Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (giugno 2006)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Jun 4 06:49:24
Jul 2 06:49:28
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
ip.lbl.bofh.it
sbl-xbl.spamhaus.org
list.dsbl.org
korea.services.net
combined.njabl.org
dul.dnsbl.sorbs.net
l1.spews.dnsbl.sorbs.net
 421912 49.11% Bad HELO
 210957 24.55% DNSBL 
xbl.spamhaus.org
  60288  7.02% Client host rejected
  60049  6.99% DNSBL 
combined.njabl.org
  27417  3.19% DNSBL 
dul.dnsbl.sorbs.net
  23715  2.76% Relay access denied
  14329  1.67% DNSBL 
list.dsbl.org
  10528  1.23% DNSBL 
sbl.spamhaus.org
   9752  1.14% DNSBL 
ip.lbl.bofh.it
   6107  0.71% Need FQDN address
   4320  0.50% header checks
   3314  0.39% DNSBL 
korea.services.net
   2794  0.33% Bad pipelining (Client host)
    895  0.10% Recipient address rejected
    846  0.10% DNSBL 
rhs.lbl.bofh.it
    790  0.09% Bad pipelining (Helo command)
    717  0.08% DNSBL 
l1.spews.dnsbl.sorbs.net
    236  0.03% Sender address rejected
     76  0.01% Bad pipelining (Data command)
     70  0.01% body checks
      7  0.00% Need FQDN address (recipient)
      2  0.00% Other
 859121        TOTAL
Rejected headers:
   1540 35.65% Your mailer is not RFC 2047 compliant
   1335 30.90% no executable attachments allowed
   1029 23.82% troppo spam dalla webmail di TIN
    221  5.12% keep your viruses for yourself (ZIP)
    103  2.38% Gibe-F/Swen.A worm
     58  1.34% do not send stupid bounces
     34  0.79% message content rejected
Rejected bodies:
     64 91.43% keep your viruses for yourself (hidden iframe)
      6  8.57% do not send stupid bounces
Rejected HELO commands:
 248707 58.95% unqualified HELO hostname
 147645 34.99% fake IP literal in HELO hostname
  12466  2.95% using my own HELO hostname
   9519  2.26% Invalid name
   3575  0.85% forged HELO hostname
Popular DNSBL listings:
   2958 26.31% SBL 39408
    838  7.45% SBL 41022
    679  6.04% SBL 41233
    549  4.88% SBL 42462
    385  3.42% SBL 41279
    377  3.35% SBL 41278
    363  3.23% SBL 39423
    343  3.05% SBL 40971
    342  3.04% SBL 41343
    299  2.66% SBL 40759
    260  2.31% SPEWS 703 (misc16)
    225  2.00% SBL 42816
    183  1.63% SBL 41456
    154  1.37% SBL 41730
    144  1.28% SBL 42058
    143  1.27% SBL 41551
    142  1.26% SBL 39831
    129  1.15% SBL 42599
    118  1.05% SBL 42670
    106  0.94% SBL 41102
     99  0.88% SBL 34770
     87  0.77% SBL 39419
     87  0.77% SBL 41575
     80  0.71% SBL 21128
     78  0.69% SBL 41060
     65  0.58% SBL 33883
     63  0.56% SBL 38278
     61  0.54% SBL 42922
     60  0.53% SBL 42987
     55  0.49% SBL 41057
   1773 15.77% others (231 different)
Popular local listings:
   7251 68.42% 204.11.102.
    409  3.86% 
walla.com
    256  2.42% 
mynet.com
    229  2.16% 88.134.197.
    128  1.21% 59.182.35.
    128  1.21% 58.10.158.
     94  0.89% 80.191.128.134
     78  0.74% 72.3.137.84
     72  0.68% 207.47.96.115
     68  0.64% 193.252.22.
     64  0.60% 212.47.18.231
     57  0.54% 200.155.18.36
     46  0.43% 221.210.172.
     46  0.43% 70.251.50.174
     43  0.41% 69.72.225.74
     37  0.35% 
latinmail.com
     36  0.34% 84.255.134.
