spam/SpamSummary-2006-02-04 written at 01:12:58; Add Comment
Weekly spam summary on February 4th, 2006
Hotmail seems to be shuffling its numbers around significantly this week, to my surprise. I'm not sure the result is really better, but it's certainly different:
Everything is up except the non-Hotmail email address rejections, which have cratered. Maybe spammers have decided to give up on them and restrict themselves to strictly Hotmail addresses? Who knows.
The basic stats:
All of this is just about the same as last week. The per-day table has no interesting fluctuations, so I'm skipping it.
Kernel level packet filtering top ten:
Host/Mask Packets Bytes 22.214.171.124 6062 364K 126.96.36.199/24 5540 273K 188.8.131.52 4317 202K 184.108.40.206 3939 236K 220.127.116.11/11 3637 180K 18.104.22.168/10 3598 187K 22.214.171.124 3491 209K 126.96.36.199 2913 163K 188.8.131.52 2582 127K 184.108.40.206 2414 145K
Overall, I'd say the kernel level blocks were a little quieter than last week.
Connection time rejection stats:
26458 total 13291 dynamic IP 8813 bad or no reverse DNS 3267 class bl-cbl 308 class bl-sbl 133 class bl-dsbl 70 class bl-njabl 67 class bl-sdul 66 class bl-spews 35 class bl-ordb 5 class bl-opm
Only one machine really hammered on the frontend this week;
220.127.116.11 made 202 connection attempts before we blocked it harder
for being in SBL37385. 17 of the top 30 rejected source IPs are
in the CBL this week, three in the SBL (18.104.22.168, plus
and 6 are currently in
There's no really big single source of bad
* * *
Atom feeds are available; see the bottom of most pages.