spam/SpamSummary-2007-09-15 written at 23:37:35; Add Comment
Weekly spam summary on September 15th, 2007
This week, we:
Volume is down a fair bit from last week, although it is nowhere near the levels I would like it to be at. The daily volume stats show major swings throughout the week:
Kernel level packet filtering top ten:
Host/Mask Packets Bytes 188.8.131.52/27 23682 1306K otcpicknews.com 184.108.40.206/23 18260 887K cox.net 220.127.116.11 15825 870K 18.104.22.168/24 11265 676K centrum.cz 22.214.171.124 10054 603K 126.96.36.199 7854 388K 188.8.131.52 6290 302K 184.108.40.206 6090 292K 220.127.116.11 5684 341K 18.104.22.168 5181 249K
Volume is actually down a bit from last week, somewhat to my surprise, apparently because the top sources this week weren't as active as the top sources last week. Also, rather to my shock, most of the webmail advance fee fraud netblocks have fallen out of the top ten.
Connection time rejection stats:
192650 total 106734 bad or no reverse DNS 75182 dynamic IP 7801 class bl-cbl 679 class bl-pbl 346 class bl-dsbl 165 class bl-sdul 91 class bl-njabl 90 qsnews.net 68 22.214.171.124/24 43 class bl-sbl
The 126.96.36.199/24 subnet belongs to something called 'Bushido Marketing', bushidomarketing.com. Due to various events we have decided that we are not interested in accepting email from them; looking at the list of domain names trying to talk to us, I don't think we're missing anything we want. You would think that people want to have their email accepted would pick better domain names than easyinternetdeal.com, newmoneyonline.com, and hotbusinessforyou.com.
Sixteen of the top 30 most rejected IP addresses were rejected 100 times
or more this week; the leader is 188.8.131.52 (250 rejections), followed
by 184.108.40.206 (214 rejections) and 220.127.116.11 (206 rejections).
Twenty of the top 30 are currently in the CBL, one is currently in
(Locally, 22 were rejected for bad or missing reverse DNS, 7 for being dynamic IP addresses, and one for being versanet.de.)
This week Hotmail had:
And the final numbers:
The leading source of bad
Bad bounces were sent to 105 different bad usersnames this week, with
the most popular one being a tie between
This week's most active single source is the informatively named
* * *
Atom feeds are available; see the bottom of most pages.