Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (aprile 2005)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Apr 3 06:49:46
May 1 06:50:29
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
sbl-xbl.spamhaus.org
list.dsbl.org
dnsbl.njabl.org
korea.services.net
dul.dnsbl.sorbs.net
l1.spews.dnsbl.sorbs.net
 232038 28.49% DNSBL 
sbl.spamhaus.org
 228231 28.02% Bad HELO
 223666 27.46% DNSBL 
xbl.spamhaus.org
  73612  9.04% DNSBL 
dul.dnsbl.sorbs.net
  13345  1.64% DNSBL 
list.dsbl.org
  11829  1.45% Recipient address rejected
   7350  0.90% DNSBL 
dnsbl.njabl.org
   6480  0.80% Relay access denied
   5551  0.68% DNSBL 
korea.services.net
   4492  0.55% header checks
   4008  0.49% Client host rejected
   2109  0.26% DNSBL 
l1.spews.dnsbl.sorbs.net
    908  0.11% body checks
    732  0.09% Need FQDN address
     41  0.01% Sender address rejected
     11  0.00% Need FQDN address (recipient)
 814403        TOTAL
Rejected headers:
   2420 53.87% Your mailer is not RFC 2047 compliant
   1287 28.65% no executable attachments allowed
    497 11.06% Gibe-F/Swen.A worm
    208  4.63% keep your viruses for yourself (ZIP)
     52  1.16% do not send stupid bounces
     20  0.45% Your mailer is not RFC 2047 compliant (UTF-8)
      8  0.18% Message content rejected
Rejected bodies:
    469 51.65% keep your viruses for yourself (hidden iframe)
    374 41.19% suspicious .zip file detected
     36  3.96% do not send stupid bounces
     29  3.19% keep your viruses for yourself (bmp attachment)
Rejected HELO commands:
 158320 69.37% fake IP literal in HELO hostname
  38782 16.99% using my own HELO hostname
  29192 12.79% unqualified HELO hostname
   1818  0.80% forged HELO hostname
    119  0.05% Invalid name
Popular DNSBL listings:
  83626 35.72% SBL 23003
  76149 32.52% SBL 11532
  41375 17.67% SBL 23002
  27438 11.72% SBL 25978
   1508  0.64% SBL 18899
    420  0.18% SPEWS 1432 (eltel)
    412  0.18% SPEWS 2963 (comcast/attbi)
    252  0.11% SPEWS 1297 (
Telesp.net.br
)
    178  0.08% SBL 23589
    158  0.07% SPEWS 3150 (tiscali)
    155  0.07% SPEWS 3198 (
blueyonder.co.uk
)
    146  0.06% SBL 25894
    142  0.06% SPEWS 703 (misc16)
    142  0.06% SBL 5429
    118  0.05% SBL 22964
     85  0.04% SBL 23582
     84  0.04% SBL 24608
     75  0.03% SBL 21239
     69  0.03% SPEWS 3199 (
seamail.go.com
)
     63  0.03% SBL 21868
     58  0.02% SBL 25662
     54  0.02% SBL 25609
     52  0.02% SPEWS 3126 (
telemar.net.br
)
   1388  0.59% others (199 different)
Popular local source-based rejections:
   3291 82.11% Too much spam from CHINANET
    659 16.44% non accettiamo posta da IP dinamici
     36  0.90% Too much spam from 
chinamobile.com
     16  0.40% Too much spam from 
gwbn.net.cn
      6  0.15% others (2 different)
Most rejected networks:
 219798 27.17% 
209.124.64.0/19
  27438  3.39% 
69.61.4.0/22
   9499  1.17% 
68.18.0.0/18
   7330  0.91% 
80.82.32.0/19
   7317  0.90% 
82.224.0.0/11
   7121  0.88% 
12.0.0.0/8
 530500 65.57% others (11167 different)
Most rejected AS:
 219798 27.17% 6982
  44277  5.47% 4766
  28998  3.58% 6478
  27438  3.39% 22653
  16761  2.07% 22909
  12450  1.54% 6380
  12386  1.53% 9318
  10489  1.30% 4134
   9358  1.16% 12322
   9196  1.14% 3320
   8955  1.11% 20115
   8838  1.09% 7015
   8188  1.01% 19548
   7750  0.96% 7018
   7500  0.93% 17676
   7415  0.92% 65014
   7330  0.91% 21017
   7051  0.87% 16338
   6986  0.86% 7738
   6947  0.86% 33287
   6777  0.84% 3215
   6310  0.78% 9277
   6260  0.77% 812
   5377  0.66% 27699
   5262  0.65% 3269
   5170  0.64% 6830
 305736 37.79% others (3501 different)
-- 
ciao,
Marco



   41375 17.67% SBL 23002
Accidenti, Alexey ti martella!  Qui non e' assolutamente a questi
livelli.
furio

 May 1 06:50:29
Mmmmmppppffffff... no, non riesco a trattenermi!
"Outlook Express: cosa vogliamo postare postare postare oggi?"
Fabrizio (e quello che puo' capitare a tutti: cesso o Ferrari, windoze o
linucs!)

livelli.
Pare innamorato delle spamtrap di fi*d*on*e*t.o*rg, anche i due record
successivi nella lista sono roba sua.
(Come molti altri russi, che però nessuna DNSBL blocca: 1200 spam da
ieri notte.)
-- 
ciao, |
Marco |  The Italian Usenet Cabal, Abuse Department (TINC)
"It's about damn time that all of us who actually give a damn about Usenet
stand up and tell the people who don't to fuck off and die." -- Russ Allbery