spam/SpamSummary-2006-08-12 written at 22:00:20; Add Comment
Weekly spam summary on August 12th, 2006
This week, we:
This is down from last week. I don't expect it to stay that way, although I can hope that spammers take August vacations too. Speaking of vacations, the per day table is interesting this week:
Kernel level packet filtering top ten:
Host/Mask Packets Bytes 184.108.40.206 10466 516K 220.127.116.11 8151 424K 18.104.22.168 7544 372K 22.214.171.124 7294 322K 126.96.36.199/13 3555 171K 188.8.131.52 3374 167K 184.108.40.206 3193 149K 220.127.116.11/10 3079 154K 18.104.22.168/12 3037 154K 22.214.171.124 2688 161K
Although the high is lower, overall this is up from last week.
Connection time rejection stats:
31230 total 13988 bad or no reverse DNS 13858 dynamic IP 2242 class bl-cbl 204 class bl-njabl 147 class bl-sbl 141 class bl-sdul 95 class bl-dsbl 77 class bl-ordb 18 class bl-spews
I am starting to get curious about why the NJABL is such a consistent good performer for us. (Admittedly it is not by much compared to the CBL, but still.)
Only three out of the top 30 most rejected IP addresses were
refused more than 100 times this week; the winner is 126.96.36.199
(135 rejections, a Comcast cablemodem that is on a lot of DNSbls).
24 of the top 30 are currently in the CBL, 8 are currently in
The one in the SBL appears to be a genuine spammer: 188.8.131.52, 'Cutting Edge Media', SBL45150 (which lists the entire /24). It provided 61 of the SBL hits this week; the big other contributors are 184.108.40.206 (22 hits, SBL43698, caught scanning for vulnerable webforms that spammers exploit), 220.127.116.11 (13 hits, SBL41338, spam source), and 18.104.22.168 (11 hits, also Cutting Edge Media and SBL45150).
Hotmail slid right downhill this week:
I'm not impressed.
And the final numbers:
And another week closes without any bounces trying to go to those mysterious 38-character hex strings.
* * *
Atom feeds are available; see the bottom of most pages.