Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (luglio 2007)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Jul 8 06:50:27
Aug 5 06:50:50
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
ip.private-dnsbl.bofh.it
zen.spamhaus.org
list.dsbl.org
combined.njabl.org
dul.dnsbl.sorbs.net
1950282 80.07% Bad HELO
 244179 10.02% DNSBL pbl+
xbl.spamhaus.org
 174383  7.16% Client host rejected
  29067  1.19% DNSBL 
ip.private-dnsbl.bofh.it
  10949  0.45% DNSBL 
dul.dnsbl.sorbs.net
   5655  0.23% Need FQDN address
   5153  0.21% DNSBL 
list.dsbl.org
   4803  0.20% Recipient address rejected
   2888  0.12% Sender address rejected
   2711  0.11% Relay access denied
   1627  0.07% header checks
   1548  0.06% Bad pipelining (Client host)
   1229  0.05% DNSBL 
combined.njabl.org
    774  0.03% DNSBL 
rhs.private-dnsbl.bofh.it
    394  0.02% DNSBL 
sbl.spamhaus.org
    128  0.01% Bad pipelining (Helo command)
     34  0.00% body checks
      4  0.00% Need FQDN address (recipient)
      2  0.00% Bad pipelining (Data command)
      1  0.00% Other
2435811        TOTAL
Rejected headers:
    740 45.48% keep your viruses for yourself (ZIP)
    552 33.93% Your mailer is not RFC 2047 compliant
    333 20.47% no executable attachments allowed
      2  0.12% message content rejected
Rejected bodies:
     33 97.06% keep your viruses for yourself (hidden iframe)
      1  2.94% do not send stupid bounces
Rejected HELO commands:
 990790 50.80% generic HELO hostname
 818766 41.98% IP literal in HELO hostname
 123354  6.32% unqualified HELO hostname
   6380  0.33% Invalid name
   5104  0.26% using my own HELO hostname
   4238  0.22% fake IP literal in HELO hostname
   1650  0.08% forged HELO hostname
Popular DNSBL listings:
    125 31.73% SBL 39831
     58 14.72% SBL 49465
    211 53.55% others (51 different)
Popular local source-based rejections:
  67663 38.80% we do not accept mail from dynamically-assigned addresses
  56038 32.14% Too much spam from CHINANET
  44212 25.35% too much spam from this network
   5709  3.27% non accettiamo posta da IP dinamici
    359  0.21% Too much spam from China Railways
    358  0.21% Too much spam from 
chinamobile.com
     44  0.03% Too much spam from 
gwbn.net.cn
Most rejected networks:
  97025  3.99% 
88.224.0.0/11
  55612  2.28% 
83.0.0.0/11
  30432  1.25% 
85.96.0.0/13
  19440  0.80% 
86.128.0.0/10
  17301  0.71% 
71.160.0.0/11
  13641  0.56% 
80.48.0.0/13
  13428  0.55% 
85.104.0.0/14
  11869  0.49% 
84.56.0.0/13
   9791  0.40% 
81.212.0.0/14
   9160  0.38% 
196.217.128.0/17
   8899  0.37% 
86.64.0.0/12
   8588  0.35% 
82.32.0.0/12
   8393  0.34% 
90.0.0.0/12
   8071  0.33% 
86.192.0.0/12
   7929  0.33% 
222.252.0.0/14
   7832  0.32% 
85.140.0.0/15
   7710  0.32% 
81.128.0.0/11
   7671  0.32% 
88.152.0.0/14
   7655  0.31% 
88.0.0.0/11
   7599  0.31% 
84.96.0.0/13
   7131  0.29% 
196.206.0.0/17
   7002  0.29% 
