Wandering Thoughts archives

Weekly spam summary on September 3rd, 2005

Overall connections are down slightly from last week: 200,000 SMTP connections from 33,800 different IP addresses. The frontend's highwater mark for simultaneous connections hit 24 this time around.

Top 10 kernel level SMTP rejections:

Host/Mask           Packets   Bytes
24.145.152.139        13125    630K
213.4.149.11          10706    488K
212.216.176.0/24       9508    497K
202.96.0.0/12          6346    311K
198.36.22.225          5675    272K
64.165.173.226         5325    256K
216.244.138.210        5232    251K
218.102.53.0/24        4766    220K
61.128.0.0/10          4318    226K
161.58.153.168         4317    213K

Both 213.4.149.11 and 161.58.153.168 reappear from last week, but all the other hosts are new. 218.102.53.0/24 is the mail servers of Netvigator, who have now earned themselves an IP level block because I got tired of them banging on our SMTP port.

Connection-time rejection stats:

  23374 total
  10321 dynamic IP
   6916 bad or no reverse DNS
   1411 class bl-dsbl
   1346 class bl-cbl
   1228 class bl-spews
    512 class bl-ordb
    412 class bl-sbl
    269 class bl-sdul
    268 class bl-njabl
     12 class bl-opm

There were some quite active attempts to mail us this week, the biggest simple source being 198.36.22.225 (listed at relays.ordb.org). The usual collection of free email providers continue their contributions.

On an eyeball scan, bad HELOs and attempted bounces to nonexistent local users are both down somewhat this week.