     35  0.33% 200.170.150.
     33  0.31% 213.243.1.22
     30  0.28% 203.86.17.
     30  0.28% 216.185.86.
     29  0.27% 207.210.72.154
     29  0.27% 82.97.13.
     27  0.25% 84.77.51.
     25  0.24% 203.86.104.
     24  0.23% 83.138.189.76
     24  0.23% 58.69.126.
     23  0.22% 208.46.100.50
     21  0.20% 82.201.245.
     20  0.19% 196.218.128.
     19  0.18% 84.77.57.
     19  0.18% 
paramed.biz
     18  0.17% 
perlite.biz
     18  0.17% 203.156.43.
     16  0.15% 72.9.236.
     16  0.15% 59.139.62.126
     16  0.15% 62.37.236.187
     15  0.14% 
pradella.biz
     15  0.14% 124.106.152.
     15  0.14% 
garageservice.biz
     14  0.13% 64.207.13.
     14  0.13% 84.77.32.
     13  0.12% 65.248.164.
     13  0.12% 58.69.105.
     13  0.12% 59.144.3.
     13  0.12% 217.160.204.201
     12  0.11% 213.29.115.
     12  0.11% 200.218.170.
     12  0.11% 
pellicano.biz
     12  0.11% 65.17.206.150
     12  0.11% 
levantefilmfest.com
     12  0.11% 84.90.201.
     11  0.10% 212.100.250.215
     11  0.10% 213.192.7.18
     11  0.10% 202.28.93.120
     11  0.10% 196.37.237.
     11  0.10% 151.1.32.3
     11  0.10% 
first2office.biz
    821  7.75% others (289 different)
Popular local source-based rejections:
  41082 68.14% we do not accept mail from dynamically-assigned addresses
  13786 22.87% Too much spam from CHINANET
   5231  8.68% non accettiamo posta da IP dinamici
     88  0.15% Too much spam from China Railways
     46  0.08% Too much spam from 
gwbn.net.cn
     28  0.05% Too much spam from 
ethome.net.tw
     26  0.04% Too much spam from 
chinamobile.com
      1  0.00% others (1 different)
Most rejected networks:
  24258  2.84% 
83.0.0.0/11
  10907  1.28% 
59.0.0.0/11
  10629  1.24% 
82.224.0.0/11
   9146  1.07% 
204.11.96.0/21
   8880  1.04% 
83.32.0.0/11
   7250  0.85% 
84.128.0.0/10
   5733  0.67% 
222.96.0.0/12
 777928 91.01% others (16190 different)
Most rejected AS:
  60037  7.02% 4766
  47567  5.57% 4134
  38550  4.51% 4837
  28912  3.38% 5617
  28545  3.34% 19262
  27794  3.25% 9318
  18252  2.14% 3352
  13968  1.63% 9121
  13219  1.55% 3462
  12580  1.47% 12322
  12273  1.44% 27699
  12033  1.41% 3320
  10824  1.27% 7738
   9613  1.12% 3786
   9318  1.09% 3215
   9146  1.07% 33642
   8889  1.04% 3269
   7397  0.87% 8151
   6604  0.77% 7643
   6429  0.75% 7132
   5956  0.70% 8167
   5869  0.69% 6478
   5762  0.67% 11426
   5598  0.65% 8359
   5522  0.65% 9141
   5455  0.64% 20115
 438619 51.32% others (4134 different)
-- 
ciao,
Marco

 421912 49.11% Bad HELO
Non intendo renderla accessibile anche ad altri, però appena avrò tempo
di ripulirli un po' pubblicherò i programmi che uso per gestirla (che in
pratica mandano update dinamici alla zona).
-- 
ciao, |
Marco |  The Italian Usenet Cabal, Abuse Department (TINC)
"It's about damn time that all of us who actually give a damn about Usenet
stand up and tell the people who don't to fuck off and die." -- Russ Allbery

 mandano update dinamici alla zona).
Grazie!