The Ant Bed

• 49 phishing servers

• mostly found by Websense

• with routing paths to each

• Looks like an ant bed.

• For each ant we know:

  • address
  • domain name where reverse DNS work
  • routing
  • likely geographical location
  • performance