Weekly spam summary on April 29th, 2006
April 30, 2006
This week's statistics are distorted by a Wednesday noon system reboot that had the effect of resetting some of them. Having said, that, this week we:
To the extent that I can tell, this looks like it's somewhat down from last week. It looks like total connection volume would have been around 130,000 or so this week if the reboot hadn't happened. Obviously the per-day table is completely useless this week.
Kernel level packet filtering top ten, since Wednesday noon:
Host/Mask Packets Bytes 184.108.40.206 6999 420K 220.127.116.11 5149 275K 18.104.22.168/24 2601 130K 22.214.171.124/24 1734 87880 126.96.36.199 1642 78816 188.8.131.52 1563 93780 184.108.40.206/13 1359 66340 220.127.116.11 1312 83968 18.104.22.168/10 1312 65480 22.214.171.124 1281 65164
This looks a lot like last week in terms of the numbers, which is probably bad because last week's numbers were atypically low.
Connection time rejection stats:
47114 total 23796 dynamic IP 18622 bad or no reverse DNS 3008 class bl-cbl 348 class bl-dsbl 165 class bl-ordb 165 class bl-njabl 124 class bl-sdul 40 class bl-sbl 35 class bl-spews 2 class bl-opm
These are full-week stats; we've popped back to regular levels after
the whole CBL-first exercise of last week. Some people from
126.96.36.199/24 showed up again this week; we blocked them because
of tucksprofessionalservices.com, which
I see is still there at 188.8.131.52. The two IP addresses that
poked us are 184.108.40.206 (in
Hotmail mail volume is way down this week:
This is down in the noise, especially considering that the top three
sources of bad
Written on 30 April 2006.
* * *
Atom feeds are available; see the bottom of most pages.