of Twente’s Centre for Telematics and Information Technology (CTIT) focused on “Bad Neighbourhoods” on the internet. The study’s author Giovane Moura claimed that like in the real world, the internet has also “bad neighbourhoods” whose streets are not safe and where crime rates are higher than in other districts.
Moura has carried out the first systematic investigation of malicious hosts, by monitoring and analysing network data. He worked out that malicious activity is indeed concentrated in limited zones. In those regions IP addresses show strong similarities, per ISP, or even per country.
At one ISP more than 62 per cent of the addresses were related to spam. Spam comes mainly from southern Asian countries, while phishing occurs primarily in the United States and other developed countries. This is because phishing requires data centres and cloud computing providers.