Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (ottobre 2007)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Oct 14 06:51:19
Nov 11 06:52:09
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
ip.private-dnsbl.bofh.it
zen.spamhaus.org
list.dsbl.org
combined.njabl.org
bhnc.njabl.org
dul.dnsbl.sorbs.net
1365906 74.17% Bad HELO
 267083 14.50% DNSBL pbl+
xbl.spamhaus.org
 164253  8.92% Client host rejected
  19601  1.06% DNSBL 
ip.private-dnsbl.bofh.it
   6432  0.35% Relay access denied
   4102  0.22% Recipient address rejected
   2885  0.16% DNSBL 
rhs.private-dnsbl.bofh.it
   2223  0.12% Sender address rejected
   2121  0.12% Bad pipelining (Client host)
   1992  0.11% DNSBL 
dul.dnsbl.sorbs.net
   1914  0.10% DNSBL 
bhnc.njabl.org
   1174  0.06% DNSBL 
list.dsbl.org
    633  0.03% DNSBL 
sbl.spamhaus.org
    561  0.03% header checks
    193  0.01% Need FQDN address
    166  0.01% Bad pipelining (Helo command)
    159  0.01% DNSBL 
combined.njabl.org
     38  0.00% body checks
     21  0.00% Bad pipelining (Data command)
      9  0.00% Multi-recipient bounce
1841466        TOTAL
Rejected headers:
    275 49.02% keep your viruses for yourself (ZIP)
    136 24.24% no executable attachments allowed
    120 21.39% Your mailer is not RFC 2047 compliant
     17  3.03% do not send stupid bounces
     11  1.96% message content rejected
      2  0.36% X-SA-Do-Not-Rej
Rejected bodies:
     37 97.37% keep your viruses for yourself (hidden iframe)
      1  2.63% do not send stupid bounces
Rejected HELO commands:
 546095 39.98% generic HELO hostname
 475028 34.78% unqualified HELO hostname
 295867 21.66% IP literal in HELO hostname
  20274  1.48% Invalid name
  15798  1.16% forged HELO hostname
   9638  0.71% fake IP literal in HELO hostname
   3206  0.23% using my own HELO hostname
Popular DNSBL listings:
    325 51.34% SBL 59581
     89 14.06% SBL 60299
    219 34.60% others (47 different)
Popular local source-based rejections:
  93946 57.20% we do not accept mail from dynamically-assigned addresses
  45307 27.58% Too much spam from CHINANET
  17600 10.72% too much spam from this network
   7116  4.33% non accettiamo posta da IP dinamici
    132  0.08% Too much spam from 
chinamobile.com
     99  0.06% Too much spam from China Railways
     53  0.03% Too much spam from 
gwbn.net.cn
Most rejected networks:
  49979  2.71% 
88.224.0.0/11
  22859  1.24% 
83.0.0.0/11
  15870  0.86% 
85.140.0.0/15
  14512  0.79% 
85.96.0.0/13
  12835  0.70% 
87.0.0.0/12
  12364  0.67% 
124.120.0.0/15
  12030  0.65% 
71.160.0.0/11
  11236  0.61% 
86.128.0.0/10
  11035  0.60% 
91.76.0.0/14
   9893  0.54% 
91.122.0.0/16
   9524  0.52% 
79.0.0.0/12
   9324  0.51% 
89.178.0.0/15
   9075  0.49% 
122.160.0.0/12
   8237  0.45% 
84.56.0.0/13
   7613  0.41% 
84.96.0.0/13
   7612  0.41% 
58.8.0.0/14
   6910  0.38% 
222.252.0.0/14
   6353  0.35% 
87.16.0.0/13
   6208  0.34% 
81.128.0.0/11
   6011  0.33% 
77.122.0.0/15
1591387 86.45% others (21496 different)
Most rejected AS:
  85410  4.64% 4134
  84022  4.56% 9121
  59268  3.22% 3269
