Weekly spam summary on October 7th, 2006
October 7, 2006
This week, we:
Volume is up somewhat from last week, but not hugely. The per day volume level fluctuates significantly:
Kernel level packet filtering top ten:
Host/Mask Packets Bytes 220.127.116.11 58339 3034K 18.104.22.168 7377 375K 22.214.171.124/11 6280 304K 126.96.36.199 5769 346K 188.8.131.52 4989 282K 184.108.40.206 4762 242K 220.127.116.11 3663 181K 18.104.22.168 3200 176K 22.214.171.124/10 3154 176K 126.96.36.199 2901 174K
The overall numbers are up somewhat from last week.
Connection time rejection stats:
35477 total 17818 dynamic IP 14475 bad or no reverse DNS 1712 class bl-cbl 262 class bl-dsbl 217 class bl-sdul 205 class bl-njabl 80 class bl-spews 47 class bl-ordb 39 class bl-sbl
This week marks the first week that Cutting Edge Media has left us alone. If it keeps up, I may hold a modest celebration.
One out of the top 30 most rejected IP addresses was rejected more
than 100 times: 188.8.131.52, a RoadRunner cablemodem, at 184 times (it
is also in the CBL). 23 of the top 30 most rejected IP addresses are
currently in the CBL and 6 are currently in
I'd say I'm detecting a trend here, but it's not anything new, so I'm more confirming it.
This week, Hotmail brought to us:
I can't say I'm very happy about the continued spam from the Hotmail plus tm.net.my combination (they did it last week too). But then I'm usually not very happy with Hotmail in general.
And the final numbers:
Colour me displeased with the increase. No particular source of bad
On the bad bounces, last week's pattern pretty much repeats, mixed
in with the random alphanumeric usernames from earlier weeks. This
time I looked at the sources of the bounces; it seems that most of the
Russian female name bounces are coming from the Eastern Europe area.
There was one bounce to
* * *
Atom feeds are available; see the bottom of most pages.