125.112.0.0/12
   6875  0.28% 
121.128.0.0/10
   6559  0.27% 
190.48.0.0/14
   6434  0.26% 
189.136.0.0/13
2042102 83.89% others (17446 different)
Most rejected AS:
 160665  6.60% 9121
 109765  4.51% 4134
  84898  3.49% 19262
  80009  3.29% 4837
  73516  3.02% 5617
  56121  2.31% 3215
  48632  2.00% 8151
  41324  1.70% 6713
  39470  1.62% 2856
  28549  1.17% 5089
  24810  1.02% 3209
  24390  1.00% 4766
  22343  0.92% 8359
  21008  0.86% 15557
  19781  0.81% 3352
  19548  0.80% 3462
  18131  0.74% 22047
  18083  0.74% 6830
  17666  0.73% 5462
  16803  0.69% 6147
  16393  0.67% 7738
  15074  0.62% 9498
  14955  0.61% 27699
  14034  0.58% 8167
  13342  0.55% 8551
  13313  0.55% 20115
  12970  0.53% 3269
  12605  0.52% 4812
  12479  0.51% 22927
  12431  0.51% 7132
  12409  0.51% 3320
  12252  0.50% 7029
  12160  0.50% 7418
  11710  0.48% 10036
  11461  0.47% 209
  11424  0.47% 4788
  11176  0.46% 9829
  10954  0.45% 18403
  10890  0.45% 7643
  10671  0.44% 7470
  10375  0.43% 21021
   9945  0.41% 9141
   9622  0.40% 12479
   9428  0.39% 9689
   9209  0.38% 3303
   9174  0.38% 9318
   9122  0.37% 12741
   8448  0.35% 28573
   8253  0.34% 9143
   8078  0.33% 5610
   8061  0.33% 33287
1156219 47.50% others (4664 different)
-- 
ciao,
Marco

Queste le mie dell'ultima settimana
( generate con 
http://sourceforge.net/projects/plogpy
 )
---- Filtering system report ----
from    ['Jul', '29', '06:47:20']
to      ['Aug', '5', '06:48:01']
  66473 DNSBL 
pbl.spamhaus.org
;
  26147 Sender address rejected
  19874 DNSBL 
xbl.spamhaus.org
;
   7594 Relay access denied
   6596 Need FQDN address (recipient)
   3627 DNSBL 
dul.dnsbl.sorbs.net
;
   2889 Recipient address rejected
   1164 DNSBL 
sbl.spamhaus.org
;
   1113 DNSBL 
list.dsbl.org
;
    379 Bad HELO
     58 DNSBL 
dnsbl.njabl.org
;
      4 Message size exceeds fixed limit
      2 attachment type not allowed
 135920 TOTAL FILTERED MAIL
  92309 TOTAL DNSBL FILTERED MAIL (67.91 %)
  29702 TOTAL GREYLISTING DELAYS
   8414 TOTAL POSTED MAIL ON 144334 ATTEMPTS (5.83 %)
   8414 TOTAL POSTED MAIL ON 174036 ATTEMPTS (INCLUDE GREYLISTING) (4.83 %)
** Most Blocked Sender IPs - Top 10 **
   2422  1.462%    66.83.27.177
   1205  0.728%    66.64.186.51
   1170  0.706%    76.203.86.138
    763  0.461%    76.204.105.118
    724  0.437%    80.71.25.21
    684  0.413%    68.157.255.10
    590  0.356%    67.15.22.6
    588  0.355%    76.202.41.209
    588  0.355%    67.95.56.42
    555  0.335%    72.54.231.2
** Most Blocked Mail by Sender Domain - Top 10 **
  10784  6.511%    
bancaroma.lt
   5557  3.355%    
bancadlroma.lt
   5514  3.329%    --empty_source_address_found--
   2725  1.645%    
roma.it
   1238  0.747%    
hotmail.com
   1190  0.719%    
bancaroma.it
    581  0.351%    
citizensbank.com
    517  0.312%    
bancadiroma.it
    516  0.312%    
arcoiris.tv
    493  0.298%    localhost.localhost
-- 
Gerolamo