  58583  3.18% 4837
  44015  2.39% 19262
  35873  1.95% 8359
  30483  1.66% 5617
  28517  1.55% 0
  26556  1.44% 2856
  21974  1.19% 8151
  20638  1.12% 7470
  17953  0.98% 9498
  17613  0.96% 8402
  17600  0.96% 5089
  17352  0.94% 3209
  16923  0.92% 8997
  16237  0.88% 7738
  15934  0.87% 15557
  15704  0.85% 9737
  14208  0.77% 6147
  13129  0.71% 7132
  13124  0.71% 7643
  12640  0.69% 3462
  12064  0.66% 3320
  11715  0.64% 3215
  11307  0.61% 8167
  11229  0.61% 10036
  10342  0.56% 4788
  10169  0.55% 6830
  10121  0.55% 22047
  10095  0.55% 9829
   9728  0.53% 4808
   9450  0.51% 8551
   9243  0.50% 22927
   9076  0.49% 3352
   8573  0.47% 5462
   8268  0.45% 4812
1015731 55.18% others (5106 different)
-- 
ciao,
Marco

le mie del mese scorso (generate con 
http://sourceforge.net/projects/plogpy/
 ):
---- Filtering system report ----
from ['Sep', '30', '06:48:08']
to ['Oct', '28', '06:48:12']
 137837 DNSBL 
pbl.spamhaus.org
;
  76323 Need FQDN address (recipient)
  58659 DNSBL 
xbl.spamhaus.org
;
  32508 Recipient address rejected
  28254 Sender address rejected
  20304 Relay access denied
   4761 Helo command rejected
   3654 DNSBL 
sbl.spamhaus.org
;
   2242 DNSBL 
dul.dnsbl.sorbs.net
;
   1178 DNSBL 
list.dsbl.org
;
    117 DNSBL 
dnsbl.njabl.org
;
     22 attachment type not allowed
      5 ETRN Rejected
      2 Message size exceeds fixed limit
 365866 TOTAL FILTERED MAIL
 203687 TOTAL DNSBL FILTERED MAIL (55.67 %)
  39974 TOTAL GREYLISTING DELAYS
  49434 TOTAL POSTED MAIL ON 415300 ATTEMPTS (11.90 %)
  49434 TOTAL POSTED MAIL ON 455274 ATTEMPTS (INCLUDE GREYLISTING) (10.86 %)
** Most Blocked Sender IPs - Top 20 **
   3100  0.764%    165.138.106.238
   2225  0.548%    193.41.7.36
   1581  0.390%    69.182.48.71
   1375  0.339%    61.145.163.117
   1051  0.259%    193.41.7.21
    966  0.238%    213.41.120.202
    797  0.196%    212.239.42.182
    773  0.190%    70.52.205.78
    671  0.165%    217.64.207.34
    634  0.156%    69.179.97.254
    588  0.145%    210.1.21.55
    563  0.139%    67.135.113.194
    468  0.115%    213.53.107.157
    464  0.114%    213.53.107.155
    455  0.112%    212.183.164.46
    415  0.102%    212.183.164.78
    409  0.101%    212.183.164.45
    393  0.097%    213.53.107.154
    392  0.097%    212.183.164.32
    392  0.097%    212.183.164.79
** Most Blocked Mail by Sender Domain - Top 20 **
  33800  8.328%    --empty_source_address_found--
   8937  2.202%    
sevicol.it
   4406  1.086%    
bancadlroma.it
   3100  0.764%    arserver.arserver
   2507  0.618%    
loydstbs.com.uk
   2225  0.548%    
arcoiris.tv
   1919  0.473%    
hotmail.com
   1829  0.451%    
poste.it
   1739  0.428%    system.mail
   1708  0.421%    poste.ita
   1292  0.318%    
yahoo.com
   1051  0.259%    
logosquotes.org
    956  0.236%    
yahoo.co.uk
    916  0.226%    
icqmail.com
    841  0.207%    
123.com
    797  0.196%    localdomain.localdomain
    773  0.190%    tonka.tonka
    768  0.189%    
gmail.com
    746  0.184%    
monster.com
    687  0.169%    
cartasi.it
-- 
Gerolamo