Weekly spam summary on September 3rd, 2005
Overall connections are down slightly from last week: 200,000 SMTP connections from 33,800 different IP addresses. The frontend's highwater mark for simultaneous connections hit 24 this time around.
Top 10 kernel level SMTP rejections:
Host/Mask Packets Bytes 24.145.152.139 13125 630K 213.4.149.11 10706 488K 212.216.176.0/24 9508 497K 202.96.0.0/12 6346 311K 198.36.22.225 5675 272K 64.165.173.226 5325 256K 216.244.138.210 5232 251K 218.102.53.0/24 4766 220K 61.128.0.0/10 4318 226K 161.58.153.168 4317 213K
Both 213.4.149.11 and 161.58.153.168 reappear from last week, but all the other hosts are new. 218.102.53.0/24 is the mail servers of Netvigator, who have now earned themselves an IP level block because I got tired of them banging on our SMTP port.
Connection-time rejection stats:
23374 total
10321 dynamic IP
6916 bad or no reverse DNS
1411 class bl-dsbl
1346 class bl-cbl
1228 class bl-spews
512 class bl-ordb
412 class bl-sbl
269 class bl-sdul
268 class bl-njabl
12 class bl-opm
There were some quite active attempts to mail us this week, the biggest simple source being 198.36.22.225 (listed at relays.ordb.org). The usual collection of free email providers continue their contributions.
On an eyeball scan, bad HELOs and attempted bounces to nonexistent
local users are both down somewhat this week.
|
|