Geolocalization of proxied services

Table 1. Results of our geolocalization experiments on fast-flux domains retrieved by the honeypot, which means that their IP addresses were known and could be used for validation (download the raw data here).

Fast-flux Domain Lon Lat Err. Dist. (km) Total Proxies Avg. Proxies
pizdw. antiterrornetwork. com 8.32 47.23 586.22 193 52
rovsuu. photoblogsite. com 19.0 47.47 691.06 198 50
besthandycap. com 6.16 48.75 377.20 165 54
smsclubnet. com 8.32 47.23 586.22 206 66
thehandygal. com 8.53 47.38 576.74 171 51
iv. antiterrornetwork. com 19.06 47.47 691.06 190 51
micoa. smsluogo. com 2.06 48.59 444.11 168 45
handyphoneworld. com 7.36 46.75 614.48 162 53
miosmsclub. com 8.53 47.38 576.74 204 61
superhandycap. com 8.54 47.37 577.49 166 49
orldlovelife. com 11.61 49.03 406.81 178 47
easyworldnews. com 8.54 47.37 577.49 191 47
mweqd. smsinlinea. com 15.78 51.98 173.17 176 46
terrorfear. com 9.91 52.84 237.71 189 47

Table 2. Results of our geolocalization experiments on fast-flux domains, whose server was unknown (download  the raw data here).

Fast-flux Domain Lon Lat Total Proxies Avg. Proxies
smsdiretto. com 16.93 51.1 365 48
fieopowc. cn 6.56 46.59 108 34
antiterroralliance. com 11.23437 53.00485 252 52
yourvalentineday. com 19.68416 49.10418 327 48
downloadfreesms. com 19.0622 47.4744 253 50
mobilephotoblog. com 18.5524 47.46357 290 49
antiterroris. com 10.70882 51.76834 194 54
greatsalesavailable. com 8.153546 51.27834 249 52
bestusablog. com 19.0622 47.4744 214 54
virtualesms. com 18.067 59.3495 360 48
bestjournalguide. com 6.623037 50.605 234 50
smspianeta. com 21.0104 52.2207 354 54
mature-porn-gate. com 13.725 51.026 92 36
uetrrnmexe. cn 44.46096 5.973663 182 37
nuovosms. com 4.494378 48.09958 293 52
butelor. com 14.3052 46.0319 57 30
cippdgtt. cn 8.32 47.23 30 29
usabreakingnews. com 9.619635 51.22773 319 43
boarddiary. com 16.9946 51.1635 206 54
terrorismfree. com 8.32 47.23 347 53
freecolorsms. com 12.95779 52.16305 269 52
freeservesms. com 16.9165 52.4118 290 57
cum-on-mature. tv 37.41363 4.10883 63 29
cum-on-virgins. com 1.466575 -17.53312 47 27
sispewtr. cn -0.62538 36.94994 145 47
urbanfear. com 11.052 47.70604 339 53
chinamobilesms. com 8.54513 47.3794 228 56
truitef. com 14.3052 46.0319 192 41
fearalert. com 16.93 51.1 271 58
terroralertstatus. com 1.240312 47.98294 322 45
antiterrornetwork. com 16.9165 52.4118 213 55
bestblogdirect. com 13.85345 52.43042 212 52
returnmexie. cn -35.41772 16.34555 177 43
blogsitedirect. com 12.04602 54.28237 192 50
photoblogsite. com 5.379811 46.4502 316 44
globalantiterror. com 13.94111 47.81656 236 51
iwwmkkdi. cn 6.56 46.59 114 47
old-and-girl. net 13.725 51.026 121 32
mature-sperm-lovers. com 10.59284 28.73006 127 36
blogginhell. com 14.50167 50.52589 226 58
bestlifeblog. com 16.9165 52.4118 191 53