Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (dicembre 2006)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Dec 10 06:53:36
Jan 7 06:49:02
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
ip.private-dnsbl.bofh.it
zen.spamhaus.org
list.dsbl.org
combined.njabl.org
dul.dnsbl.sorbs.net
 599181 52.88% Bad HELO
 238387 21.04% DNSBL 
xbl.spamhaus.org
 114370 10.09% Client host rejected
  86793  7.66% DNSBL 
combined.njabl.org
  33267  2.94% DNSBL 
dul.dnsbl.sorbs.net
  16952  1.50% Relay access denied
  13167  1.16% DNSBL 
ip.private-dnsbl.bofh.it
  12270  1.08% DNSBL 
list.dsbl.org
   6146  0.54% Bad pipelining (Client host)
   3685  0.33% DNSBL 
sbl.spamhaus.org
   2772  0.24% header checks
   1942  0.17% body checks
   1626  0.14% Bad pipelining (Helo command)
   1179  0.10% DNSBL 
rhs.private-dnsbl.bofh.it
    852  0.08% Recipient address rejected
    333  0.03% Need FQDN address
     84  0.01% Bad pipelining (Data command)
     72  0.01% Sender address rejected
1133078        TOTAL
Rejected headers:
    845 30.48% message content rejected
    763 27.53% keep your viruses for yourself (ZIP)
    753 27.16% no executable attachments allowed
    291 10.50% Your mailer is not RFC 2047 compliant
     54  1.95% troppo spam dalla webmail di TIN
     52  1.88% Gibe-F/Swen.A worm
     11  0.40% do not send stupid bounces
      3  0.11% suspicious attachment
Rejected bodies:
   1879 96.76% pump & dump spam
     62  3.19% keep your viruses for yourself (hidden iframe)
      1  0.05% do not send stupid bounces
Rejected HELO commands:
 313556 52.33% unqualified HELO hostname
 162144 27.06% using my own HELO hostname
  78223 13.05% generic HELO hostname
  14880  2.48% fake IP literal in HELO hostname
  14179  2.37% IP literal in HELO hostname
   8902  1.49% forged HELO hostname
   7297  1.22% Invalid name
Popular DNSBL listings:
   1883 51.10% SBL 27197
    592 16.07% SBL 49074
    113  3.07% SBL 49315
     83  2.25% SBL 39831
     68  1.85% SBL 15575
     60  1.63% SBL 48593
    886 24.04% others (134 different)
Popular local source-based rejections:
  89063 77.87% we do not accept mail from dynamically-assigned addresses
  13125 11.48% too much spam from this network
  10210  8.93% Too much spam from CHINANET
   1705  1.49% non accettiamo posta da IP dinamici
     99  0.09% Too much spam from 
chinamobile.com
     92  0.08% Too much spam from 
ethome.net.tw
     45  0.04% Too much spam from 
gwbn.net.cn
     31  0.03% Too much spam from China Railways
Most rejected networks:
  37494  3.32% 
83.0.0.0/11
  17943  1.59% 
82.224.0.0/11
  17192  1.52% 
84.128.0.0/10
  13596  1.20% 
87.0.0.0/13
  13297  1.18% 
83.32.0.0/11
  10167  0.90% 
88.152.0.0/14
1018675 90.28% others (18266 different)
Most rejected AS:
  54129  4.80% 3269
  48201  4.27% 19262
  43934  3.89% 5617
  33808  3.00% 3320
  32637  2.89% 3352
  24193  2.14% 4134
  22323  1.98% 12322
  19326  1.71% 8551
  19194  1.70% 3215
  18754  1.66% 9121
  13707  1.21% 2856
  13224  1.17% 4837
  12917  1.14% 8359
  12596  1.12% 3209
  10919  0.97% 5089
  10787  0.96% 6830
  10331  0.92% 3462
  10294  0.91% 4766
  10205  0.90% 6327
  10171  0.90% 1680
  10099  0.90% 5462
 686615 60.85% others (4644 different)
-- 
ciao,
Marco

Interessante a mio avviso l'impatto di 
pbl.spamhaus.org
,
considerando che è compresa in 
zen.spamhaus.org
, ma non in xbl-sbl
Il server è coperto nell'ordine, da:
pbl.spamhaus.org
,
xbl.spamhaus.org
,
sbl.spamhaus.org
,
list.dsbl.org
,
dul.dnsbl.sorbs.net
,
combined.njabl.org
,
from    ['Jan', '10', '06:29:07']
to      ['Jan', '11', '06:29:41']
   2707 Relay access denied
   1889 Need FQDN address (recipient)
   1742 Recipient address rejected
   1724 DNSBL 
pbl.spamhaus.org
;
   1610 DNSBL 
xbl.spamhaus.org
;
    865 Sender address rejected
    331 DNSBL 
dul.dnsbl.sorbs.net
;
    114 Bad HELO
     55 Client host rejected
     51 DNSBL 
list.dsbl.org
;
     18 DNSBL 
sbl.spamhaus.org
;
      7 DNSBL 
combined.njabl.org
;
      5 attachment type not allowed
      1 Message size exceeds fixed limit
      1 Other
  11120 TOTAL FILTERED MAIL
   3741 TOTAL DNSBL FILTERED MAIL (33.64 %)
   1638 TOTAL POSTED MAIL ON 12758 ATTEMPTS (12.84 %)
-- 
Gerolamo