[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Some Stats

Graeme Leith glnews030922 at highspot.net
Sat Nov 13 18:19:35 EST 2004


Summary of the 15,566 spam delivery attempts to my personal server from 
3692 hosts in the last 30 days.

If you're not using a monospaced font, the tables will be messed up. 
Viewing the message source or pasting them into notepad should let you 
see them properly.

Top 10 spam sources by rDNS:
+-------------------------+-------+----------+
| rDNS                    | Hosts | Attempts |
+-------------------------+-------+----------+
| None                    |  1719 |     5743 |
| comcast.net             |    98 |      676 |
| rr.com                  |    79 |      563 |
| charter.com             |    66 |      468 |
| pacbell.net             |    73 |      463 |
| attbi.com               |    53 |      448 |
| swbell.net              |    57 |      380 |
| ne.jp                   |    68 |      322 |
| bbtec.net               |    50 |      313 |
| dsl-verizon.net         |    42 |      277 |
+-------------------------+-------+----------+

Top 10 spam sources by country:
+---------+-------+----------+
| Country | Hosts | Attempts |
+---------+-------+----------+
| us      |   967 |     5918 |
| kr      |   738 |     2851 |
| cn      |   630 |     1384 |
| jp      |   145 |      807 |
| ca      |    86 |      732 |
| es      |   101 |      474 |
| br      |   136 |      363 |
| fr      |    84 |      356 |
| de      |    72 |      309 |
| it      |    62 |      309 |
+---------+-------+----------+

Over 99% of the attempts from Korea and China came from hosts with no 
rDNS. Only 12% of attempts from the US came from hosts with no rDNS.

Although Comcast have said they're blocking outbound port 25 from 
zombied hosts, they are still my biggest single source of spam attempts 
that can be identified using rDNS.

My box only has 3 users. Imagine how much crap is being directed at 
large ISPs.

Countries were identified using zz.countries.nerd.dk.

-- 
Evidence shows Cyveillance abuse internet resources.
I recommend unchecking their box in SpamCop reports.
Cyveillance are part of the problem.
They are not part of the solution.


More information about the SpamCop-List mailing list