Saturday, June 12, 2010

Spamhaus Blacklist visualized with Splunk

I was interested in how the Spamhaus blacklist works, so I ran a Splunk search for 5 Minutes and generated a map with the results.

Every dot is at least one IP-Address listed (high probability of an infected machine). Impressive...

(Click to enlarge...)

No comments: