Some stats about IPs that have been flagged as malicious/proxies for > 15 days (part of the raw.githubusercontent.com/antoinevastel/ blocklist).
It contains some American/Canadian residential IPs that have been flagged for > 15 days.
Conversation
Autonomous system. Num IPs
COMCAST-7922 349
ATT-INTERNET4 153
UUNET 135
ASN-CXA-ALL-CCI-22773-RDC 124
CHARTER-20115 83
TWC-20001-PACWEST 62
TWC-10796-MIDWEST 56
Replying to
ROGERS-COMMUNICATIONS 50
TWC-11426-CAROLINAS 43
CABLE-NET-1 41
TWC-11427-TEXAS 39
BHN-33363 38
CENTURYLINK-US-LEGACY-QWEST 35
TWC-11351-NORTHEAST 31
SHAW 29
1
The graph linked to this tweet shows the distribution of the number of days US/Canadian residential IPs have been flagged as malicious.
We see that ~half of the residential IPs have been flagged as malicious for > 40 days. Keep in mind that we're talking about residential IPs.
1
I'll make some stats about data-center IPs in the next days. However, I expect the numbers to be higher.