Weekly spam summary on February 11th, 2006
February 12, 2006
Hotmail has been startlingly quiet this week. The numbers:
The basic stats:
The session and connection volume is up from last week. Connection volume fluctuates significantly during the week:
(Unfortunately, Thursday's numbers may be because of something I did that day. It seems I really should automate more things.)
Kernel level packet filtering top ten:
Host/Mask Packets Bytes 220.127.116.11/24 5455 276K 18.104.22.168/10 5218 272K 22.214.171.124/11 2820 142K 126.96.36.199 2692 133K 188.8.131.52 2561 120K 184.108.40.206/11 2396 121K 220.127.116.11/12 2133 109K 18.104.22.168/13 2000 100K 22.214.171.124 1948 91074 126.96.36.199 1906 89108
This week is even quieter than last week, plus has a lot more Chinese netblocks making the list (although tin.it earned top place). Of the rest:
Connection time rejection stats:
31235 total 15286 dynamic IP 10452 bad or no reverse DNS 3413 class bl-cbl 403 class bl-sbl 335 class bl-dsbl 331 class bl-spews 114 class bl-sdul 51 class bl-ordb 37 class bl-njabl 11 class bl-opm
This was a big week for hammering on the frontend; 22 IP addresses were refused 100 times or more, with the winner being 188.8.131.52 at 364 connections refused for having no reverse DNS. This week marks a record, with none of the top 30 refused IPs being in the CBL; three are in the SBL (184.108.40.206 and 220.127.116.11 in SBL37385, and 18.104.22.168 in SBL34872).
Oh look; massively up compared to the past couple of weeks. I guess
spammers are forging us as the
* * *
Atom feeds are available; see the bottom of most pages.