Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (dicembre 2005)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Dec 4 06:51:38
Jan 1 06:50:23
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
sbl-xbl.spamhaus.org
list.dsbl.org
korea.services.net
dul.dnsbl.sorbs.net
combined.njabl.org
l1.spews.dnsbl.sorbs.net
 459112 49.58% Bad HELO
 215127 23.23% DNSBL 
xbl.spamhaus.org
  89817  9.70% Recipient address rejected
  81216  8.77% DNSBL 
dul.dnsbl.sorbs.net
  29442  3.18% Client host rejected
  15459  1.67% DNSBL 
list.dsbl.org
  13628  1.47% Relay access denied
   4831  0.52% header checks
   4295  0.46% DNSBL 
combined.njabl.org
   3671  0.40% Sender address rejected
   3254  0.35% DNSBL 
sbl.spamhaus.org
   3036  0.33% DNSBL 
korea.services.net
   2502  0.27% DNSBL 
l1.spews.dnsbl.sorbs.net
    459  0.05% Need FQDN address
    184  0.02% body checks
     33  0.00% Bad pipelining
     26  0.00% Need FQDN address (recipient)
 926092        TOTAL
Rejected headers:
   2530 52.37% no executable attachments allowed
   1545 31.98% Your mailer is not RFC 2047 compliant
    566 11.72% keep your viruses for yourself (ZIP)
    170  3.52% Gibe-F/Swen.A worm
     20  0.41% do not send stupid bounces
Rejected bodies:
    125 67.93% keep your viruses for yourself (hidden iframe)
     56 30.43% do not send stupid bounces
      3  1.63% keep your viruses for yourself (bmp attachment)
Rejected HELO commands:
 248229 54.07% fake IP literal in HELO hostname
 173792 37.85% unqualified HELO hostname
  32622  7.11% using my own HELO hostname
   3524  0.77% Invalid name
    945  0.21% forged HELO hostname
Popular DNSBL listings:
    921 16.00% SBL 30692
    672 11.67% SBL 34877
    442  7.68% SPEWS 703 (misc16)
    169  2.94% SPEWS 3198 (
blueyonder.co.uk
)
    148  2.57% SBL 34717
    132  2.29% SPEWS 1297 (
Telesp.net.br
)
    100  1.74% SPEWS 3063 (MCI/UUNet)
     92  1.60% SPEWS 3056 (Media)
     90  1.56% SBL 33179
     88  1.53% SBL 36225
     86  1.49% SPEWS 331 (IFXCorporation/Telcom/MWS)
     83  1.44% SPEWS 3154 (managed)
     80  1.39% SPEWS 3134 (SBC)
     79  1.37% SBL 33883
     76  1.32% SBL 31818
     60  1.04% SPEWS 827 (Campbell)
     59  1.03% SPEWS 2988 (Abovenet)
     54  0.94% SPEWS 1295 (e-mailpromo/carderplanet)
     53  0.92% SPEWS 2955 (Atriks/Jonica)
     53  0.92% SBL 36240
     53  0.92% SBL 20539
     52  0.90% SPEWS 875 (Connect/blacksun)
   2114 36.73% others (383 different)
Popular local source-based rejections:
  21840 74.18% we do not accept mail from dynamically-assigned addresses
   5747 19.52% Too much spam from CHINANET
   1372  4.66% non accettiamo posta da IP dinamici
    302  1.03% Too much spam from China Railways
    104  0.35% Too much spam from 
ethome.net.tw
     45  0.15% Too much spam from 
gwbn.net.cn
     23  0.08% Too much spam from 
chinamobile.com
      6  0.02% Access denied
      3  0.01% others (2 different)
Most rejected networks:
  16885  1.83% 
84.128.0.0/10
  15890  1.73% 
83.0.0.0/11
  11116  1.21% 
12.0.0.0/8
   9176  1.00% 
213.184.224.0/22
   7790  0.85% 
221.220.0.0/14
   7736  0.84% 
82.32.0.0/12
   7405  0.80% 
82.224.0.0/11
   5267  0.57% 
24.7.128.0/18
 839779 91.18% others (23160 different)
Most rejected AS:
  44285  4.81% 4766
  32454  3.52% 4134
  25901  2.81% 6478
  23501  2.55% 9318
  21362  2.32% 5617
  21027  2.28% 3320
  15387  1.67% 19262
  13261  1.44% 4837
  13032  1.41% 22909
  12508  1.36% 19548
  11956  1.30% 7018
  11651  1.26% 17676
  10896  1.18% 33287
  10630  1.15% 6830
  10253  1.11% 5462
   9917  1.08% 22047
   9587  1.04% 4814
   9228  1.00% 12322
   9206  1.00% 20852
   9049  0.98% 7738
   8859  0.96% 11427
   8428  0.92% 5089
   8337  0.91% 3215
   8202  0.89% 7015
   8063  0.88% 3352
   7826  0.85% 20115
   7000  0.76% 3269
   6223  0.68% 33657
   6160  0.67% 9277
   6050  0.66% 12271
   5941  0.65% 27699
   5655  0.61% 9141
   5598  0.61% 8151
   5503  0.60% 8167
   5442  0.59% 10318
   5270  0.57% 6327
   5218  0.57% 11426
   5161  0.56% 209
 477017 51.79% others (7079 different)
-- 
ciao,
Marco

       3  1.63% keep your viruses for yourself (bmp attachment)
sono disponibili da qualche parte i body_checks e header_checks che 
vengono usati? su qualche sito, o in qualche ng piu' appropriato...
Grazie!
Ciao
Manuel